- User tags are now tracked on per-IDP-connection basis
- Updated IDP/HRIS settings page to display configured IDP connection names instead of connection types.
- Adds support for managing Azure User Assigned Managed Identities as Non-Human Identities.
- Fixed add groups to resource modal to allow selecting roles.
- Fixed issue in the new Admin UX that would miscount inherited users in GCP connections.
- Fixed an issue that caused ServiceNow requested items not to be updated.
- Removed Source of Access Icons
- Cleanup some error logging when validating resource access levels during a request
- Fix an error that could block stopping an impersonation session.
- Fixed a UI issue where selecting a role while making a request may reset the duration you've chosen.
- Archived users in Google IDP are now marked as deprovisioned.
- Improved IDP sync performance
- Roles on a resource that a group has access to will now be imported into Opal and displayed under the resource's "Roles" tab.
- Fixed an issue where users would immediately get notified about their access expiring soon right after it was granted.
- Fixed 'Auto-import group resources' not working correctly with manually imported groups.
- Google Groups email addresses are now populated under "Remote Name" for Google Groups and Google GKE Groups
- Improved UI performance for on-prem customers
- Fixed an issue where the displayed duration for a request was incorrectly showing "A few seconds" when indefinite.
- Fixed an issue where propagation error notifications would sometimes not be delivered.
- Fixed an issue where expiry notifications would not get sent when the role assignment was not created via an access request.
- Fixed an issue with MFA when requesting with a custom duration.
- Various bug fixes behind the hood.