The first part of this talk describes the latest feature of Keycloak: Passkey. We will demonstrate how to use Passkey for secure passwordless authentication. The first part of this talk also describe ongoing working item by Keycloak's community: OAuth 2.1, the next version of OAuth 2.0. We will demonstrate how to use OAuth 2.1 for secure authorizaion of API accesses.

In Europe, interest in De-centralized Identity (DID) and Self-Soverin Identity (SSI) has increased because the European Commission released the European Digital Identity Wallet Architecture and Reference Framework for eIDASv2. To ensure Keycloak is ready for this new identity paradigm, the Keycloak's community is working on supporting features for DID and SSI. The first part of this talk describes this work briefly.

The second part of this talk gives a glimpse of an advanced fine-grained authorization with Keycloak and Open Policy Agent (OPA).

We will also present these work-in-progress topics in a demo.