# Changelog

## [July 2026](https://docs.propelauth.com/changelog#july-2026)

### 07-06-2026

- **[New Feature]** Session Management - you and your customers can now see information about their active sessions, as well a remotely end a session.
  
  
- **[New Feature]** Member Audit Logs - you can now configure the audit logs your customers can see to include key user events.
- **[Improvement]** Individual users can now be marked as exempt from Enterprise SSO login requirements.
- **[Improvement]** More specific error messaging has been added to various Enterprise SSO flows.

## [June 2026](https://docs.propelauth.com/changelog#june-2026)

### 06-29-2026

- **[Improvement]** The experience for configuring MCP organization scopes per role has been improved.
- **[Improvement]** User pages in the PropelAuth dashboard now show whether a password change will be required on the next login.

### 06-22-2026

- **[New Feature]** We now have first-class support for Ping Identity for [SAML, OIDC](https://docs.propelauth.com/overview/authentication/saml) and [SCIM](https://docs.propelauth.com/overview/authentication/scim).
- **[New Feature]** metadata.xml files can now be uploaded during the SAML set up process (when supported by the SAML provider).
- **[New Feature]** You can now leave a note when resetting MFA through the PropelAuth dashboard. This note will appear in the audit log entry for the reset action.
- **[New Feature]** You can now filter by roles on Organization Users lists.
- **[Improvement]** It is now more obvious in the PropelAuth dashboard when a user has been locked due to too many unsuccessful MFA attempts.
- **[Improvement]** User Audit Logs now log if a user marks a device as remembered during the MFA flow.
- **[Improvement]** Better audit logging has been added for certain actions related to MCP Organization Scopes.

### 06-15-2026

- **[New Feature]** IPs can now be blocked via the PropelAuth dashboard.

### 06-07-2026

- **[Improvement]** Enterprise SSO connections must now go through a successful test run before they can be set to Live.
- **[Improvement]** Organization audit logs now provide more detailed information about Enterprise SSO connection configurations.
- **[Improvement]** Private IPs (10.*) can now use http (instead of https) in the test environment.
- **[Bugfix]** Fixed an issue where the wrong color was being displayed on a filter in the PropelAuth hosted pages.
- **[Bugfix]** Fixed an issue where MFA backup codes were not always properly displayed.

## [May 2026](https://docs.propelauth.com/changelog#may-2026)

### 05-31-2026

- **[New Feature]** The [Integration MCP Server](https://docs.propelauth.com/getting-started/integration-mcp-server) has built in guides for migrating from Clerk and Auth0 to PropelAuth.
- **[Improvement]** `@propelauth/frontend-apis` and `@propelauth/frontend-apis-react` now have support for updating API keys and sorting API keys.

### 05-25-2026

- **[New Feature]** Added two new roles to the PropelAuth dashboard: Developer and CustomerManagement.
- **[Improvement]** Updated the Okta SAML guide.
- **[Improvement]** Updated filter styling across all of the audit logs.

### 05-18-2026

- **[Improvement]** Invitations can now be resent from the PropelAuth dashboard.

### 05-04-2026

- **[Improvement]** Organization Audit Logs now show SCIM Group External IDs.
- **[Improvement]** More informative error messaging when being rate limited.

## [April 2026](https://docs.propelauth.com/changelog#april-2026)

### 04-27-2026

- **[New Feature]** MCP Org Scopes: You can now define MCP scopes for an organization and set which roles have access to grant them / which roles can manage consent for the org.
- **[New Feature]** Users can now choose Remember My Device when entering MFA (configurable via the PropelAuth dashboard).
- **[New Feature]** Granular Backend API keys can now be created for integrating with PropelAuth.
- **[Improvement]** Audit log now captures when password login fails due to SSO being required.

### 04-20-2026

- **[New Feature]** Updated client libraries to include:
  - Fetching user insights / metrics (e.g. top inviters, churned users, etc).
  - Fetching SCIM Groups.
  - Setting SSO OIDC metadata.
  - Fetching a fresh access token for an OAuth connection.
  - Fetching / setting password rotation settings per organization.
  - Display name exists for all API key actions.
  - Programmatic magic link creation now includes signup query params and whether you want an interstitial page.

### 04-13-2026

- **[New Feature]** Org-specific API rate limits can now be set via the org update APIs to override the global settings.
- **[Improvement]** The /userinfo response now returns `email_verified`.
- **[Improvement]** Org name character limit increased from 50 to 100.

### 04-06-2026

- **[Improvement]** Updated the Azure Enterprise SSO guides.

## [March 2026](https://docs.propelauth.com/changelog#march-2026)

### 03-23-2026

- **[New Feature]** Added a [HubSpot integration](https://docs.propelauth.com/integrations/hubspot).
  
