univention-keycloak (3.3.3) unstable; urgency=medium

  * Bug #58698: bump version

 -- Marius Meschter <marius.meschter@univention.de>  Fri, 10 Oct 2025 09:53:08 +0200

univention-keycloak (3.3.2) unstable; urgency=medium

  * Bug #58698: add import users flag to univention-keycloak

 -- Marius Meschter <marius.meschter@univention.de>  Tue, 07 Oct 2025 14:21:40 +0200

univention-keycloak (3.3.1) unstable; urgency=medium

  * Bug #58588: fix regression on k8s deployments
  * Bug #58586: Add support for standard token exchange
  * Bug #58422: add OIDC client scope operation

 -- Juan Pedro Torres Munoz <juan.torres-munoz@univention.de>  Tue, 09 Sep 2025 11:21:18 +0200

univention-keycloak (3.3.0) UNRELEASED; urgency=medium

  * Bug #58568: UCS 5.2-3 version bump

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Tue, 02 Sep 2025 16:18:22 +0200

univention-keycloak (3.2.3) unstable; urgency=medium

  * Bug #58544: Fix exception handling of saml-client-nameid-mapper create

 -- Arvid Requate <requate@univention.de>  Tue, 26 Aug 2025 16:25:49 +0200

univention-keycloak (3.2.2) unstable; urgency=medium

  * Issue univention/dev/projects/keycloak/keycloak-app#243:
    Update univention-keycloak to 26.3.1

 -- Julia Bremer <bremer@univention.de>  Tue, 29 Jul 2025 10:31:09 +0200

univention-keycloak (3.2.1) unstable; urgency=medium

  * univention/dev/internal/team-nubus#1314: add --force flag to oidc/rp and
    saml/sp creation commands

 -- Marius Meschter <marius.meschter@univention.de>  Wed, 16 Jul 2025 13:24:50 +0200

univention-keycloak (3.2.0) UNRELEASED; urgency=medium

  * Bug #58344: UCS 5.2-2 version bump

 -- Ivan Barbecho Delgado <ivan.delgado@univention.de>  Wed, 28 May 2025 16:49:51 +0200

univention-keycloak (3.0.29) unstable; urgency=medium

  * Issue #2852: Add basic scope during OIDC client creation

 -- Michael Sowka <michael.sowka.extern@univention.de>  Fri, 09 May 2025 09:20:53 +0200

univention-keycloak (3.0.28) unstable; urgency=medium

  * Bug #58183: make use of guaranteed json output from univention-keycloak script

 -- Christian Castens <castens@univention.de>  Wed, 10 Apr 2025 10:30:53 +0200

univention-keycloak (3.0.27-5) unstable; urgency=medium

  * Bug #58183: deactivate connectionPooling while startTls is active (for upgrades)

 -- Christian Castens <castens@univention.de>  Wed, 09 Apr 2025 14:30:53 +0200

univention-keycloak (3.0.27-3) unstable; urgency=medium

  * Bug #58183: fix alias ip-subnets config in conditional kerberos authentication flow

 -- Felix Botner <botner@univention.de>  Wed, 09 Apr 2025 13:47:06 +0200

univention-keycloak (3.0.27-2) unstable; urgency=medium

  * Bug #58183: deactivate connectionPooling while startTls is active

 -- Christian Castens <castens@univention.de>  Tue, 08 Apr 2025 19:30:53 +0200

univention-keycloak (3.0.27-1) UNRELEASED; urgency=medium

  * Bug #58015 UCS 5.2-1 version bump

 -- Christian Castens <castens@univention.de>  Mon, 03 Mar 2025 10:45:31 +0100

univention-keycloak (3.0.26) unstable; urgency=medium

  * Issue univention/dev/ucs#2672: adjust link to 5.2 changelog in
    univention-keycloak-migration-status

