Connect2id · Blog

Connect2id server 19.9 introduces selective refresh token revocation

Thu, 26 Mar 2026 00:00:00 +0200

More control in token revocation scenarios such as targeted session termination and device-specific logout

Connect2id server 19.8

Mon, 09 Mar 2026 00:00:00 +0200

Support for seamless migration of client authentication methods, without interrupting operations.

Connect2id server 19.7

Mon, 16 Feb 2026 00:00:00 +0200

Enhanced consent continuity, tightened web session bootstrap security with revocation awareness, new JVM and HTTP metrics

Connect2id server 19.6 introduces a web session bootstrap endpoint

Mon, 09 Feb 2026 00:00:00 +0200

No more redundant logins - users stay authenticated as they move between native and web apps

Protecting OAuth code flows against browser-swap attacks

Mon, 26 Jan 2026 00:00:00 +0200

What you can do today to reduce the risk of browser-swap attacks

Nimbus JOSE+JWT roadmap for 2026 and Beyond

Wed, 17 Dec 2025 00:00:00 +0200

Transitioning to post-quantum security and verifiable software supply chains

Connect2id server 19.5

Wed, 03 Dec 2025 00:00:00 +0200

DPoP binding of authorisation codes and native SSO device secrets

Connect2id server 19.4

Tue, 28 Oct 2025 00:00:00 +0200

DPoP and token exchange grant (RFC 8693) enhancements

Connect2id server 19.3

Thu, 25 Sep 2025 00:00:00 +0300

OpenID Federation 1.0 and CIBA updates

Connect2id server 19.2

Tue, 02 Sep 2025 00:00:00 +0300

DPoP proof time window metrics and control

Connect2id server 19.1.2

Tue, 19 Aug 2025 00:00:00 +0300

Maintenance update

Connect2id server 19.1.1

Mon, 11 Aug 2025 00:00:00 +0300

Maintenance update

Connect2id server 19.1

Thu, 24 Jul 2025 00:00:00 +0300

Support for dry-run client registrations and updates

Connect2id server 18.2.1

Wed, 04 Jun 2025 00:00:00 +0300

Maintenance release

Connect2id server 19.0

Wed, 04 Jun 2025 00:00:00 +0300

New web API for native IdP apps to poll the Connect2id server for pending CIBA requests

Connect2id server 18.2

Tue, 20 May 2025 00:00:00 +0300

CIBA plugin update and SQL query optimisations

Connect2id server 18.1 allows control of the user identity hint types in CIBA

Thu, 08 May 2025 00:00:00 +0300

Controlling the CIBA hint types per client is a simple yet powerful measure to enforce least privilege, minimise abuse and have safer CIBA deployments

Connect2id server 18.0 supports CIBA, native IdP apps and session binding via UA fingerprints and DPoP

Thu, 10 Apr 2025 00:00:00 +0300

Opportunities for new fintech, telco, healthcare and consumer tech applications

Connect2id server 17.2.1

Thu, 27 Mar 2025 00:00:00 +0200

Maintenance update

Connect2id server 17.2

Tue, 25 Mar 2025 00:00:00 +0200

Software statement verifier (SSV) plugin update

Connect2id server 17.1.1

Wed, 26 Feb 2025 00:00:00 +0200

Maintenance update

Connect2id server 17.1 ships a private_key_jwt update

Wed, 22 Jan 2025 00:00:00 +0200

Deployments can now configure strict FAPI compliant private_key_jwt audience checking

Metadata policy test vectors for OpenID Federation 1.0

Tue, 14 Jan 2025 00:00:00 +0200

Test vectors for OpenID Federation 1.0 implementers

Manual entity registration with OpenID Federation 1.0

Sat, 11 Jan 2025 00:00:00 +0200

You can still do manual registration of RPs, if you really want to!

Connect2id server 17.0 introduces a new key store API for easy online rotation of keys

Mon, 30 Dec 2024 00:00:00 +0200

How to link an application protocol to an OpenID Federation 1.0 trust layer

Wed, 04 Dec 2024 00:00:00 +0200

The synthesis of everything that was said, written and proposed on the topic how to bind an application to an OpenID Federation trust layer

Connect2id server 16.1.1.

Mon, 11 Nov 2024 00:00:00 +0200

Connect2id server 16.1

Fri, 18 Oct 2024 00:00:00 +0300

Connect2id server 16.0 rolls out device SSO for mobile and desktop applications

Fri, 04 Oct 2024 00:00:00 +0300

Connect2id server 15.9

Thu, 08 Aug 2024 00:00:00 +0300

Connect2id server 15.8

Sat, 27 Jul 2024 00:00:00 +0300

Connect2id server 15.7.1

Thu, 27 Jun 2024 00:00:00 +0300

Connect2id server 15.7

Wed, 05 Jun 2024 00:00:00 +0300

Connect2id server 15.6 introduces a new plugin interface for authentication and consent events

Fri, 10 May 2024 00:00:00 +0300

Connect2id server 15.5

Tue, 23 Apr 2024 00:00:00 +0300

Connect2id server 15.4 introduces an STS web API to aid federated login

Mon, 11 Mar 2024 00:00:00 +0200

Connect2id server 15.3

Thu, 07 Mar 2024 00:00:00 +0200

OpenID Federation policies for Pairwise Pseudonymous Identifiers (PPID)

Mon, 26 Feb 2024 00:00:00 +0200

How to mandate PPIDs in a OpenID Federation? Sample policies to achieve this.

Connect2id server 15.2

Fri, 16 Feb 2024 00:00:00 +0200

Connect2id server 15.1.1, 14.11.1

Tue, 30 Jan 2024 00:00:00 +0200

The OpenID trust chain vs the X.509 certificate trust chain

Fri, 19 Jan 2024 00:00:00 +0200

Transcript of the entertaining 15 talk at the OpenID Summit 2024 in Tokyo, Japan

Connect2id server 15.1

Mon, 08 Jan 2024 00:00:00 +0200

Connect2id server 15.0 upgrades to Java 17, adds a refresh token maximum idle timeout

Tue, 02 Jan 2024 00:00:00 +0200

Connect2id server 14.11

Fri, 08 Dec 2023 00:00:00 +0200

Connect2id server 14.10

Wed, 22 Nov 2023 00:00:00 +0200

Connect2id server 14.9

Mon, 13 Nov 2023 00:00:00 +0200

Connect2id server 14.8.3

Wed, 08 Nov 2023 00:00:00 +0200

Connect2id server 14.8.1

Thu, 02 Nov 2023 00:00:00 +0200

Connect2id server 14.8.2

Thu, 02 Nov 2023 00:00:00 +0200

Connect2id server 14.8 enables client_secret_jwt and private_key_jwt replay prevention

Fri, 20 Oct 2023 00:00:00 +0300