WSO2 Changelog
- 12 Jul, 2026
Attribute-Driven Account Linking with Custom Provisioning Controls
We’ve enhanced account linking functionality to provide greater flexibility and control. Administrators can now define any attribute beyond just username or email as the lookup attribute for linking accounts. In addition, provisioning behavior during account linking failures is fully configurable.
Documentation:
WSO2 Changelog
- 12 Jul, 2026
Enhanced Organization Search in Console with Nested Hierarchy Support
We’ve introduced a nested-level organization search option in the Console.
Previously, searches were limited to immediate child organizations. With this enhancement, you can now search across the entire organization hierarchy, making it easier to locate and manage organizations at any depth.
Documentation:
WSO2 Changelog
- 12 Jul, 2026
Configure Allowed headers and parameters to be shared with Pre-Issue Access Token extension and Custom Authenticator (Service-based)
In extension points such as Pre-Issue Access Token and Custom Authenticator actions, it is common to rely on additional headers and parameters from the request flow. However, allowing unrestricted access to all headers and parameters poses security risks, as they may contain sensitive information, personally identifiable data (PII), or internal infrastructure details.
WSO2 Changelog
- 12 Jul, 2026
Selective role sharing for sub organizations
Asgardeo now provides full control over which roles are shared when delegating applications to sub organizations.Previously, application sharing automatically granted all associated application roles to sub organizations, which could lead to over-permissive access.
With this update, admins can fine-tune role visibility using one of three sharing modes:
Streaming Kafka Events in Real Time via WebSocket APIs
Introduction
Imagine that you need to know the exact location of the train that you’re about to catch. Trains can be equipped with IoT sensors that can publish location coordinates via Kafka streams in real time. You will be using a mobile application to view a train’s location. Mobile applications and web applications are compatible with WebSocket, a web-friendly protocol, but the location data is received via a Kafka stream.
WSO2 Changelog
- 12 Jul, 2026
Efficient Multi-User Account Linking via Bulk API
To simplify user management, we’ve introduced a new account linking bulk API. This feature allows administrators to perform multiple account linking actions in a single call, significantly reducing repetitive effort, improving efficiency during migrations and onboarding.
Documentation:
CMS-0057-F Interoperability and Prior Authorization: WSO2’s One-Stop Guide
Introduction
The Centers for Medicare & Medicaid Services (CMS) finalized the CMS-0057-F Interoperability and Prior Authorization Rule, which marks a pivotal shift in U.S. healthcare, requiring payers, providers, and health IT vendors to enable seamless data exchange through FHIR APIs. The rule is designed to reduce administrative burden, improve care coordination, and empower patients with timely access to their health information.
How We Gave Life to an AI Agent with the Unitree Go2 Robot
Every year, WSO2Con brings together developers, tech enthusiasts, and IT leaders from around the world to dive into the latest in APIs, identity management, integration, and now AI. It’s a space to learn from keynotes and hands-on sessions, share best practices, and get a first look at what’s new from WSO2.