Maintenance for UCS 5.0 has ended as announced. This marks the end of the regular support period for this version – and it is the right time to move to the current release. We recommend upgrading to UCS 5.2 so that you continue to receive regular updates, security fixes, and a modern platform.
Table of Contents
Maintenance for UCS 5.0 Ends as Announced
UCS 5.0 has reached its lifecycle as planned:
- UCS 5.0 is end-of-life.
- Maintenance for UCS 5.0-10 ended on February 5, 2026.
Details on maintenance periods can be found in the official overview: https://docs.software-univention.de/n/en/maintenance/ucs.html
Why It Is Important to Run a Maintained Version
In short: more security with less effort.
With UCS 5.2, you stay aligned with the regularly delivered security and platform updates. This reduces operational risk, avoids time-consuming one-off patching, and increases planning reliability in operations.
The bundled changes – including security updates and CVEs – can be found in the changelogs of the patch level releases:
- 5.2-1 (https://docs.software-univention.de/release-notes/5.2-1/en/index.html)
- 5.2-2 (https://docs.software-univention.de/release-notes/5.2-2/en/index.html)
- 5.2-3 (https://docs.software-univention.de/release-notes/5.2-3/en/index.html)
- 5.2-4 (https://docs.software-univention.de/release-notes/5.2-4/en/index.html)
Why UCS 5.2 Is the Recommended Target Version
With UCS 5.2, a significantly further developed platform is available that not only integrates current technologies but also offers many practical improvements for day-to-day operations.
A central component is the full integration of Keycloak, which replaces the previous identity provider components. In addition, there are significantly expanded possibilities for Single Sign-on (SSO) and authentication – including OIDC, SAML, and Kerberos, as well as support for federation and conditional authentication.
In daily operations, administrators benefit from improvements such as type validation in UCR, which makes configuration errors visible more quickly, as well as a modernized web interface with clearer navigation.
Since UCS 5.0, numerous feature highlights have also been added, including OIDC for the UCS web interface, optimized selective synchronization in the AD Connection, and blocklists in UDM.
For transition phases, it is important to note that mixed domains with UCS 5.0 and UCS 5.2 continue to be supported. At the same time, further development and maintenance of new features take place exclusively on the 5.2 branch, which is regularly updated with patch level releases.
Further information can be found in this blog post: https://www.univention.com/blog-en/2025/02/univention-corporate-server-5-2/
An Overview of What Has Been Added Since UCS 5.0
With UCS 5.2, you benefit from a wide range of improvements that are particularly noticeable in the daily operation of large and grown environments:
Faster work in large directories
Especially in large environments, every minute counts. UCS 5.2 significantly accelerates working with many objects and large groups. Changes in UDM are carried out more quickly, large groups can be managed more reliably, and administrative routine tasks take less time overall.
Technical details:
- 5.2-1 Release Notes (Improvements around large groups) (https://docs.software-univention.de/release-notes/5.2-1/en/index.html)
- 5.2-2 Release Notes (Further improvements for large installations) (https://docs.software-univention.de/release-notes/5.2-2/en/index.html)
Clearer root cause analysis in operations
As systems grow, typical bottlenecks emerge. UCS 5.2 expands diagnostic capabilities and helps you identify causes of performance issues more quickly, resolve them more precisely, and reproduce problems more reliably.
Technical details:
- 5.2-2 Release Notes (Diagnostics around LMDB fragmentation) (https://docs.software-univention.de/release-notes/5.2-2/en/index.html)
More robust integrations through stable object references
In integrated system landscapes, stable assignments are crucial. UCS 5.2 introduces a globally unique identifier for this purpose. This reduces fragile assignments during renaming or OU changes, simplifies debugging in connectors and logs, and provides a clean foundation for integrations.
Technical details:
- 5.2-2 Release Notes (univentionObjectIdentifier) (https://docs.software-univention.de/release-notes/5.2-2/en/index.html)
More convenience in mixed AD environments
Many UCS environments operate alongside Active Directory. UCS 5.2 makes such setups more predictable and stable. Improvements in the AD Connector and in handling complex directory structures increase operational stability even in demanding scenarios.
Technical details:
- 5.2-3 Release Notes (https://docs.software-univention.de/release-notes/5.2-3/en/index.html)
- 5.2-3 Changelog (Details and specific changes) (https://docs.software-univention.de/changelog/5.2-3/en/index.html)
Delegation instead of full access
Organizations that want to distribute administration across multiple teams benefit from the delegative administration introduced in UCS 5.2-4 (Preview). This allows responsibilities to be more clearly separated, reduces the need for full admin rights, and improves the scalability of administration across OUs and teams.
Technical details:
- 5.2-4 Release Notes (Delegative Administration Preview) (https://docs.software-univention.de/release-notes/5.2-4/en/index.html)
More safety against user errors
UCS 5.2 introduces a recycle bin mechanism for central object types. Deleted objects can be restored more quickly, downstream impacts are reduced, and the effort required after accidental deletions is significantly lowered.
Technical details:
- Recycle Bin (in the manual with reference to its introduction via errata) (https://docs.software-univention.de/manual/5.2/en/manual.pdf)
Clear platform boundaries and less legacy overhead
With UCS 5.2-4, outdated components are deliberately phased out, such as PXE server support. This reduces the operational surface that needs to be maintained and creates clearer support boundaries, while automated installations remain possible via installation profiles.
Technical details:
- 5.2-4 Release Notes (PXE discontinued, unattended still possible) (https://docs.software-univention.de/release-notes/5.2-4/en/index.html)
What You Should Do Now
If you are currently still using UCS 5.0, we recommend planning the next steps promptly:
- Plan the upgrade to UCS 5.2.
- Check your apps, integrations, and customizations for compatibility.
- If you use SSO: perform the migration to Keycloak before upgrading.
Helpful guidance and exchange opportunities can be found here:
https://help.univention.com/t/ucs-5-2-0-wurde-veroffentlicht/23808
Further Links
- UCS maintenance periods (DE):
https://docs.software-univention.de/n/en/maintenance/ucs.html - UCS 5.2 blog (DE):
https://www.univention.com/blog-en/2025/02/univention-corporate-server-5-2/ - UCS 5.2-0 Release Notes (DE):
https://docs.software-univention.de/release-notes/5.2-0/en/ - Migration Guide: SimpleSAMLphp → Keycloak:
https://docs.software-univention.de/keycloak-migration/ - Example “Patch level releases” communication (EN):
https://www.univention.com/blog-en/2025/03/univention-corporate-server-5-2-1-and
With the move to UCS 5.2, you not only secure ongoing support, but also benefit from a modern, powerful, and future-proof platform.
