# Changelog (https://docs.idra.zone/docs/changelog)

What's new in IdRa, newest first.

## October 31, 2026

- System Log: readable event messages, a [list of event types](https://docs.idra.zone/docs/admin/system-log#event-types), **Show this transaction** to see everything one request or job did, and more API filters. See [System Log](https://docs.idra.zone/docs/admin/system-log).
- Send the System Log to a SIEM with log streams, for Splunk or any HTTPS endpoint. See [Log streaming, inline hooks and log integrity](https://docs.idra.zone/docs/admin/logs-and-hooks).
- Tamper evidence for the System Log, which allows for privacy erasure and retention. See [Log integrity](https://docs.idra.zone/docs/admin/logs-and-hooks#log-integrity).
- Inline hooks and hook keys can be set up. No sign-in flow calls them yet.
- Framework quickstarts for connecting your app to IdRa. See [Quickstarts](https://docs.idra.zone/docs/quickstarts).
- Quickstarts now use one app for local development and production: Web and Single-Page apps accept `http` redirects on `localhost` with a port.
- Quickstarts for Nuxt and FastAPI.
- A guide for moving from Okta. See [Migrate from Okta](https://docs.idra.zone/docs/migrate-from-okta).
- Okta importer (beta): preview and import users, groups and apps from an Okta org. See [Import from Okta](https://docs.idra.zone/docs/okta-import).
- Tested results for Okta's SDKs against IdRa. See [Okta SDK compatibility](https://docs.idra.zone/docs/migrate-from-okta#okta-sdk-compatibility).
- Link existing people through an OpenID Connect provider that leaves out `email_verified`, if a super admin turns on a per-provider setting. Off by default, and only for a provider authoritative for its domains. See [Identity providers](https://docs.idra.zone/docs/admin/identity-providers#providers-that-leave-out-email_verified).
- Prove you own a domain with a DNS TXT record. New linking domains and turning on trust email now need proof; what you already set up keeps working and shows "Not verified". See [Identity providers](https://docs.idra.zone/docs/admin/identity-providers#prove-you-own-a-domain).

## October 30, 2026

**Getting started**

- Self-serve signup at [idra.team/signup](https://idra.team/signup): confirm your email, get your own address, activate your admin account, and a setup wizard walks you through the first steps.
- Each organization has its own database, address, sign-in issuer, branding and System Log. Organizations can use a verified custom domain. See [Multi-tenancy](https://docs.idra.zone/docs/multi-tenancy).
- Light, dark and system themes.

**Single sign-on**

- SAML apps: signed AuthnRequests, a choice of algorithms and NameID formats, ForceAuthn and authentication contexts, multiple ACS URLs, and an assertion preview. See [SAML 2.0](https://docs.idra.zone/docs/admin/saml).
- OIDC apps: private key JWT client authentication, native apps, and required DPoP. Access is re-checked when tokens are refreshed. See [OpenID Connect and OAuth 2.1](https://docs.idra.zone/docs/admin/oidc).
- Sign in with an external identity provider or a social account, with attribute and group mapping and routing rules. Account linking is opt-in per provider and domain. See [Identity providers](https://docs.idra.zone/docs/admin/identity-providers).

**Policies**

- Policy Simulator, shared authentication policies, and an Admin Console Policy. See [Policies](https://docs.idra.zone/docs/admin/policies).

**Automation**

- Admin API: scoped OAuth tokens, token expiry and network limits, `/users/me` paths and paging. See [Admin API](https://docs.idra.zone/docs/admin-api).

**Devices and threat protection**

- MDM sync for device assurance, with hosts and actions from Fleet in the console. See [Devices and MDM](https://docs.idra.zone/docs/admin/devices).
- Identity Threat Protection, and Posture: security posture checks and SaaS connectors.

**Security**

- Security hardening across sign-in, sessions, tokens and background jobs.

## October 29, 2026

- First version of IdRa: a directory of people and groups, single sign-on for OIDC and SAML apps, policies, device assurance, partner access, privileged server access, the System Log and an end-user dashboard.
- Adaptive MFA: IdRa Verify, passkeys, authenticator apps and more, with ThreatInsight, CAPTCHA and account recovery. See [Authenticators](https://docs.idra.zone/docs/admin/authenticators).
- A management API at `/api/v1`, compatible with core Okta resources. See [Admin API](https://docs.idra.zone/docs/admin-api).
- CSV import of people, password policies, email templates, and Login as user for support. See [People and administrators](https://docs.idra.zone/docs/admin/users).