Issue No. 19 | April 2026 

This April 2026 issue of the Core Platform Newsletter highlights Trimble’s strategic commitment to Snowflake as the enterprise cloud data standard and introduces the new Platform Community on Charlie. Key updates include critical disaster recovery drills for Trimble ID and AuthZ scheduled for April, the upcoming retirement of the Customer Data Hub (CDH) in H2 2026, and significant release notes for Trimble Identity, API Cloud, and File Service focused on enhanced security and granular traffic control. Developers and integrators are encouraged to review the nine new 2026 platform initiatives and updated regional deployment standards to stay aligned with the "Connect & Scale" strategy.

Snowflake is Trimble's Enterprise Cloud Data Platform

Trimble has made a clear, deliberate, and enterprise-wide decision: Snowflake and Trimble Core Platform services is our cloud data platform. This is not a recommendation, a pilot, or a preference, it is our strategic standard. As we execute on our Connect & Scale strategy, a fragmented data infrastructure is a liability we can no longer afford. Unifying Snowflake and Trimble Core Platform services is how we unlock the compounding value of our data and turn it into a durable competitive advantage at enterprise scale.

Read the strategic platform decision:

New Charlie

Our Platform Channel is now a featured community on Charlie. Sadly, any links to Charlie from previous newsletters no longer work. 

Check out our new Community on Charlie:

Field to cloud - tech talk

The video highlights Trimble’s Field to Cloud initiative, which focuses on integrating physical field work with digital systems to enhance automation and efficiency.

Watch the tech talk:

Platform Initiative Introduction videos

In January, David Kohler presented a comprehensive retrospective of our 2025 milestones alongside the strategic vision for the upcoming year. Building on that foundation, the Platform Organization has identified nine core initiatives for 2026.

We have outlined nine workstreams, each includes a brief video from the respective Initiative Owners providing context on our goals and expected impact.

Please take a few moments to review these priorities to ensure alignment as we execute our 2026 roadmap.

Check out intro videos on Charlie:

⚠️ important change

Trimble ID: Security Update: Enforcement of Consistent Client Authentication

Please be advised that the production release has been put on hold due to integrator feedback. It will not proceed to production on the previously communicated date of April 7, 2026 at 5:30 am UTC. Integrators will have additional time to update their applications to adhere to the enforcement of consistent client authentication.

Production - ON HOLD

📅 UPCOMING EVENTS

Trimble ID: AMR Claim Population for Primary Email MFA

Trimble ID (TID) user tokens now include "otp" and "mfa" in the Authentication Methods References (AMR) claim during primary email verification.

Staging - April 16, 5:30 AM UTC

Production - April 28, 5:30 AM UTC

 Trimble ID: Automatic 1FA Passkey conversion to MFA

Trimble ID (TID) users who sign in with a Passkey as their first factor of authentication (1FA) – either from the initial sign-in page or after entering their email on the password page – will now have their Passkey automatically recognized and registered as a Multi-Factor Authentication (MFA) method. This enhancement streamlines the authentication process for users who prefer Passkey-based sign-in.

Staging - April 16, 5:30 AM UTC

Production - April 28, 5:30 AM UTC

 Trimble ID : Improved MFA Account Recovery during sign-in

Trimble ID (TID) has streamlined account recovery options during sign-in—including primary email verification and backup recovery codes for users with multi-factor authentication (MFA) methods, resulting in a clearer, more self-serviceable recovery process.

Staging - April 16, 5:30 AM UTC

Production - April 28, 5:30 AM UTC

API Cloud v2 : API Regional Deployment Standards

To all API providers, please be advised that the deployment workflow is being updated. A significant enhancement is the newly integrated support for regional deployments under a single API version in the cloud console, a capability that was not previously offered.

Staging - April 24

Production - April 24

GET READY - Customer Data Hub (CDH) - END OF LIFE

Reading account information from Customer Data Hub (CDH) will be officially retired in H2 2026. Teams will need to migrate from CDH to IAM for fetching any account-related information.

Production - H2 2026

IAM Provenance Data Update - CDH Identifier as Source System

IAM is implementing  a  foundational change to how it manages account provenance data. IAM will refer to the CDH original system reference as the Source System, updating the provenance data based on the source of truth claimed by Digital Transformation (DX). There is no planned change to how data is discovered via API at this time, this update is a change in how we will internally identify the source system.