 -- Marius Meschter <marius.meschter@univention.de>  Mon, 17 Feb 2025 14:10:47 +0100

univention-keycloak (3.0.25) unstable; urgency=medium

  * Bug #57964: avoid lower-casing null values

 -- Juan Pedro Torres Munoz <juan.torres-munoz@univention.de>  Fri, 14 Feb 2025 10:14:19 +0100

univention-keycloak (3.0.24) unstable; urgency=medium

  * Issue univention/components/keycloak-app#206: always add / in get_base_url

 -- Felix Botner <botner@univention.de>  Tue, 14 Jan 2025 19:08:46 +0100

univention-keycloak (3.0.23) unstable; urgency=medium

  * Issue univention/components/keycloak-app#206: ignore policy update errors

 -- Felix Botner <botner@univention.de>  Mon, 16 Dec 2024 09:22:14 +0100

univention-keycloak (3.0.21) unstable; urgency=medium

  * Issue univention/components/keycloak-app#206: Change settings from keycloak/server/sso/fqdn to ucs/server/sso/uri

 -- Julia Bremer <bremer@univention.de>  Sun, 08 Dec 2024 17:15:59 +0100

univention-keycloak (3.0.19) unstable; urgency=medium

  * Bug #56474: Enable keycloak to add a conditional authenticator

 -- Julia Bremer <bremer@univention.de>  Wed, 13 Nov 2024 15:56:23 +0100

univention-keycloak (3.0.17) unstable; urgency=medium

  * Issue univention/customers/dataport/team-souvap#881:
    Add option --cors-frame-ancestors to univention-keycloak

 -- Juan Pedro Torres Munoz <juan.torres-munoz@univention.de>  Fri, 11 Oct 2024 11:02:21 +0200

univention-keycloak (3.0.16) unstable; urgency=medium

  * Bug #57665: Add option --enable-user-events

 -- Arvid <requate@univention.de>  Wed, 09 Oct 2024 17:55:11 +0200

univention-keycloak (3.0.15) unstable; urgency=medium

  * Bug #57518: In `univention-keycloak`, fix the `oidc/rp` option
    `--no-frontchannel-logout`. It used to activate the frontchannel logout,
    not deactivate it.

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Thu, 15 Aug 2024 10:48:56 +0200

univention-keycloak (3.0.14) unstable; urgency=medium

  * Bug #57452: fix create_legacy_authentication_flow for keycloak v25

 -- Felix Botner <botner@univention.de>  Thu, 08 Aug 2024 09:48:37 +0200

univention-keycloak (3.0.13) unstable; urgency=medium

  * Bug #57492: Fix wrong protocol mapper for dn mapper

 -- Juan Pedro Torres Munoz <juan.torres-munoz@univention.de>  Wed, 07 Aug 2024 23:37:29 +0200

univention-keycloak (3.0.12) unstable; urgency=medium

  * Bug #57492: Added new options for OIDC client creation

 -- Juan Pedro Torres Munoz <juan.torres-munoz@univention.de>  Wed, 24 Jul 2024 10:50:42 +0200

univention-keycloak (3.0.11) unstable; urgency=medium

  * Bug #57420: Instead of just checking if there already is an existing
    "userid_mapper" check if there is a mapper already mapping the uid or the
    URN of the uid

 -- Marius Meschter <marius.meschter@univention.de>  Wed, 10 Jul 2024 10:54:22 +0200

univention-keycloak (3.0.10) unstable; urgency=medium

  * Bug #57383: Fix bug where all but one --set option in
    univention-keycloak domain-config was ignored.

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Wed, 26 Jun 2024 21:28:46 +0200

