Changelog

July 2026

07-06-2026

• [New Feature] Session Management - you and your customers can now see information about their active sessions, as well a remotely end a session.

• [New Feature] Member Audit Logs - you can now configure the audit logs your customers can see to include key user events.

• [Improvement] Individual users can now be marked as exempt from Enterprise SSO login requirements.

• [Improvement] More specific error messaging has been added to various Enterprise SSO flows.

June 2026

06-29-2026

• [Improvement] The experience for configuring MCP organization scopes per role has been improved.
• [Improvement] User pages in the PropelAuth dashboard now show whether a password change will be required on the next login.

06-22-2026

• [New Feature] We now have first-class support for Ping Identity for SAML, OIDC and SCIM.
• [New Feature] metadata.xml files can now be uploaded during the SAML set up process (when supported by the SAML provider).
• [New Feature] You can now leave a note when resetting MFA through the PropelAuth dashboard. This note will appear in the audit log entry for the reset action.
• [New Feature] You can now filter by roles on Organization Users lists.
• [Improvement] It is now more obvious in the PropelAuth dashboard when a user has been locked due to too many unsuccessful MFA attempts.
• [Improvement] User Audit Logs now log if a user marks a device as remembered during the MFA flow.
• [Improvement] Better audit logging has been added for certain actions related to MCP Organization Scopes.

06-15-2026

• [New Feature] IPs can now be blocked via the PropelAuth dashboard.

06-07-2026

• [Improvement] Enterprise SSO connections must now go through a successful test run before they can be set to Live.
• [Improvement] Organization audit logs now provide more detailed information about Enterprise SSO connection configurations.
• [Improvement] Private IPs (10.*) can now use http (instead of https) in the test environment.
• [Bugfix] Fixed an issue where the wrong color was being displayed on a filter in the PropelAuth hosted pages.
• [Bugfix] Fixed an issue where MFA backup codes were not always properly displayed.

May 2026

05-31-2026

• [New Feature] The Integration MCP Server has built in guides for migrating from Clerk and Auth0 to PropelAuth.
• [Improvement] @propelauth/frontend-apis and @propelauth/frontend-apis-react now have support for updating API keys and sorting API keys.

05-25-2026

• [New Feature] Added two new roles to the PropelAuth dashboard: Developer and CustomerManagement.
• [Improvement] Updated the Okta SAML guide.
• [Improvement] Updated filter styling across all of the audit logs.

05-18-2026

• [Improvement] Invitations can now be resent from the PropelAuth dashboard.

05-04-2026

• [Improvement] Organization Audit Logs now show SCIM Group External IDs.
• [Improvement] More informative error messaging when being rate limited.

April 2026

04-27-2026

• [New Feature] MCP Org Scopes: You can now define MCP scopes for an organization and set which roles have access to grant them / which roles can manage consent for the org.
• [New Feature] Users can now choose Remember My Device when entering MFA (configurable via the PropelAuth dashboard).
• [New Feature] Granular Backend API keys can now be created for integrating with PropelAuth.
• [Improvement] Audit log now captures when password login fails due to SSO being required.

04-20-2026

• [New Feature] Updated client libraries to include:
  • Fetching user insights / metrics (e.g. top inviters, churned users, etc).
  • Fetching SCIM Groups.
  • Setting SSO OIDC metadata.
  • Fetching a fresh access token for an OAuth connection.
  • Fetching / setting password rotation settings per organization.
  • Display name exists for all API key actions.
  • Programmatic magic link creation now includes signup query params and whether you want an interstitial page.

04-13-2026

• [New Feature] Org-specific API rate limits can now be set via the org update APIs to override the global settings.
• [Improvement] The /userinfo response now returns email_verified.
• [Improvement] Org name character limit increased from 50 to 100.

04-06-2026

• [Improvement] Updated the Azure Enterprise SSO guides.

March 2026

03-23-2026

• [New Feature] Added a HubSpot integration.

• [New Feature] Added the MCP audit log for better debugging and activity tracking.

• [Improvement] Removed users & employees can now be filtered to in all Audit Logs.

03-16-2026

• [New Feature] Added API Key Insights.

• [Improvement] Improved the experience around MCP limits.

• [Improvement] Better error messaging added around certain SCIM cases.

