15 June 2026

Production release: 15 June 2026
Staging release: 09 June 2026

15 June 2026

Features

Enhanced Accounts API for Sandbox Changes: Added a subtype field for CUSTOMER type accounts, restricted values to predefined subtypes, and validated subtype/type changes for account updates. Design document | Discussions.

Parallel Index/Handler Strategy for User Indexing: Implemented a parallel index/handler strategy to enable user indexing without stopping ingestion, improving system availability.

Query by Multiple IDs in List Addresses API: Enhanced the list addresses API to allow querying by multiple IDs using the q parameter.

New Query Parameter for Applications List Endpoint: Added a new query parameter to the applications list endpoint to include API products and accounts.

Account Consent Enhancements:

Included the application’s home account in the list accounts API.
Introduced an API to identify application classification and determine account-level authorization enforcement.

Role Mapping for Membership Propagation: Implemented role mapping with assignment and removal for membership propagation between accounts and Single Tier Non-Hierarchical (STNH) organizations.

Cascade Users in STNH Organizations: Enabled bidirectional membership propagation between organizations and accounts in STNH organizations.

Singapore Region Stack Setup: Completed production infrastructure setup and stack validation for the Singapore region with geo-isolation.

SAML2 Fields Added to API Spec: Documented new SAML2 fields for application entities in the API spec.

Devices GraphQL Resolvers Added: Introduced new GraphQL resolvers for devices, including queries for device details, active transfers, certificates, and transfer history.

Bug Fixes

Improved RSQL Query Validation: Fixed multiple cases of RSQL query validation failures, ensuring accurate and consistent API responses.

500 Error in PUT /users/{userId}: Resolved frequent 500 errors in the user update workflow in production.

Default Sort Order in AOSS Updated: Changed the default sort order in AOSS to prevent out-of-memory errors during queries.

Enhanced “Contains” Search Operator: Improved the “contains” search operator for organization-level user listing to support case-insensitive exact substring matches.

DLQ Errors in Event Handlers Fixed: Addressed DLQ errors in both regional and central event handlers to ensure smoother event processing.

Authorization for Listing Users in Groups: Fixed authorization issues when listing users in a group with pending or rejected relationships.

500 Error on Duplicate UUID in User Creation: Resolved a 500 internal server error when creating a user with an existing UUID.

Eval Function Removed from Query String: Eliminated the use of the eval function on query strings to enhance security.

GraphQL User Listing Bug Fixed: Addressed inconsistencies in GraphQL responses when listing users within accounts with pending relationships.

Config Management Time Fields Corrected: Fixed a bug where creation and update time fields were incorrectly assigned the current epoch time.

IAM Documentation Updated: Updated IAM documentation to reflect recent API query parameter support changes.

IAM User Role Sync Metadata Region Added: Ensured the region is included in metadata during CDH to IAM user role sync.

IAM Prod User Update Workflow Fixed: Resolved frequent 500 errors in the user update workflow in production.

IAM Async Central Entity DLQ Errors Fixed: Addressed DLQ errors in the async central entity handler.

IAM Preview Stack Validation Completed: Validated the automation setup and preview stack end-to-end.

IAM Blue/Green Deployment Enhanced: Adopted CloudFront changes in blue/green deployment to ensure pipeline functionality.

IAM Address Sync Retry Logic Updated: Stopped retrying sync events for address source systems when the external system is not found.

IAM Invitation Changes for Non-Hierarchical Organizations: Updated invitation logic to align with user-to-account invitations for non-hierarchical organizations.

IAM MTLS Endpoint Added: Introduced an MTLS endpoint for the “get group by ID” API.

IAM File Service Ingestion Enhanced: Moved additional analytics workflows to the file service ingestion flow and included a DLQ setup.

IAM DR Region Gaps Fixed: Addressed disaster recovery region gaps in live sync deployment.

IAM User Listing Authorization Fixed: Resolved authorization issues when listing users in a group with pending or rejected relationships.

IAM User Update Workflow 500 Error Fixed: Resolved frequent 500 errors in the user update workflow in production.

IAM GraphQL User Listing Bug Fixed: Addressed inconsistencies in GraphQL responses when listing users within accounts with pending relationships.

IAM Config Management Time Fields Corrected: Fixed a bug where creation and update time fields were incorrectly assigned the current epoch time.