Upgrade Keycloak realm configuration

Some UDS Identity Config upgrades require manual changes to an existing Keycloak realm. For example, when a full realm re-import isn’t possible and upstream Keycloak changes require manual intervention on a running instance.

When manual realm changes are required, the release notes for the corresponding UDS Core version document the specific steps under the Identity Config updates section.

When manual changes are needed

Manual realm changes are typically required when:

• A Keycloak version upgrade introduces new features that need to be enabled on existing clients or realms
• A breaking change in Keycloak requires updating roles, authentication flows, or client configurations
• New security settings must be applied to an existing realm after initial import

Related documentation

• Release Notes - version-specific changes including identity-config migration steps
• Upgrade Overview - general upgrade procedures and checklists