03-09-2026

• [New Feature] Allowed Password Attempts (before an account is blocked) can now be configured via the PropelAuth dashboard.
• [Bugfix] Fixed some edge cases where Turnstile was causing undesirable behavior.

03-02-2026

• [New Feature] Added shadcn commands for components on https://ui.propelauth.com/.

February 2026

02-23-2026

• [New Feature] You can now view a consolidated list of users you have permission to Impersonate.
• [Improvement] API Key expirations can now be updated via the PropelAuth dashboard.
• [Improvement] Multiple events can now be selected when filtering any audit log.

02-16-2026

• [New Feature] Launched the PropelAuth Integration MCP Server to make it easier than ever to add PropelAuth to your product.
• [New Feature] Project Audit Logs can now be viewed in the PropelAuth dashboard for a history of configuration changes.

02-02-2026

• [Improvement] Released updated components to https://ui.propelauth.com/.

January 2026

01-26-2026

• [New Feature] Added MCP Authentication support.

• [New Feature] Password Rotation Policies can now be configured.

• [Improvement] Users can now add a nickname when generating an new API key.

• [Improvement] Email Confirmed status can now be viewed on the Organization Members pages in the PropelAuth dashboard.

• [Bugfix] Fixed a bug related to searching in the Dashboard across different environments.

• [Bugfix] Fixed a bug where an incorrect error message was being displayed in certain scenarios related to SCIM.

01-12-2026

• [New Feature] Released Isolated Orgs, a new way to provide isolation guarantees for organizations.
• [Improvement] Added additional impersonation request durations.

December 2025

12-29-2025

• [New Feature] PropelAuth BYO has API Key functionality.
• [New Feature] PropelAuth BYO now supports creating OIDC & SCIM connections via the BYO dashboard.

12-22-2025

• [Improvement] Added additional inactivity timeout options.

12-08-2025

• [New Feature] User impersonation session lengths can be customized.
• [Improvement] Added additional session duration options.

12-01-2025

• [New Feature] OIDC is now a supported Enterprise SSO connection type.

November 2025

11-17-2025

• [New Feature] Disposable emails can now be prevented from completing signup.
• [New Feature] Added an option to block spam IP address signups.

11-10-2025

• [New Feature] Cloudflare Turnstile can now be added to prevent spam signups.
• [New Feature] Added more configuration options for Magic Links in the dashboard.

11-03-2025

• [Bugfix] Fixed a minor issue related to Azure SCIM groups sending duplicate information.
• [Bugfix] Fixed an issue where magic links could look expired when they were not actually expired.

October 2025

10-27-2025

• [New Feature] Released updates to all libraries to add missing functionality.

10-20-2025

• [Bugfix] Released a variety of minor bug fixes related to SCIM behavior.

10-13-2025

• [New Feature] Links to support emails or documentation can now be added to PropelAuth Hosted Pages.
• [New Feature] Added ReadOnly as a possible role for employees with PropelAuth dashboard access.

September 2025

09-22-2025

• [New Feature] Released PropelAuth BYO, a new, self-hosted option for adding advanced authentication features to products.

August 2025

08-25-2025

• [New Feature] Added additional endpoints: Fetch Employee By ID and Fetch API Key Usage.

July 2025

07-28-2025

• [New Feature] Dark Mode can now be configured on PropelAuth hosted pages.
• [New Feature] We now support Jumpcloud SCIM.
• [New Feature] Domains can now be added to a Blocklist to prevent signups.

07-14-2025

• [New Feature] Added support for API key imports.
• [Improvement] Added more trust options when configuring a SAML connection.

June 2025

06-30-2025

• [New Feature] Roles are now supported for Okta SCIM syncing.

06-16-2025

• [New Feature] Released support for SMS as an MFA option.
• [New Feature] Spotlight search in the dashboard - search docs, users, orgs and more.

06-09-2025

• [Bugfix] Fixed a bug where email fields were not always properly being trimmed of whitespace.

May 2025

05-26-2025

• [Bugfix] Fixed a bug where optional phone number properties were sometimes being treated as required.

05-19-2025

• [Beta] V2 of on-prem support (V1 docs available here). For more information on how to participate in the beta, email support@propelauth.com.
• [New Feature] The Python, FastAPI, Flask and Django libraries now have async support.

