24 June 2025

Production release: 24 June 2025
Staging release: 19 June 2025

19 June 2025

SAML Federation with Custom SP-Entity ID : Introduced support for SAML federation using a customizable Service Provider Entity ID.
Offline Authentication Sign-in Page : Developed a new web page to enable offline authentication (controlled by feature flag).
[JWKS] : Updated to support application-specific kid-2 JWT signing (controlled by feature flag).
[WCAG] : Made cosmetic changes to the UI for password rules on the set password page to enhance accessibility.
Default Audience for Self-Application : Added functionality to set self-application as the default audience when no scope is provided (controlled by feature flag).
External Application Logo Field : Introduced a new field for external application logos in API identities (controlled by feature flag).
Added functionality to retrieve and format dynamic scope descriptions for user consent in external applications.
Implemented validation mechanisms to ensure that dynamic scopes passed in the authorization call are protected against script injection vulnerabilities.

Resolved an issue where, for V3 users in TID, social federated user login did not update details from the IDP and failed to remove V3 attributes from the record.
Corrected the display of the Data Region section, ensuring it does not display when logging into external applications with a social federated user.
Fixed an issue where the user consent prompt did not appear for first-time social federation users who skipped the passkey nudge.
Resolved errors in subscription sync-related files caused by missing imports in the TID code base.
Addressed a failure in the Disable User SSM Document due to a DynamoAccess error.
Fixed critical code smell issues