Choreo now supports user-authored CI pipelines for components built on a private data plane. Pipeline definitions are written in YAML and converted to Argo Workflows at build time, allowing platform engineers to extend the default build flow with pre-build checks (vulnerability scans, code quality gates), custom containers and unit tests, third-party image scanning tools such as Snyk Container, Aqua, or Anchore, and post-build actions like notifications and approvals. This enables teams to standardize CI workflows and integrate third-party tooling consistently across their components.

Asgardeo now supports OAuth 2.0 Client Credentials and Password grant types for authenticating the external HTTP endpoints invoked by Custom Authenticators, in addition to the existing Basic Authentication, Bearer Token, and API Key options.

This enables dynamically acquired access tokens for outbound connections, removing the need for static credentials and supporting automated token rotation for more secure and maintainable Custom Authenticator integrations.
 

Authentication flows, Account Recovery flows and the My Account portal now support Dutch language, enabling fully localized sign-in and account management experiences for Dutch-speaking users.

Documentation: 

• https://wso2.com/asgardeo/docs/guides/branding/localization/#supported-…
   

Administrators can now enable shared users to impersonate other users within child organizations through both the Console and business applications.

This enhancement enables troubleshooting support by allowing users, whose profiles are managed in a parent organization, to seamlessly assume the identity and permissions of target users in organizations.

Child organizations can now discover and consume MCP Server resources inherited from their root organization, directly within their Organization Console.

This allows MCP capabilities to be defined and managed centrally, then made available across the organization hierarchy. A “define-once, consume-everywhere” model that helps teams adopt defined resources consistently, while governance remains enforced at the root level.

You can now define an AI agent once and securely share it across your organization hierarchy with centralized governance. A true "define once, use everywhere" model with granular access control at every level.

Root organization administrators can centrally define and manage agents, then share or unshare them through the Console or the new Agent Sharing API. Organizations can choose to:

Administrators can now let shared users log in directly to organizations using both B2B SaaS and organization-specific applications through the newly introduced Shared User Identifier authenticator. 

This enhancement allows users, whose identities are managed in a parent or higher-level organization, to authenticate directly into a target organization, eliminating the need to first log into their resident organization and exchange tokens. 

Documentation: 

The free Developer tier has transitioned to a 14-day complimentary trial experience. To activate the trial, organizations will be prompted to provide billing details — no charges apply unless the organization upgrades to the Team tier. Organizations on the previous Developer plan will continue operating normally while retaining full access to your existing projects and platform features.

View Updated Plan