  
- **[New Feature]** Added the MCP audit log for better debugging and activity tracking.
- **[Improvement]** Removed users & employees can now be filtered to in all Audit Logs.

### 03-16-2026

- **[New Feature]** Added API Key Insights.
  
  
- **[Improvement]** Improved the experience around MCP limits.
- **[Improvement]** Better error messaging added around certain SCIM cases.

### 03-09-2026

- **[New Feature]** Allowed Password Attempts (before an account is blocked) can now be configured via the PropelAuth dashboard.
- **[Bugfix]** Fixed some edge cases where Turnstile was causing undesirable behavior.

### 03-02-2026

- **[New Feature]** Added shadcn commands for components on [https://ui.propelauth.com/](https://ui.propelauth.com/).

## [February 2026](https://docs.propelauth.com/changelog#february-2026)

### 02-23-2026

- **[New Feature]** You can now view a consolidated list of users you have permission to Impersonate.
- **[Improvement]** API Key expirations can now be updated via the PropelAuth dashboard.
- **[Improvement]** Multiple events can now be selected when filtering any audit log.

### 02-16-2026

- **[New Feature]** Launched the [PropelAuth Integration MCP Server](https://docs.propelauth.com/getting-started/integration-mcp-server) to make it easier than ever to add PropelAuth to your product.
- **[New Feature]** [Project Audit Logs](https://docs.propelauth.com/overview/basics/dashboard#project-audit-logs) can now be viewed in the PropelAuth dashboard for a history of configuration changes.

### 02-02-2026

- **[Improvement]** Released updated components to [https://ui.propelauth.com/](https://ui.propelauth.com/).

## [January 2026](https://docs.propelauth.com/changelog#january-2026)

### 01-26-2026

- **[New Feature]** [Added MCP Authentication](https://docs.propelauth.com/mcp-authentication/overview) support.
  
  
- **[New Feature]** Password Rotation Policies can now be configured.
  
  
- **[Improvement]** Users can now add a nickname when generating an new API key.
- **[Improvement]** Email Confirmed status can now be viewed on the Organization Members pages in the PropelAuth dashboard.
- **[Bugfix]** Fixed a bug related to searching in the Dashboard across different environments.
- **[Bugfix]** Fixed a bug where an incorrect error message was being displayed in certain scenarios related to SCIM.

### 01-12-2026

- **[New Feature]** Released [Isolated Orgs](https://docs.propelauth.com/overview/basics/organizations#isolated-organizations), a new way to provide isolation guarantees for organizations.
- **[Improvement]** Added additional impersonation request durations.

## [December 2025](https://docs.propelauth.com/changelog#december-2025)

### 12-29-2025

- **[New Feature]** PropelAuth BYO has API Key functionality.
- **[New Feature]** PropelAuth BYO now supports creating OIDC & SCIM connections via the BYO dashboard.

### 12-22-2025

- **[Improvement]** Added additional inactivity timeout options.

### 12-08-2025

- **[New Feature]** User impersonation session lengths can be customized.
- **[Improvement]** Added additional session duration options.

### 12-01-2025

- **[New Feature]** [OIDC](https://docs.propelauth.com/overview/authentication/login-methods#enterprise-sso-saml-oidc) is now a supported Enterprise SSO connection type.

## [November 2025](https://docs.propelauth.com/changelog#november-2025)

### 11-17-2025

- **[New Feature]** Disposable emails can now be [prevented from completing signup](https://docs.propelauth.com/overview/authentication/login-methods#controlling-who-can-signup).
- **[New Feature]** Added an option to [block spam IP address signups](https://docs.propelauth.com/overview/authentication/login-methods#controlling-who-can-signup).

### 11-10-2025

- **[New Feature]** [Cloudflare Turnstile](https://docs.propelauth.com/integrations/turnstile) can now be added to prevent spam signups.
- **[New Feature]** Added more configuration options for Magic Links in the dashboard.

### 11-03-2025

- **[Bugfix]** Fixed a minor issue related to Azure SCIM groups sending duplicate information.
- **[Bugfix]** Fixed an issue where magic links could look expired when they were not actually expired.

## [October 2025](https://docs.propelauth.com/changelog#october-2025)

### 10-27-2025

- **[New Feature]** Released updates to all libraries to add missing functionality.

### 10-20-2025

- **[Bugfix]** Released a variety of minor bug fixes related to SCIM behavior.

### 10-13-2025

- **[New Feature]** Links to support emails or documentation can now be added to PropelAuth Hosted Pages.
- **[New Feature]** Added ReadOnly as a possible role for employees with PropelAuth dashboard access.

## [September 2025](https://docs.propelauth.com/changelog#september-2025)

### 09-22-2025

- **[New Feature]** Released [PropelAuth BYO](https://byo.propelauth.com/), a new, self-hosted option for adding advanced authentication features to products.