univention-keycloak (3.0.9) unstable; urgency=medium

  * Bug #57320: Make name_id_format selectable if provided by cli

 -- Julia Bremer <bremer@univention.de>  Tue, 28 May 2024 09:18:26 +0200

univention-keycloak (3.0.5) unstable; urgency=medium

  * Bug #57205: fix user ldap filter

 -- Felix Botner <botner@univention.de>  Mon, 15 Apr 2024 10:16:02 +0200

univention-keycloak (3.0.4) unstable; urgency=medium

  * Bug #56604: drop Python 2 compatibility

 -- Florian Best <best@univention.de>  Fri, 08 Mar 2024 02:13:37 +0100

univention-keycloak (3.0.3) unstable; urgency=medium

  * Bug #56928: adjust to API changes

 -- Felix Botner <botner@univention.de>  Fri, 08 Mar 2024 00:18:44 +0100

univention-keycloak (3.0.2) unstable; urgency=medium

  * Bug #56765: Switch new UMC default to Keycloak

 -- Julia Bremer <bremer@univention.de>  Fri, 08 Mar 2024 00:18:41 +0100

univention-keycloak (3.0.1) unstable; urgency=medium

  * Bug #55706: UCS 5.2-0 version bump

 -- Florian Best <best@univention.de>  Fri, 08 Mar 2024 00:12:21 +0100

univention-keycloak (2.0.2) unstable; urgency=medium

  * Bug #53127: upgrade to latest debhelper compat version

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 23:53:31 +0100

univention-keycloak (2.0.1) unstable; urgency=medium

  * Bug #55706: UCS 5.1-0 version bump

 -- Florian Best <best@univention.de>  Thu, 07 Mar 2024 22:19:33 +0100

univention-keycloak (1.0.11-1) UNRELEASED; urgency=medium

  * Bug #57118 UCS 5.0-7 version bump

 -- Philipp Hahn <hahn@univention.de>  Thu, 07 Mar 2024 15:51:55 +0100

univention-keycloak (1.0.10-7) unstable; urgency=medium

  * Bug #57100: Allow machine accounts in keycloak

 -- Felix Botner <botner@univention.de>  Mon, 04 Mar 2024 10:35:34 +0100

univention-keycloak (1.0.10-6) unstable; urgency=medium

  * Bug #57001: Add more options to `univention-keycloak init`

 -- Felix Botner <botner@univention.de>  Mon, 04 Mar 2024 10:25:09 +0100

univention-keycloak (1.0.10-5) unstable; urgency=medium

  * Bug #57001: Add more options to `univention-keycloak init`

 -- Juan Pedro Torres Munoz <juan.torres-munoz@univention.de>  Fri, 26 Jan 2024 14:53:54 +0100

univention-keycloak (1.0.10-4) unstable; urgency=medium

  * Bug #49006: Add more required oidc/rp options

 -- Florian Best <best@univention.de>  Wed, 24 Jan 2024 16:01:41 +0100

univention-keycloak (1.0.10-3) unstable; urgency=medium

  * Bug #56884: added proxy realm commands

 -- Felix Botner <botner@univention.de>  Wed, 13 Dec 2023 10:31:07 +0100

univention-keycloak (1.0.10-2) unstable; urgency=medium

  * Bug #56888: updated keycloak migration status message
    keycloak is no longer required for the update

 -- Felix Botner <botner@univention.de>  Mon, 11 Dec 2023 17:44:15 +0100

univention-keycloak (1.0.10-1) UNRELEASED; urgency=medium

  * Bug #56832: UCS 5.0-6 version bump

 -- Philipp Hahn <hahn@univention.de>  Thu, 07 Dec 2023 19:17:36 +0100

univention-keycloak (1.0.9-33) unstable; urgency=medium

  * Bug #56791: check if previous initialization finished correctly

 -- Juan Pedro Torres Munoz <juan.torres-munoz@univention.de>  Mon, 06 Nov 2023 14:47:08 +0100

univention-keycloak (1.0.9-32) unstable; urgency=medium

  * Bug #56747: Add migration status check script

 -- Julia Bremer <bremer@univention.de>  Wed, 18 Oct 2023 12:00:36 +0200

univention-keycloak (1.0.9-31) unstable; urgency=medium

  * Bug #56478: manage message bundles and login links

 -- Felix Botner <botner@univention.de>  Wed, 20 Sep 2023 13:36:00 +0200

univention-keycloak (1.0.9-30) unstable; urgency=medium

  * Bug #56478: manage message bundles and login links

 -- Felix Botner <botner@univention.de>  Fri, 08 Sep 2023 13:43:32 +0200

univention-keycloak (1.0.9-29) unstable; urgency=medium

  * Bug #56484: Adapt LDAP federation to Keycloak 22

 -- Julia Bremer <bremer@univention.de>  Thu, 24 Aug 2023 14:18:58 +0200

univention-keycloak (1.0.9-28) unstable; urgency=medium

  * Bug #56317: Added parameters for managing client authentication flow

 -- Nikola Radovanovic <radovanovic.extern@univention.de>  Thu, 27 Jul 2023 10:47:16 +0100

