Changelog

October 31, 2026

System Log: readable event messages, a list of event types, Show this transaction to see everything one request or job did, and more API filters. See System Log.
Framework quickstarts for connecting your app to IdRa. See Quickstarts.
Quickstarts now use one app for local development and production: Web and Single-Page apps accept http redirects on localhost with a port.
A guide for moving from Okta. See Migrate from Okta.
Okta importer (beta): preview and import users, groups and apps from an Okta org. See Import from Okta.
Tested results for Okta's SDKs against IdRa. See Okta SDK compatibility.
Link existing people through an OpenID Connect provider that leaves out email_verified, if a super admin turns on a per-provider setting. Off by default, and only for a provider authoritative for its domains, which admins declare and IdRa doesn't yet prove. See Identity providers.

Getting started

Self-serve signup at idra.team/signup: confirm your email, get your own address, activate your admin account, and a setup wizard walks you through the first steps.
Each organization has its own database, address, sign-in issuer, branding and System Log. Organizations can use a verified custom domain. See Multi-tenancy.
Light, dark and system themes.

Single sign-on

SAML apps: signed AuthnRequests, a choice of algorithms and NameID formats, ForceAuthn and authentication contexts, multiple ACS URLs, and an assertion preview. See SAML 2.0.
OIDC apps: private key JWT client authentication, native apps, and required DPoP. Access is re-checked when tokens are refreshed. See OpenID Connect and OAuth 2.1.
Sign in with an external identity provider or a social account, with attribute and group mapping and routing rules. Account linking is opt-in per provider and domain. See Identity providers.

Policies

Policy Simulator, shared authentication policies, and an Admin Console Policy. See Policies.

Automation

Admin API: scoped OAuth tokens, token expiry and network limits, /users/me paths and paging. See Admin API.

Devices and threat protection

MDM sync for device assurance, with hosts and actions from Fleet in the console. See Devices and MDM.
Identity Threat Protection, and Posture: security posture checks and SaaS connectors.

Security

First version of IdRa: a directory of people and groups, single sign-on for OIDC and SAML apps, policies, device assurance, partner access, privileged server access, the System Log and an end-user dashboard.
Adaptive MFA: IdRa Verify, passkeys, authenticator apps and more, with ThreatInsight, CAPTCHA and account recovery. See Authenticators.
An Okta-compatible management API at /api/v1. See Admin API.
CSV import of people, password policies, email templates, and Login as user for support. See People and administrators.