Version 1.1.0
Requirements
- Keycloak 26.6 or later
New Features
Location Condition Authenticator
A new conditional authenticator that gates authentication flows based on the geographic location of the client’s IP address.
Configure it in any Keycloak authentication flow under Condition - GeoAware Location.
Match by:
- Country ISO code (e.g.
DE,US) - Country name (e.g.
Germany) - Continent name (e.g.
Europe)
Options:
- Configurable list of allowed values (multi-value)
- Inverse decision: revert the match result to block instead of allow, or vice versa
When no GeoIP provider is available for the client’s IP, the condition evaluates to false (fails closed).
Changes since 1.0.0
- Added Location Condition authenticator
- Fixed
Platform.getTmpDirectory()removal in Keycloak 26.6: MaxMind autodownload now usesKeycloakApplication.getTmpDirectory() - Extended test matrix to cover Keycloak 26.6.0, 26.6.1, 26.6.2 and 26.6.3