16 December 2025

Production release: 16 December 2025
Staging release: 11 December 2025

11 December 2025

• mTLS for Client Credentials : Added support for Mutual TLS (mTLS) within the Application Client Credential flow.
• SAML Security Enhancements : Introduced optional SAML Request Signing. To improve security, stricter validation for Assertion Consumer Service (ACS) URLs is now enforced for all unsigned requests.
• Enhanced 3rd-Party Identity Support : Expanded identity provider compatibility to include Autodesk for seamless 3rd-party token integration.
• Token Exchange Updates : Introduced Refresh Token support for the Token Exchange grant type. This functionality is specifically designed for mTLS and DPoP-based authentication and is currently managed via internal feature flag.
• AWS SDK Upgrade : Modernized our infrastructure by upgrading the AWS SDK from v1 to v2.
• Invitation Service : Resolved an issue where expired invitation TTL records were not properly removed.

Bug Fixes -

• Fixed a “List Index Out of Range” error to prevent intermittent application crashes and improve data processing reliability.