F
Release 1.70.1
FusionAuth 1.70.1 fixes the Kafka integration in the Docker image.
Identity
W
Admin Portal SCIM LogsView your full SCIM request and response payloads from your identity
Admin Portal SCIM LogsView your full SCIM request and response payloads from your identity provider directly in the Admin Portal to debug provisioning issues. Read more
W
November 4, 2026Admin Portal SCIM LogsView your full SCIM request and response payloads fr
November 4, 2026Admin Portal SCIM LogsView your full SCIM request and response payloads from your identity provider directly in the Admin Portal to debug provisioning issues.Read more
Z
v4.20.1
4.20.1 (2026-11-03) Bug Fixes apply log level and masking to OTEL log export (#12997) (64b3915), closes #12045 #12996 #12045 #12996 drop user search trigger on session creation (#13027) (709968c), closes #9635 #6537 login: keep the sessions cookie within the browser size limit (#12995) (4930911), closes #12968 #12656 #12735 #12520 login: replace deepmerge in i18n message merging (#13013) (7c6ca4b)…
W
WorkOS MCP Auth supports Claude auto-connectMCP Auth now supports Claude auto-connect, ext
WorkOS MCP Auth supports Claude auto-connectMCP Auth now supports Claude auto-connect, extending Enterprise-Managed Authorization to organizations whose IdP doesn’t support Cross App Access. Read more
W
November 3, 2026WorkOS MCP Auth supports Claude auto-connectMCP Auth now supports Claude a
November 3, 2026WorkOS MCP Auth supports Claude auto-connectMCP Auth now supports Claude auto-connect, extending Enterprise-Managed Authorization to organizations whose IdP doesn’t support Cross App Access.Read more
A
2.4.4
Four of the SQL backends in the supported list could not create their own schema, and PostgreSQL was rewriting four tables on every restart. Upgrading is recommended for every SQL deployment. The first boot after this release emits a small, one-time set of ALTER COLUMN statements and nothing on every boot after; see the upgrade notes at the end. Fixed char(36) columns were retyped on every single…
C
v4.25.0
Changelog Features 317188b feat(auth): redesign the sign-in, sign-up and forget pages and fix dark mode f231a93 feat(dcr): inherit EnableSigninSession and EnableWebAuthn from default application 20564f4 feat(helm): probe /api/health with a startup probe and configurable timings adc3f3e feat(helm): support service annotations (#5904) de6b49b feat(web): add AutoComplete for SAML attributes value (#5…
A
added Multi-Factor Authentication: Exponential Backoff for Phone MFA SMS Delivery SMS Frau
added Multi-Factor Authentication: Exponential Backoff for Phone MFA SMS Delivery SMS Fraud Protection with Exponential Backoff Auth0 now supports SMS Fraud Protection with Exponential Backoff for Phone Multi-Factor Authentication (MFA) SMS delivery on Enterprise plans. This feature helps mitigate SMS pumping and toll fraud across outbound phone verification flows. Why It Matters SMS toll fraud oc…
A
2.4.3
Patch release. Corrects the CassandraDB provider, which did not work on Apache Cassandra at all on three queries, and closes the timestamp-domain exposure #818 left behind. No schema or data migration, no breaking change. One operational note: sanity-check NTP on application hosts before upgrading. Fixed The CassandraDB provider did not work on Apache Cassandra at all, on three queries (#824). One…
A
added HTTP Message Signatures Added to Tenant Network ACLs Auth0 Tenant Network ACLs now s
added HTTP Message Signatures Added to Tenant Network ACLs Auth0 Tenant Network ACLs now support RFC 9421 HTTP Message Signatures via the Management API, providing cryptographic origin verification to prevent direct tenant bypass. What’s New Enterprise tenants can enforce HMAC-SHA256 request verification directly at the Auth0 network boundary: Origin Verification: Validates that incoming requests…
O
v1.22.1
What's Changed fix(graph): stop selecting on closed producer channels in the fast paths by @tryoasnafi in #3300 fix(listobjects): surface condition evaluation errors from the unary pipeline by @Siddhant-K-code in #3338 chore: fix errcheck lint issues by @saad-h1 in #3349 fix(logging): keep raw req/resp as JSON by @adriantam in #3354 chore: upgrade Go toolchain to 1.27.3 and golangci-lint to 2.15.0…
F
Release 1.70.0
FusionAuth 1.70.0 adds OAuth 2.0 Token Exchange and support for Client ID Metadata Documents (CIMD), which lets clients such as AI agents register themselves the first time they connect. This release also fixes a large number of security issues, and we recommend that all customers update as soon as possible. Self-hosted operators should note that this version includes a database migration and new…
W
Multiple Accounts per Pipes ProviderUsers can now connect multiple accounts for a Pipes pr
Multiple Accounts per Pipes ProviderUsers can now connect multiple accounts for a Pipes provider Read more
W
October 28, 2026Multiple Accounts per Pipes ProviderUsers can now connect multiple account
October 28, 2026Multiple Accounts per Pipes ProviderUsers can now connect multiple accounts for a Pipes providerRead more
A
Version 202644added Introducing Universal Portals - Developer Preview We're excited to ann