univention-keycloak (1.0.9-27) unstable; urgency=medium

  * Bug #56305: added command legacy-authentication-flow

 -- Felix Botner <botner@univention.de>  Wed, 19 Jul 2023 09:46:52 +0200

univention-keycloak (1.0.9-26) unstable; urgency=medium

  * Bug #56317: Added parameters for managing client authentication flow

 -- Nikola Radovanovic <radovanovic.extern@univention.de>  Mon, 17 Jul 2023 09:47:53 +0100

univention-keycloak (1.0.9-25) unstable; urgency=medium

  * Bug #56132: Added more parameters for creating SAML SPs to
    univention-keycloak

 -- Julia Bremer <bremer@univention.de>  Tue, 27 Jun 2023 12:53:17 +0200

univention-keycloak (1.0.9-22) unstable; urgency=medium

  * Bug #56132: Added parameters for creating SAML SPs to
    univention-keycloak

 -- Felix Botner <botner@univention.de>  Fri, 23 Jun 2023 13:11:27 +0200

univention-keycloak (1.0.9-21) unstable; urgency=medium

  * Bug #56132: Added parameters for creating SAML SPs to
    univention-keycloak

 -- Nikola Radovanovic <radovanovic.extern@univention.de>  Mon, 22 Jun 2023 06:33:12 +0100

univention-keycloak (1.0.9-20) unstable; urgency=medium

  * Bug #56132: added command get-keycloak-base-url

 -- Felix Botner <botner@univention.de>  Fri, 09 Jun 2023 12:18:15 +0200

univention-keycloak (1.0.9-18) unstable; urgency=medium

  * Bug #56096: added user-attribute-ldap-mapper command

 -- Felix Botner <botner@univention.de>  Tue, 06 Jun 2023 16:04:30 +0200

univention-keycloak (1.0.9-17) unstable; urgency=medium

  * Bug #56074: SimpleSAMLPHP as a service provider in Keycloak

 -- Nikola Radovanovic <radovanovic.extern@univention.de>  Mon, 05 Jun 2023 18:32:37 +0100

univention-keycloak (1.0.9-14) unstable; urgency=medium

  * Bug #56096: added user-attribute-ldap-mapper command

 -- Felix Botner <botner@univention.de>  Mon, 05 Jun 2023 12:02:44 +0200

univention-keycloak (1.0.9-13) unstable; urgency=medium

  * Bug #56096: fixed urlencoding

 -- Felix Botner <botner@univention.de>  Mon, 05 Jun 2023 10:06:29 +0200

univention-keycloak (1.0.9-12) unstable; urgency=medium

  * Bug #56096: fixed urlencoding

 -- Felix Botner <botner@univention.de>  Mon, 05 Jun 2023 09:39:48 +0200

univention-keycloak (1.0.9-11) unstable; urgency=medium

  * Bug #56096: added user-attribute-ldap-mapper command

 -- Felix Botner <botner@univention.de>  Thu, 25 May 2023 16:50:46 +0200

univention-keycloak (1.0.9-10) unstable; urgency=medium

  * Bug #56066: Don't set loginHtml via REST-API, do it via language configuration file within the app

 -- Julia Bremer <bremer@univention.de>  Mon, 08 May 2023 09:00:22 +0200

univention-keycloak (1.0.9-9) unstable; urgency=medium

  * Bug #56022: respect umc/saml/sp-server for umc saml client in
    univention-keycloak init

