# Keycloak 26.2.0 released

DevFeed: [Keycloak 26.2.0 released](<https://devfeed.tech/articles/keycloak-26-2-0-released-31696.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2025/04/keycloak-2620-released>)

Author: Keycloak Team

Published: 2025-04-11T00:00:00Z

Content type: release

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [releases](<https://devfeed.tech/topics/releases.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [version](<https://devfeed.tech/topics/version.md>)

Tags: [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [keycloak-release](<https://devfeed.tech/tags/keycloak-release.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [permissions](<https://devfeed.tech/tags/permissions.md>), [releases](<https://devfeed.tech/tags/releases.md>), [saml](<https://devfeed.tech/tags/saml.md>), [sso](<https://devfeed.tech/tags/sso.md>), [token](<https://devfeed.tech/tags/token.md>), [version](<https://devfeed.tech/tags/version.md>)

## AI overview

Keycloak 26.2.0 adds support for Standard Token Exchange, initially limited to internal-token exchanges, and introduces version 2 of fine-grained administrator permissions. The release also includes guidance for metrics and Grafana dashboards.

## Source excerpt

To download the release go to Keycloak downloads. Highlights Supported Standard Token Exchange In this release, we added support for the Standard token exchange! The token exchange feature was in preview for a long time, so we are glad to finally support the standard token exchange. For now, this is limited to exchanging the Internal token to internal token compliant with the Token exchange specification. It does not yet cover use cases related to identity brokering or subject impersonation. We hope to support even more token exchange use cases in subsequent releases. For more details, see the Standard token exchange. For information on how to upgrade from the legacy token exchange used in previous Keycloak versions, see the Upgrading Guide. Fine-grained admin permissions supported This release introduces support for a new version of fine-grained admin permissions. Version 2 (V2) provides enhanced flexibility and control over administrative access within realms. With this feature, administrators can define permissions for administering users, groups, clients, and roles without relying on broad administrative roles. V2 offers the same level of access control over realm resources as the previous version, with plans to extend its capabilities in future versions. Some key points follow: Centralized Admin Console Management - New Permissions section was introduced to allow management from a single place without having to navigate to different places in the Admin Console. Improved manageability - Administrators can more easily search and evaluate permissions when building a permission model for realm resources. Resource-Specific and Global Permissions - Permissions can be defined for individual resources (such as specific users or groups), or entire resource types (such as all users or all groups). Explicit Operation Scoping - Permissions are now independent, removing hidden dependencies between operations. Administrators must assign each scope explicitly, making it easie