Staging - April 14

Production - April 22

🚨 DISASTER RECOVERY

Trimble ID: Disaster Recovery Drill in Staging

⚠️ Required action - Limited Functionality

Trimble ID (TID) will conduct a disaster recovery drill in the staging environment. This drill may result in intermittent availability for all integrators with applications in the staging environment. 

Staging - April 27, between 4:00 AM and 10:00 AM UTC

AuthZ: Disaster Recovery Drill in Staging

⚠️ Limited Functionality

Authz will conduct a Disaster Recovery drill in Staging on April 9th, 2026. During the DR drill, we may have intermittent availability for the integrators using our Staging environment.

Staging - April 9, between 2:30 AM and 8:30 AM UTC

🚀 RELEASE NOTES

Trimble Identity

🔐 Enhanced Security & UX

• Smart MFA Logic: We’ve introduced intelligent login logic that defaults to a user's last successful method or strongest security factor. Less clicking, more protecting. (Feature flagged)
• Profile Redesign: The MFA management section in My Profile has been completely overhauled for a smoother, more intuitive user experience. (Feature flagged)

📊 Data Intelligence & Scoring

• Rich User Insights: We’re now tracking account entitlements and federation status to feed our User Scoring engine, allowing for more granular risk assessments. (Feature flagged)
• Validation Logic: New safeguards in the TID Identities API now flag and log inconsistencies between Country and Timezone data during user creation.

⚙️ Performance & Protocol Flexibility

• Optimized Syncing: The TID-IAM Sync now uses delta updates for PATCH operations. We’re only syncing what’s changed, which means faster processing and less noise.
• SAML & Device Auth: Added support for unsigned SAML requests and streamlined device identity flows by removing the aud claim requirement for actor tokens.
• Data Region Awareness: Improved IAM Sync transparency with a new header that identifies when data region changes occur.

API Cloud

🔓 Expanded Access & Developer Experience

• Public IAM API: We’ve removed subscription requirements for the IAM API, making it publicly available to streamline integration.
• Frictionless MTLS: Validation can now be bypassed for device-mediated MTLS applications, reducing connectivity hurdles.
• Self-Service Linting: The OpenAPI linting tool is now live for all internal users, ensuring our teams can easily align with the Trimble HTTP API Standard.

🚦 Precision API Management

• Granular Traffic Control: We’ve introduced License-Level Throttling and per-client rate limiting. This allows us to manage quotas and usage plans with much higher precision.
• Flexible Routing: Support for specific and wildcard path-based routing is now live, giving providers more control over how traffic hits their endpoints.

🏗️ Infrastructure & Maintenance

• Backend Modernization: We have successfully migrated away from Amazon Corretto and RPM packages to a new Java distribution to better align with our long-term tech stack.
• Pre-Prod Updates: The events deployment URL has been updated to our pre-prod environment to ensure parity during testing.

File Service

🚀 Performance & Stability

• Infrastructure Optimization: Improved Azure caching behavior and updated file concurrency handling to ensure higher system reliability and smoother data throughput under load.

🔐 Advanced Access Control

• App-Owned ACLs: We’ve introduced a new layer of governance for Shares. Applications can now take exclusive ownership of specific ACL entries.
• Lock-Down Security: Once an application claims ownership of an entry, it becomes the sole authority—preventing other users or processes from modifying or removing those permissions, effectively eliminating accidental overrides.

Trimble Access Management

🛡️ Security & Compliance

• Advanced WAF Protection: We’ve hardened our cloud perimeter by implementing missing data protection configurations for ALB and CloudFront. This directly addresses security findings from Wiz, ensuring a more resilient defense.
• KMS Encryption Upgrade: The TAM container repository has been upgraded from default AES-256 to AWS KMS-backed encryption. This transition ensures our infrastructure meets the stringent NIST/FIPS 140-3 compliance standards.

🏗️ Architectural Efficiency

• Infrastructure Cleanup: We’ve simplified the TAM service architecture by deprecating and removing the secondary load balancer. This reduces technical debt and streamlines our network path for better maintainability.

Need to join the mailing list for this newsletter or know someone who does? Let us know by filling out this very short form: