Release notes | Access Control

Federated login improvements

When a federated login configuration is deleted, users who were active at that time will become local Access Control users and will need to reset their password.

Before deleting the federated login configuration, you will be asked whether you want to send a password reset email to all users who are active at that moment. If you choose not to send it, each user will need to manually request a password reset.

Improvements

It is now possible to immediately disable a newly created user, even when in the PENDING state (awaiting activation).

Federated users cannot reset their password through the Access Control interface. Password management remains the responsibility of the IdP (Identity Provider).

Security improvement

Limitation for federated login: to strengthen access governance and platform security, each environment now supports only one active Identity Provider (IdP) at a time. The use of multiple providers simultaneously has been discontinued.