diff --git a/README.md b/README.md
index bb38066fcec10a4f2859e21f1b27ae6e5b0bf88e..475314fef3327f184a0360507e2cecbdaa5cc714 100644
--- a/README.md
+++ b/README.md
@@ -78,6 +78,10 @@ your browser.
 ## Change log
 Omitted versions are plain bugfix releases with only minor changes and fixes.
 
+### v0.6.0
+- Keycloak based user management
+- no dependencies with the NOMAD CeE Repository
+
 ### v0.5.2
 - allows to download large files over longer time period
 - streamlined deployment without API+GUI proxy
diff --git a/docs/introduction.md b/docs/introduction.md
index 63b1a942fb71470f02718f3de69e9d0974d61f5f..c1e943b9fdccd1c02314045bedaaacaf885f3baa 100644
--- a/docs/introduction.md
+++ b/docs/introduction.md
@@ -83,7 +83,9 @@ processing of uploaded files and therein contained calculations. We use
 
 ### Keycloak
 
-TODO
+[Keycloak](https://www.keycloak.org/) is used for user management. It manages users and
+provide functions for registering, password forget, editing user accounts, and single
+sign on of fairdi@nomad and other related services.
 
 
 ### flask, et al.
diff --git a/ops/deployments/nomad.migration.values.yaml b/ops/deployments/nomad.migration.values.yaml
index 3d1340edca02ab6af6ad81e85c092679a02c157e..b0d31cb7b0e0706d27916c769cee5d1f9f894d33 100644
--- a/ops/deployments/nomad.migration.values.yaml
+++ b/ops/deployments/nomad.migration.values.yaml
@@ -1,12 +1,12 @@
+services:
+  apiSecret: 'nomad-keycloak-prod-api-secret'
+
 proxy:
   nodePort: 30002
   external:
     host: "labdev-nomad.esc.rzg.mpg.de"
     path: "/fairdi/nomad/migration"
 
-api:
-  adminPasswordSecret: 'nomad-production-repository-password'
-
 gui:
   debug: true