# Keycloak Version Supported by MOSIP and Plans to Upgrade from Keycloak 16

**URL:** <https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504>\
**Category:** Support\
**Created:** [January 20, 2026, 5:35am UTC](https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504 "2026-01-20T05:35:02Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Harsh](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/harsh/32/1823_2.png) [@Harsh](https://community.mosip.io/u/Harsh)\
**Post date:** [January 20, 2026, 5:35am UTC](https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504/1 "2026-01-20T05:35:02Z")

</div>

Hello MOSIP team,  
I have a few queries regarding Keycloak support in MOSIP:

- What is the latest Keycloak version officially supported and tested with the current MOSIP release?
- Are there plans or a roadmap to upgrade MOSIP to support a more recent Keycloak version due to security vulnerability in Keycloak 16?
- And which version is currently recommended for production?

Best Regards,  
Harshal

---

<div class="post-metadata">

**Author:** ![Harsh](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/harsh/32/1823_2.png) [@Harsh](https://community.mosip.io/u/Harsh)\
**Post date:** [January 20, 2026, 12:50pm UTC](https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504/2 "2026-01-20T12:50:08Z")

</div>

Hi team,  
Can someone please look into my earlier query.

Best Regards,  
Harshal

---

<div class="post-metadata">

**Author:** ![Harsh](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/harsh/32/1823_2.png) [@Harsh](https://community.mosip.io/u/Harsh)\
**Post date:** [January 27, 2026, 10:45am UTC](https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504/3 "2026-01-27T10:45:18Z")

</div>

Hi Team,  
Can someone assist me with the query.

Best Regards,  
Harshal

---

<div class="post-metadata">

**Author:** ![swethan1718](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/swethan1718/32/1621_2.png) [@swethan1718](https://community.mosip.io/u/swethan1718)\
**Post date:** [January 30, 2026, 6:03am UTC](https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504/4 "2026-01-30T06:03:26Z")

</div>

Hello Harsh we are using a custom version of keycloak, we have plans for keycloak hardening in our security roadma

mosip/keycloak --version “7.1.18”  
from infra

---

<div class="post-metadata">

**Author:** ![Harsh](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/harsh/32/1823_2.png) [@Harsh](https://community.mosip.io/u/Harsh)\
**Post date:** [February 4, 2026, 6:59am UTC](https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504/5 "2026-02-04T06:59:25Z")

</div>

Thanks for the response. You mentioned plans for Keycloak hardening. Could you please share hardening guide if available?

Best Regards,  
Harshal

---

<div class="post-metadata">

**Author:** ![Harsh](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/harsh/32/1823_2.png) [@Harsh](https://community.mosip.io/u/Harsh)\
**Post date:** [February 9, 2026, 5:23am UTC](https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504/6 "2026-02-09T05:23:43Z")

</div>

Hi Team,  
Can someone assist me with the above query.

Best Regards,  
Harshal

---

<div class="post-metadata">

**Author:** ![Harsh](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/harsh/32/1823_2.png) [@Harsh](https://community.mosip.io/u/Harsh)\
**Post date:** [February 16, 2026, 6:37am UTC](https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504/7 "2026-02-16T06:37:00Z")

</div>

Hi Team,  
Can someone help me with the above query.

Best Regards,  
Harshal

---

<div class="post-metadata">

**Author:** ![Praful\_Rakhade](https://dub1.discourse-cdn.com/flex017/user_avatar/community.mosip.io/praful_rakhade/32/1065_2.png) [@Praful\_Rakhade](https://community.mosip.io/u/Praful_Rakhade)\
**Post date:** [February 18, 2026, 2:00pm UTC](https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504/8 "2026-02-18T14:00:43Z")

</div>

Hi @Harsh,

Apologies for the delayed response, and thank you for your patience.

We are currently using a custom version of **Keycloak 7.1.18** with MOSIP. Please note that Keycloak is an external service and is not maintained by the MOSIP team.

Bitnami maintained this particular distribution. However, Bitnami has discontinued support for several legacy container images, and the older Keycloak images are no longer actively maintained. You can refer to the following links for more details:

- Bitnami legacy Keycloak images (no longer updated):  
[https://hub.docker.com/r/bitnamilegacy/keycloak](https://hub.docker.com/r/bitnamilegacy/keycloak)
- Bitnami Keycloak Helm chart repository:  
[https://hub.docker.com/r/bitnamicharts/keycloak](https://hub.docker.com/r/bitnamicharts/keycloak)
- Community discussion regarding Bitnami deprecation:  
[https://github.com/keycloak/keycloak/discussions/42170](https://github.com/keycloak/keycloak/discussions/42170)

Given this situation, we recommend carefully evaluating its suitability, especially for production deployments. If Keycloak is required for production use, it is advisable to use an officially supported enterprise distribution or the latest supported release.

Please feel free to reach out if you need any further clarification from our side.

Best regards,  
**Praful Rakhade**  
_Team MOSIP_

---

<div class="post-metadata">

**Author:** ![system](https://europe1.discourse-cdn.com/flex017/uploads/mosip1/original/1X/f60a343830fe848c9a68e2d1cc654d0cb7fbbaf2.svg) [@system](https://community.mosip.io/u/system)\
**Post date:** [February 28, 2026, 2:01pm UTC](https://community.mosip.io/t/keycloak-version-supported-by-mosip-and-plans-to-upgrade-from-keycloak-16/2504/9 "2026-02-28T14:01:38Z")

</div>

Closed on February 28, 2026, 2:01pm UTC

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.
