Review permission model to access SCIM APIs
Changed access requirements for SCIM API endpoints ServiceProviderConfig, ResourceTypes, and Schemas to require only query-users or query-groups permissions instead of more restrictive access controls.
Review permission model to access the SCIM APIs
- access to /ServiceProviderConfig, /ResourceTYpes and /Schemas now require only query-users or query-groups.
Closes #47820
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Source: original entry ↗
More from Keycloak
Follow Keycloak to get its new changes in your feed and email digest.
Keycloak 26.8.1
Keycloak 26.8.1 includes critical security fixes addressing multiple CVEs across OIDC identity providers, fine-grained admin permissions, authentication mechanisms, and authorization services. This release resolves 18 security vulnerabilities, 10 weaknesses, and numerous bug fixes affecting token handling, admin APIs, and UI functionality.
Keycloak 26.8.0 Release
Keycloak version 26.8.0 has been released with updates and improvements to the authentication and identity platform.