# What's Coming To Keycloak

DevFeed: [What's Coming To Keycloak](<https://devfeed.tech/articles/what-s-coming-to-keycloak-31579.md>)

Original publisher: [Read original article](<https://www.keycloak.org/2019/09/2019-roadmap>)

Author: Stian Thorgersen

Published: 2019-09-03T00:00:00Z

Content type: opinion

Language: en

Sources: [Keycloak Blog](<https://devfeed.tech/sources/keycloak-blog.md>)

Topics: [Keycloak](<https://devfeed.tech/topics/keycloak.md>), [account](<https://devfeed.tech/topics/account.md>), [React](<https://devfeed.tech/topics/react.md>), [WebAuthn](<https://devfeed.tech/topics/webauthn.md>), [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [Operator Lifecycle Manager](<https://devfeed.tech/topics/olm.md>), [API](<https://devfeed.tech/topics/api.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [LDAP](<https://devfeed.tech/topics/ldap.md>), [health checks](<https://devfeed.tech/topics/health-checks.md>), [Testing](<https://devfeed.tech/topics/testing.md>)

Tags: [account](<https://devfeed.tech/tags/account.md>), [api](<https://devfeed.tech/tags/api.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [automated](<https://devfeed.tech/tags/automated.md>), [console](<https://devfeed.tech/tags/console.md>), [encryption](<https://devfeed.tech/tags/encryption.md>), [health-checks](<https://devfeed.tech/tags/health-checks.md>), [idm](<https://devfeed.tech/tags/idm.md>), [kerberos](<https://devfeed.tech/tags/kerberos.md>), [keycloak](<https://devfeed.tech/tags/keycloak.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [kubernetes-secrets](<https://devfeed.tech/tags/kubernetes-secrets.md>), [ldap](<https://devfeed.tech/tags/ldap.md>), [openid-connect](<https://devfeed.tech/tags/openid-connect.md>), [operator](<https://devfeed.tech/tags/operator.md>), [password](<https://devfeed.tech/tags/password.md>), [rest-api](<https://devfeed.tech/tags/rest-api.md>), [saml](<https://devfeed.tech/tags/saml.md>), [software](<https://devfeed.tech/tags/software.md>), [sso](<https://devfeed.tech/tags/sso.md>), [usability](<https://devfeed.tech/tags/usability.md>), [user-experience](<https://devfeed.tech/tags/user-experience.md>), [vault](<https://devfeed.tech/tags/vault.md>)

## AI overview

Keycloak's 2019 roadmap outlines planned work on a new React-based account console, WebAuthn authentication, a Kubernetes operator, external vault integration, user profiles, metrics and health checks, and improved automated testing and builds.

## Source excerpt

New Account Console and Account REST API The current account console is getting dated. It is also having issues around usability and being hard to extend. For this reason we had the UXD team at Red Hat develop wireframes for a new account console. The new console is being implemented with React.js providing a better user experience as well as making it easier to extend and customise. JIRA - Account Console JIRA - Account REST API WebAuthn We are working towards adding WebAuthn support both for two factor authentication and passwordless experience. This task is not as simple as adding an authenticator for WebAuth, but will also require work on improving authentication flows and the account console. Design proposal - Authentication flow improvements Design proposal - WebAuthn Authenticator Design proposal - WebAuthn Two factor JIRA - Two factor JIRA - Passwordless Operator Operators are becoming an important way to manage software running on Kubernetes and we are working on an operator for Keycloak. The aim is to have an operator published on OperatorHub.io soon which provides basic install and seamless upgrade capabilities. This will be based on the awesome work done by the Red Hat Integreatly team. JIRA Integreatly Keycloak Operator Vault At the moment to keep credentials such as LDAP bind credentials more secure it is required to encrypt the whole database. This can be complex and can also have a performance overhead. We are working towards enabling loading credentials, such as LDAP bind credential and SMTP password, from an external vault. We're providing a built-in integration with Kubernetes secrets as well as an SPI allowing integrating with any vault provider. In the future we will also provide the option to encrypt other more dynamic credentials at rest in the database. JIRA - Vault JIRA - Encryption at rest User Profile Currently there's no single place to define user profiles for a realm. To resolve this we are planning to introduce the Profile SPI, which w