Authentication flows of realms created in previous version are not upgraded...

[zam...@gmail.com]

Hello

I noticed that even built in authentication flows (e.g. "browser") of realms created in previous versions of Keycloak *are not upgraded* to be the same as authentication flows of the realms created in the newer version...

For example, 
* in Keycloak 26.2.5 create a realm "A"

* upgrade Keycloak to 26.3.1, and then create a realm "B"

* notice that "browser" authentication flow between realms "A" and "B"

And its not just a "browser" flow...

Is this by design or is this a bug?

Thanks

z

[Niko Köbler]

It's by design.

[Thomas Darimont]

It's documented here: https://www.keycloak.org/docs/latest/upgrading/#default-browser-flow-changes-2fa-to-include-webauthn-and-recovery-codes