Keycloak SSO
Adds Keycloak single sign-on to Payload CMS 3 via an OIDC auth strategy with PKCE, silent token refresh, and permission-based access control.
Community
Payload CMS compatibility
Which Payload versions each release of this plugin supports.
| Payload major | Latest compatible version | Published |
|---|---|---|
| v3 | 1.0.1 | Sep 16, 2026 |
Full version matrix
Every published version, newest first.
| Version | Payload | Status |
|---|---|---|
| 1.0.1 | v3 from 3.84.1 | stable |
| 1.0.0 | v3 from 3.84.1 | stable |