Keycloak compatibility considerations for Camunda
When upgrading Keycloak in a Camunda Self-Managed environment, follow the official Keycloak upgrade guide.
Before upgrading, review the Camunda supported environments to ensure the Keycloak version you plan to use is compatible with your Camunda release.
Keycloak upgrades can affect how users and permissions are resolved in Camunda components such as Optimize and Web Modeler. Review the following constraint carefully before proceeding.
When upgrading Keycloak, ensure that you reuse the existing Keycloak database.
Do not upgrade by creating a new Keycloak instance and re-importing users from external identity providers (for example, LDAP).
Doing so will generate new internal Keycloak IDs, which can prevent users from accessing existing data such as Optimize collections and Web Modeler projects.