05-12-2025

• [Improvement] The Complete Your Account flow will now display optional properties if there are required properties that need to be completed.
• [Improvement] The Autojoin By Domain option for Organizations can now be disabled on a PropelAuth project.

05-05-2025

• [New Feature] Released Account linking.
• [New Feature] Released global search in the PropelAuth Dashboard.
• [Improvement] Added the ability to prefill emails with e={base64} on the passwordless login and reset password pages.

April 2025

04-28-2025

• [New Feature] Released Dash/Plotly support.
• [New Feature] Audit logs can now be exported to Datadog and S3.
• [New Feature] SCIM is now supported for OneLogin.
• [Improvement] Scrypt (Werkzeug version) password hashes are now supported during migrations.
• [Bug Fix] Fixed a visual bug where subdomains were sometimes not appearing updated on the Frontend Integration Page.

04-14-2025

• [New Feature] Released Step Up MFA.
• [Improvement] Added a new property type: email.
• [Bug Fix] Fixed an issue where the checkbox for the Terms of Service property could not be unchecked on some pages in the dashboard.

04-07-2025

• [Improvement] Added 3 additional webhooks: org.scim_key_created, org.scim_key_revoked and org.saml_went_live.

March 2025

03-31-2025

• [New Feature] Added the Migrate User Password API to the FastAPI, Django, Node, Express, Next.js and Go libraries.

03-24-2025

• [New Feature] Released the CLI for Next.js Pages and App Router.
• [New Feature] Support for Laravel SSO with other auth providers.
• [Improvement] Revamped Streamlit Integration.
• [Improvement] SCIM connections can now be turned on via individual org pages in the PropelAuth dashboard.

03-10-2025

• [Improvement] Names are now visible for Waitlist users in the Propelauth dashboard.
• [Improvement] New oauth parameter option: access_type.
• [Improvement] Invitations to organizations with a SAML connection will now go straight to the SAML sign in page.
• [Improvement] Irrelevant settings are now hidden for SAML users.
• [Improvement] The Javascript library now has a disableRefreshOrFocus option.
• [Improvement] OrgMemberInfo now has legacy_org_id in the Python, FastAPI, Flask and Django libraries.

03-03-2025

• [Improvement] The create_user endpoint now has an ignore_domain_restrictions option for the following libraries: Node, Cloudflare Workers, Next.js, Remix, Rust, Express, and Go.

February 2025

02-24-2025

• [New Feature] Deployed marketing website with new branding, updated logos everywhere.
• [Improvement] Added rate limiting options to api_key_settings in the Terraform provider.

02-17-2025

• [Improvement] End user API key list can now be sorted in the PropelAuth dashboard.
• [Improvement] legacy_org_id can now be edited in the PropelAuth dashboard.
• [Improvement] All client libraries now display a more helpful error when rate limits are hit.
• [Improvement] The migration API now allows personal and blocked domains to be imported (even when disallowed on new signups).
• [Improvement] Added better logging for errors sent from Microsoft SSO.
• [Bug Fix] Fixed an issue that, in some cases, prevented email updates when using the Go library.
• [Bug Fix] Fixed a issue where longer dropdown menus were being cut off in some cases.

02-10-2025

• [New Feature] Released Gitlab SSO support.
• [Improvement] Added ignore_domain_restrictions to the Python, FastAPI, Flask and Django libraries.

02-03-2025

• [New Feature] Released ui.propelauth.com to support building custom UIs.

January 2025

01-27-2025

• [Improvement] You can no longer change your password to your current password.
• [Improvement] The Github logo now switches color based on the background color in the hosted pages.

01-20-2025

• [New Feature] Released the Advanced API Keys add-on which includes rate limiting and expiration notifications for API keys.
• [Improvement] The Rust library now returns role_in_org and additional_roles_in_org when fetching org members.

01-13-2025

• [Improvement] The Rust library now returns role_in_org and additional_roles_in_org when fetching org members.
• [Improvement] Groups are now supported when using SCIM with Okta.

01-06-2025

• [Improvement] Incorrect password updates are now rate limited.
• [Improvement] Turbopack is now supported in the Next.js library.
• [Improvement] The user facing audit log is now supported in the Terraform provider.