Release Notes

Each release candidate of the current development line, newest first, and every change across all of them on one page. Every page opens with what changed, what to review before upgrading and the highlights, followed by every change, which you can filter by area and type.

• All Changes

  Every 8.1.0 change from RC1, RC2, RC3, RC4 on one page, each tagged with the release candidate that introduced it.

  37topics 20to review 145other changes

• 8.1.0-RC4

  The fourth release candidate is in progress. This page fills in as changes land on the development branch.

  3topics 0to review 1other changes

• 8.1.0-RC3

  The third release candidate reworks Heimdall around the AuthZEN 1.0 specification, brings WebAuthn Level 3 and passkeys to passwordless and multifactor login, and carries the stateless ticket-granting ticket in its cookie.

  Heimdall AuthZEN · WebAuthn Level 3 · Passwordless Authentication · Stateless Ticket Registry · OpenID Connect Verifiable Credentials · Documentation

  14topics 9to review 129other changes

• 8.1.0-RC2

  The second release candidate hardens OAuth, OpenID Connect, SAML2 and the CAS protocol across many flows, moves verifiable credentials to the final OpenID4VCI 1.0 format, and fixes how consent decisions are stored and revoked.

  OAuth & OpenID Connect Hardening · SAML2 Identity Provider · OpenID Connect Verifiable Credentials · CAS Protocol · Attribute Consent · JMX Management

  21topics 6to review 5other changes

• 8.1.0-RC1

  The first release candidate of the 8.1.0 line turns Palantir into a place to manage authorization policies, attribute repositories and cluster topology, and lets OAuth and OpenID Connect applications rotate multiple client secrets.

  Multiple Client Secrets · Cluster Topology · Attribute Definition Dependencies · OpenID Connect Verifiable Credentials · OpenID Connect Federation · Acceptable Usage Policy & Multitenancy

  15topics 5to review 13other changes

To understand the release timeline better, please see CAS releases.