## [August 2025](https://docs.propelauth.com/changelog#august-2025)

### 08-25-2025

- **[New Feature]** Added additional endpoints: [Fetch Employee By ID](https://docs.propelauth.com/reference/api/user#fetch-employee-by-id) and [Fetch API Key Usage](https://docs.propelauth.com/reference/api/apikey#fetch-api-key-usage).

## [July 2025](https://docs.propelauth.com/changelog#july-2025)

### 07-28-2025

- **[New Feature]** [Dark Mode](https://docs.propelauth.com/overview/basics/hosted-pages#dark-mode-support) can now be configured on PropelAuth hosted pages.
- **[New Feature]** We now support Jumpcloud SCIM.
- **[New Feature]** Domains can now be added to a Blocklist to prevent signups.

### 07-14-2025

- **[New Feature]** Added support for API key imports.
- **[Improvement]** Added more trust options when configuring a SAML connection.

## [June 2025](https://docs.propelauth.com/changelog#june-2025)

### 06-30-2025

- **[New Feature]** Roles are now supported for Okta SCIM syncing.

### 06-16-2025

- **[New Feature]** Released support for [SMS as an MFA option](https://docs.propelauth.com/overview/authentication/mfa#sms-mfa).
- **[New Feature]** Spotlight search in the dashboard - search docs, users, orgs and more.

### 06-09-2025

- **[Bugfix]** Fixed a bug where email fields were not always properly being trimmed of whitespace.

## [May 2025](https://docs.propelauth.com/changelog#may-2025)

### 05-26-2025

- **[Bugfix]** Fixed a bug where optional phone number properties were sometimes being treated as required.

### 05-19-2025

- **[Beta]** V2 of on-prem support (V1 docs available [here](https://docs.propelauth.com/recipes/on-prem-guide)). For more information on how to participate in the beta, email [support@propelauth.com](mailto:support@propelauth.com).
- **[New Feature]** The [Python](https://docs.propelauth.com/reference/backend-apis/python), [FastAPI](https://docs.propelauth.com/reference/backend-apis/fastapi), [Flask](https://docs.propelauth.com/reference/backend-apis/flask) and [Django](https://docs.propelauth.com/reference/backend-apis/drf) libraries now have async support.

### 05-12-2025

- **[Improvement]** The Complete Your Account flow will now display optional properties if there are required properties that need to be completed.
- **[Improvement]** The Autojoin By Domain option for Organizations can now be disabled on a PropelAuth project.

### 05-05-2025

- **[New Feature]** Released [Account linking](https://docs.propelauth.com/overview/authentication/login-methods#social-account-linking).
- **[New Feature]** Released global search in the PropelAuth Dashboard.
- **[Improvement]** Added the ability to prefill emails with `e={base64}` on the passwordless login and reset password pages.

## [April 2025](https://docs.propelauth.com/changelog#april-2025)

### 04-28-2025

- **[New Feature]** Released [Dash/Plotly](https://docs.propelauth.com/getting-started/additional-framework-guides/dash-authentication) support.
- **[New Feature]** Audit logs can now be exported to [Datadog](https://docs.propelauth.com/integrations/datadog) and [S3](https://docs.propelauth.com/integrations/amazon-s3).
- **[New Feature]** SCIM is now supported for OneLogin.
- **[Improvement]** Scrypt (Werkzeug version) password hashes are now supported during migrations.
- **[Bug Fix]** Fixed a visual bug where subdomains were sometimes not appearing updated on the Frontend Integration Page.

### 04-14-2025

- **[New Feature]** Released [Step Up MFA](https://docs.propelauth.com/overview/authentication/step-up-mfa).
- **[Improvement]** Added a new property type: email.
- **[Bug Fix]** Fixed an issue where the checkbox for the Terms of Service property could not be unchecked on some pages in the dashboard.

### 04-07-2025

- **[Improvement]** Added 3 additional webhooks: `org.scim_key_created`, `org.scim_key_revoked` and `org.saml_went_live`.

## [March 2025](https://docs.propelauth.com/changelog#march-2025)

### 03-31-2025

- **[New Feature]** Added the Migrate User Password API to the [FastAPI](https://docs.propelauth.com/reference/backend-apis/fastapi), [Django](https://docs.propelauth.com/reference/backend-apis/drf), [Node](https://docs.propelauth.com/reference/backend-apis/node), [Express](https://docs.propelauth.com/reference/backend-apis/express), [Next.js](https://docs.propelauth.com/reference/fullstack-apis/nextjspages/automatic-installation) and [Go](https://docs.propelauth.com/reference/backend-apis/go) libraries.