 -- Nikola Radovanovic <radovanovic.extern@univention.de>  Fri, 05 May 2023 09:21:05 +0100

univention-keycloak (1.0.9-8) unstable; urgency=medium

  * Bug #56022: Allow keycloak to run under the same fqdn as the host

 -- Nikola Radovanovic <radovanovic.extern@univention.de>  Thu, 27 Apr 2023 19:43:26 +0100

univention-keycloak (1.0.9-7) unstable; urgency=medium

  * Bug #55866: run keycloak init only once in domain

 -- Nikola Radovanovic <radovanovic.extern@univention.de>  Mon, 20 Mar 2023 10:18:31 +0100

univention-keycloak (1.0.9-6) unstable; urgency=medium

  * Bug #55866: run keycloak init only once in domain

 -- Felix Botner <botner@univention.de>  Fri, 17 Mar 2023 20:20:44 +0100

univention-keycloak (1.0.9-5) unstable; urgency=medium

  * Bug #55866: run keycloak init only once in domain

 -- Felix Botner <botner@univention.de>  Fri, 17 Mar 2023 13:12:36 +0100

univention-keycloak (1.0.9-4) unstable; urgency=medium

  * Bug #55866: run keycloak init only once in domain

 -- Felix Botner <botner@univention.de>  Fri, 10 Mar 2023 15:09:47 +0100

univention-keycloak (1.0.9-3) unstable; urgency=medium

  * Bug #55663: Register self-service extension

 -- Felix Botner <botner@univention.de>  Thu, 02 Mar 2023 14:21:17 +0100

univention-keycloak (1.0.9-2) unstable; urgency=medium

  * Bug #55663: Register univention-ldap-mapper

 -- Nikola Radovanovic <radovanovic.extern@univention.de>  Mon, 06 Feb 2023 12:11:31 +0100

univention-keycloak (1.0.9-1) unstable; urgency=medium

  * Bug #31771: migrate tabs to spaces

 -- Florian Best <best@univention.de>  Fri, 03 Feb 2023 04:17:44 +0100

univention-keycloak (1.0.8) unstable; urgency=medium

  * Bug #55570: Make it possible to get metadata from file instead of url

 -- Julia Bremer <bremer@univention.de>  Mon, 30 Jan 2023 10:42:45 +0100

univention-keycloak (1.0.7) unstable; urgency=medium

  * Bug #55519: Solved error while trying to activate 2FA

 -- Juan Pedro Torres <torres-munoz.extern@univention.de>  Tue, 17 Jan 2023 10:34:08 +0100

univention-keycloak (1.0.6) unstable; urgency=medium

  * Bug #55513: univention-keycloak now works without UCR

 -- Dirk Wiesenthal <wiesenthal@univention.de>  Mon, 16 Jan 2023 16:22:01 +0100

univention-keycloak (1.0.5) unstable; urgency=medium

  * Bug #55569: univention-keycloak should evaluate keycloak/sso/server/fqdn

 -- Julia Bremer <bremer@univention.de>  Fri, 13 Jan 2023 15:28:34 +0100

univention-keycloak (1.0.4) unstable; urgency=medium

  * Bug #55488:  Use start TLS as default for LDAP federation.

 -- Nikola Radovanovic <radovanovic.extern@univention.de>  Fri, 09 Dec 2022 13:32:10 +0100

univention-keycloak (1.0.3) unstable; urgency=medium

  * Bug #55478: Set login page title and tabname

 -- Julia Bremer <bremer@univention.de>  Tue, 06 Dec 2022 17:34:20 +0100

univention-keycloak (1.0.2) unstable; urgency=medium

  * Bug #55458: modify default mappers on ldap user federation

 -- Juan Pedro Torres <torres-munoz.extern@univention.de>  Fri, 25 Nov 2022 15:35:13 +0100

univention-keycloak (1.0.1) unstable; urgency=medium

  * Bug #55431: Specify specific uid mapper for the UMC

 -- Julia Bremer <bremer@univention.de>  Wed, 16 Nov 2022 18:12:37 +0100

univention-keycloak (1.0.0) unstable; urgency=medium

  * Bug #55383: Add univention-keycloak package

 -- Julia Bremer <bremer@univention.de>  Fri, 04 Nov 2022 09:00:19 +0100
