Asgardeo now supports using a SAML metadata endpoint as the certificate source for external SAML identity providers (Connections). With this enhancement, Asgardeo automatically retrieves and refreshes signing certificates from the configured metadata URL whenever a signature validation failure occurs, eliminating the need for manual certificate updates during IdP key rotations.

Key capabilities include:

Asgardeo now supports enhanced controls to govern OTP retry and resend attempts within a single authentication session, enabling administrators to mitigate brute-force attacks and optimize SMS/Email delivery costs while preserving a smooth user experience.

Key capabilities include:

Asgardeo now supports the Token Exchange grant type for applications within organizations, enabling secure token exchange across  trusted token issuers defined at the organization level.

Key capabilities include:

Outbound provisioning is extended to support organizations. Organizations can now configure and manage their own outbound provisioning connectors independently.

Application-level outbound provisioning is also supported. You can configure provisioning at both the organization level and the application level, enabling you to define organization-wide provisioning rules while customizing behavior for specific applications.

Documentation: 

You can configure rules for user operations, such as adding a user or creating a role, to control whether an approval workflow should be triggered when the operation occurs.

This enhancement gives administrators more precise control over workflow configuration, enabling approvals to be enforced only when specific business conditions are met.

Documentation: 

Asgardeo now sends SMS and email notifications to both approvers and initiators when a workflow request is created or resolved.

When a user operation, such as adding a user or creating a role, triggers a configured workflow, the designated approver receives a notification through the configured channel. After the approver acts, if additional approval steps exist, the next approver receives a notification. If no further steps remain, the initiator is notified of the final outcome.

Administrators can define the notification channels when creating a workflow.

Previously only available through the API, Asgardeo now enables organization administrators to configure organization access for the users in their organizations through Asgardeo console.

Asgardeo now supports HTTP-based email publishing as an alternative to SMTP-based email delivery, giving organizations greater flexibility in how transactional emails are dispatched from Asgardeo.

Ask AI - Embedded AI Knowledge Assistant

Asgardeo now includes Ask AI, an embedded AI assistant available directly within the Asgardeo Console. Instead of switching between the console and documentation to understand concepts, find integration guides, or troubleshoot configurations, administrators and developers can now ask natural-language questions and get instant, contextual answers without leaving their workflow.

Asgardeo now supports Amazon Simple Notification Service (SNS) as a native push notification provider, and introduces multi-provider support for push notification-based authentication.

With Amazon SNS, Asgardeo can deliver push notifications across Android, iOS (Apple Push Notification service), Amazon Fire OS (ADM), Baidu Cloud Push, Windows Phone (MPNS), and Windows (WNS).