# Keycloak 26.1.3 released

DevFeed: [Keycloak 26.1.3 released](<https://devfeed.tech/articles/keycloak-26-1-3-released-31687.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2025/02/keycloak-2613-released>)

Author: Keycloak Team

Published: 2025-02-28T00:00:00Z

Content type: release

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [password reset](<https://devfeed.tech/topics/password-reset.md>), [migration](<https://devfeed.tech/topics/migration.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [bugs](<https://devfeed.tech/tags/bugs.md>), [cve](<https://devfeed.tech/tags/cve.md>), [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [keycloak-release](<https://devfeed.tech/tags/keycloak-release.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [migration](<https://devfeed.tech/tags/migration.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [password](<https://devfeed.tech/tags/password.md>), [release](<https://devfeed.tech/tags/release.md>), [saml](<https://devfeed.tech/tags/saml.md>), [sso](<https://devfeed.tech/tags/sso.md>), [version](<https://devfeed.tech/tags/version.md>)

## AI overview

Keycloak 26.1.3 is released with a new default that forces federated users to log in again after resetting credentials. The release also lists resolved bugs and security issues, including CVEs and fixes affecting the admin console, authentication, CI, MySQL configuration, and JWT organization claims.

## Source excerpt

To download the release go to Keycloak downloads. Highlights Send Reset Email force login again for federated users after reset credentials In version 26.1.1 a new configuration option was added to the reset-credential-email (Send Reset Email) authenticator to allow changing the default behavior after the reset credentials flow. Now the option force-login (Force login after reset) is adding a third configuration value only-federated, which means that the force login is true for federated users and false for the internal database users. The new behavior is now the default. This way all users managed by user federation providers, whose implementation can be not so tightly integrated with Keycloak, are forced to login again after the reset credentials flow to avoid any issue. This change in behavior is due to the secure by default policy. For more information, see Enable forgot password. Upgrading Before upgrading refer to the migration guide for a complete list of changes. All resolved issues Bugs #32535 Invalid migration export for empty database core #36405 Redirect after linking account account/ui #36527 Viewing user events requires `view-realm`-role admin/ui #36585 Keycloak user attribute key broken in Keycloak 26.1.0 admin/ui #36703 When linking IDP to an organization hide on login sets as off admin/ui #36709 SAML2 Client Signing Keys Config does not accept PEM import admin/ui #36842 Comboxes do not display selected option after reset admin/ui #36927 MeterFilter is configured after a Meter has been registered dist/quarkus #36965 CVE-2025-0736 Error during JGroups channel creation may reveal secure information #36985 Admin console: unable to edit user profile attribute either on the form or the JSON editor. admin/ui #37029 CI fails with "Problem creating zip: Execution exception: Java heap space" ci #37066 Error on import of a public key (pem) authentication #37128 Customized quarkus.properties for MySQL cause "Unable to find the JDBC driver (org.h2.Driver)"，The s