### 03-24-2025

- **[New Feature]** Released the [CLI](https://docs.propelauth.com/reference/api/cli#cli-framework-support) for Next.js Pages and App Router.
- **[New Feature]** Support for [Laravel SSO](https://docs.propelauth.com/sso/enterprise-sso/laravel) with other auth providers.
- **[Improvement]** Revamped [Streamlit Integration](https://docs.propelauth.com/getting-started/additional-framework-guides/streamlit-authentication).
- **[Improvement]** SCIM connections can now be turned on via individual org pages in the PropelAuth dashboard.

### 03-10-2025

- **[Improvement]** Names are now visible for Waitlist users in the Propelauth dashboard.
- **[Improvement]** New oauth parameter option: `access_type`.
- **[Improvement]** Invitations to organizations with a SAML connection will now go straight to the SAML sign in page.
- **[Improvement]** Irrelevant settings are now hidden for SAML users.
- **[Improvement]** The [Javascript](https://docs.propelauth.com/reference/frontend-apis/js) library now has a `disableRefreshOrFocus` option.
- **[Improvement]** `OrgMemberInfo` now has `legacy_org_id` in the [Python](https://docs.propelauth.com/reference/backend-apis/python), [FastAPI](https://docs.propelauth.com/reference/backend-apis/fastapi), [Flask](https://docs.propelauth.com/reference/backend-apis/flask) and [Django](https://docs.propelauth.com/reference/backend-apis/drf) libraries.

### 03-03-2025

- **[Improvement]** The `create_user` endpoint now has an `ignore_domain_restrictions` option for the following libraries: [Node](https://docs.propelauth.com/reference/backend-apis/node), [Cloudflare Workers](https://docs.propelauth.com/reference/backend-apis/cloudflare-workers), [Next.js](https://docs.propelauth.com/reference/fullstack-apis/nextjspages/automatic-installation), [Remix](https://docs.propelauth.com/reference/fullstack-apis/remix/installation-and-setup), [Rust](https://docs.propelauth.com/reference/backend-apis/rust), [Express](https://docs.propelauth.com/reference/backend-apis/express), and [Go](https://docs.propelauth.com/reference/backend-apis/go).

## [February 2025](https://docs.propelauth.com/changelog#february-2025)

### 02-24-2025

- **[New Feature]** Deployed marketing website with new branding, updated logos everywhere.
- **[Improvement]** Added rate limiting options to `api_key_settings` in the [Terraform provider](https://docs.propelauth.com/integrations/terraform).

### 02-17-2025

- **[Improvement]** End user API key list can now be sorted in the PropelAuth dashboard.
- **[Improvement]** `legacy_org_id` can now be edited in the PropelAuth dashboard.
- **[Improvement]** All client libraries now display a more helpful error when rate limits are hit.
- **[Improvement]** The migration API now allows personal and blocked domains to be imported (even when disallowed on new signups).
- **[Improvement]** Added better logging for errors sent from Microsoft SSO.
- **[Bug Fix]** Fixed an issue that, in some cases, prevented email updates when using the [Go](https://docs.propelauth.com/reference/backend-apis/go) library.
- **[Bug Fix]** Fixed a issue where longer dropdown menus were being cut off in some cases.

### 02-10-2025

- **[New Feature]** [Released Gitlab SSO](https://docs.propelauth.com/sso/social-login/gitlab) support.
- **[Improvement]** Added `ignore_domain_restrictions` to the [Python](https://docs.propelauth.com/reference/backend-apis/python), [FastAPI](https://docs.propelauth.com/reference/backend-apis/fastapi), [Flask](https://docs.propelauth.com/reference/backend-apis/flask) and [Django](https://docs.propelauth.com/reference/backend-apis/drf) libraries.

### 02-03-2025

- **[New Feature]** Released [ui.propelauth.com](https://ui.propelauth.com/) to support building custom UIs.

## [January 2025](https://docs.propelauth.com/changelog#january-2025)

### 01-27-2025

- **[Improvement]** You can no longer change your password to your current password.
- **[Improvement]** The Github logo now switches color based on the background color in the hosted pages.

### 01-20-2025

- **[New Feature]** Released the Advanced API Keys add-on which includes rate limiting and expiration notifications for API keys.
- **[Improvement]** The [Rust](https://docs.propelauth.com/reference/backend-apis/rust) library now returns `role_in_org` and `additional_roles_in_org` when fetching org members.

### 01-13-2025

- **[Improvement]** The [Rust](https://docs.propelauth.com/reference/backend-apis/rust) library now returns `role_in_org` and `additional_roles_in_org` when fetching org members.
- **[Improvement]** Groups are now supported when using SCIM with Okta.

### 01-06-2025

- **[Improvement]** Incorrect password updates are now rate limited.
- **[Improvement]** Turbopack is now supported in the Next.js library.
- **[Improvement]** The user facing audit log is now supported in the Terraform provider.