Changelog

Multiple Roles for SSO and DSync

December 9, 2025

Identity provider role assignment now supports multiple roles across SSO, Directory Sync, and AuthKit. SSO profile and directory user entities now include a roles property. When a user signs in or is synced, all IdP group memberships with an assigned role are evaluated and the user receives the union of all mapped roles. Learn more in the docs.

This site uses cookies to improve your experience. Please accept the use of cookies on this site. You can review our cookie policy here and our privacy policy here. If you choose to refuse, functionality of this site will be limited.