Version 202644added Introducing Universal Portals - Developer Preview We're excited to announce that Universal Portals is now in Developer Preview! Universal Portals are hosted, self-service portals where end users manage their own accounts and organization administrators manage their own organizations, without you building, hosting, or maintaining the interface. You build each portal from pre-bui…
W
Custom Branding per ApplicationCustomize AuthKit and email branding for each application i
Custom Branding per ApplicationCustomize AuthKit and email branding for each application in an environment Read more
W
October 26, 2026Custom Branding per ApplicationCustomize AuthKit and email branding for ea
October 26, 2026Custom Branding per ApplicationCustomize AuthKit and email branding for each application in an environmentRead more
A
Version 202643added Identity Conversion Suite is now in Early Access Identity Conversion S
Version 202643added Identity Conversion Suite is now in Early Access Identity Conversion Suite brings Anonymous Sessions and Experiment Center together in Early Access. Anonymous Sessions helps applications maintain session context before a visitor signs up or logs in. Experiment Center lets teams A/B test login experiences and review results in metrics dashboards. The suite is a paid add-on for E…
C
v4.24.0
Changelog Features 5bf0641 feat: add default record retention days to global settings 266a0c0 feat: brand the description, og tags and manifest of sign-in pages a866fe9 feat: support custom TableColumns mapping in Lark syncer (e.g. enterprise_email) (#5961) 20245fb feat: support private_key_jwt client authentication for DCR and CIMD clients d98b5f7 feat: support running as a Windows service Bug fi…
S
v12.4.1
What's Changed ci: only run publishing workflows in supertokens/supertokens-core by @porcellus in #1469 ci: embargo-build workflow for private security releases by @porcellus in #1473 ci: build the core image once and promote it by digest by @porcellus in #1472 ci: build the core image once and promote it by digest by @porcellus in #1470 ci: pass the ECR digest, not the image ref, to _image-promot…
Z
v4.20.0
4.20.0 (2026-10-22) ⚠️ Upgrade notes Go 1.26: ZITADEL is now built with Go 1.26.10. Outbound TLS connections (SMTP, external IdPs, Actions and webhook targets, HTTP SMS providers) no longer accept certificate chains through the compromised eMudhra intermediate CAs (#12969); affected endpoints need a new certificate, the check can't be disabled. Go 1.26 also rejects URLs with invalid colons in the…
L
@logto/connector-siwe@0.1.0
@logto/connector-siwe@0.1.0
A
added CIMD with Dynamic Registration in Early Access Auth0 now supports CIMD with dynamic
added CIMD with Dynamic Registration in Early Access Auth0 now supports CIMD with dynamic registration in Early Access. MCP clients and AI agents can connect to your tenant without an administrator registering each one first. With Client ID Metadata Document (CIMD), a client identifies itself with an HTTPS URL that points to a metadata document: its name, redirect URIs, and supported authenticatio…
A
updated Application Profiles are available in Early Access We are excited to announce that
updated Application Profiles are available in Early Access We are excited to announce that application profiles are now available in Early Access. This feature allows you to manage third party applications created and used by AI agents, as well as centralizing management of large numbers of applications in a single configuration point. What's included in the Early Access: The Application Profiles…
A
added Configurable Unblock Mode for Brute Force Protection We’ve added a new Unblock Behav
added Configurable Unblock Mode for Brute Force Protection We’ve added a new Unblock Behavior setting to Brute-Force Protection for better compatibility with email scanners. What Changed? When an account is locked due to brute-force protection, users receive an email containing a recovery link. You can now choose how opening that link is handled: Automatic (Default): The account is unblocked immed…
D
v2.46.1
What's Changed Dependency Updates ⬆️ Backport 5093: build: distrust compromised eMudhra intermediates in the image by @sagikazarmark in #5095 Full Changelog: v2.46.0...v2.46.1
A
Release 2026.8.5
See https://docs.goauthentik.io/docs/releases/2026.8#fixed-in-202685 What's Changed endpoints: fix MultipleObjectsReturned (cherry-pick #26971 to version-2026.8) (#26972) enterprise/providers/microsoft_entra: skip members already in the group (cherry-pick #26891 to version-2026.8) (#26952) root: bump cert-related deps due to emudhra (cherry-pick #27068 to version-2026.8) (#27071) web/stages: Fix s…
A
Release 2026.5.8
See https://docs.goauthentik.io/docs/releases/2026.5#fixed-in-202658 What's Changed ci: remove the Google Chrome apt source in setup (cherry-pick #25990 to version-2026.5) by @authentik-cherry-pick[bot] in #26011 lib/expression: fix PickleError due to resolver match when using ak_call_policy (cherry-pick #25763 to version-2026.5) by @authentik-cherry-pick[bot] in #26071 web/source/flows: fix flick…
C
v4.23.0
Changelog Features 6121c73 feat(helm): probe /api/health with a startup probe and configurable timings f74551c feat: add Logo signup item to hide the logo on the signup page 3ad7552 feat: add RFC 7009 token revocation endpoint 79c361b feat: add SAML NameID template to applications 2157444 feat: add account items for Deleted time, Last signin time and Last signin IP on the user page 0628c3a feat: a…