Keycloak's new stateless feature eliminates the need for an external Infinispan cluster, enabling simpler multi-cluster deployments backed only by a synchronously replicated database.

Stronger security for the Identity Brokering API * Progress on Verifiable Credentials (OID4VCI) (experimental) * Cross-domain token exchange with Identity Assertion JWT Grant (experimental) * Automate user provisioning with the SCIM API (preview)

Keycloak can now act as an OpenID Shared Signals Framework Transmitter, federating realm, user, session and credential events to downstream services as signed Security Event Tokens.