Release Notes

Per-software release notes for releases with available customer-facing change information.

For a summarized view of monthly changes, see the Monthly Recap.

Date	Software	Version	Description
2026-08-08	Control Plane	128.32.0	This release fixes an issue where deleting approval workflows would fail if authorization policies were disabled for the organization.
2026-08-07	Control Plane	128.30.0	This release changes the local endpoint host key size from RSA-1024 to RSA-3072 for new SSH resources.
2026-08-04	CLI	54.90.0	This release fixes an issue that caused failed health checks for plain HTTP websites with Enforce HTTPS enabled.
2026-07-28	CLI	54.82.0	This release fixes an issue in StrongDM's MongoDB drivers wherein StrongDM sometimes could not establish connections to MongoDB servers when the connecting user is in a password-rollover state.
2026-07-27	CLI	54.78.0	This release fixes an issue with the TLS verification that caused failed healthchecks for HTTPS resources.
2026-07-23	Control Plane	127.99.0	This release introduces a new authentication mechanism for MongoDB resources. StrongDM can now use the ambient AWS workload identity on nodes to authenticate to MongoDB (Atlas) resources supporting AWS authentication. A new property AWS Region is added and, when set, indicates that StrongDM should authenticate to the MongoDB resource using any of the nodes' AWS workload identity.
2026-07-17	Control Plane	127.90.0	This release adds the ability to build expression-based access rules (that is, for roles and access workflows). The two styles for tag composition are Basic, which works on a set of tags; and Advanced, which uses expressions using boolean operators, where AND, OR, NOT, or () can be built on tags (for example, env=dev OR env=test AND NOT team=team-1).
2026-07-16	Control Plane	127.84.0	This release adds a Generate Certificates button to the Managed Resources page of the Admin UI to allow generation of certificates for website resources.
2026-07-16	Control Plane	127.83.0	This release updates access rule tag queries to support key-only tags (for example env), which match any resource that carries the tag regardless of its value, including for the "Resource of any type" selection.
2026-07-16	Control Plane	127.81.0	This release makes granular session timeouts available for all users in their organization settings.
2026-07-14	Control Plane	127.71.0	This release adds support for granular session timeouts and granular idle session timeouts.
2026-07-02	Control Plane	127.50.0	The Admin UI resource editor now supports configuring TLS certificate verification for HTTP, ClickHouse (HTTP), Couchbase (WebUI), and MCP resource types. A new Insecure TLS option skips verification of the target server's TLS certificate, and a new CA Certificate field lets you supply a PEM CA bundle used to verify the target server. Both appear below the existing TLS setting on the resource form.
2026-07-01	CLI	54.66.0	This release adds an option to control insecure TLS (for example, a TLS/HTTPS connection with skipped certificate validation), as well as an option to upload a custom CA server certificate, to HTTP, Couchbase, ClickHouse, and MCP Gateway resources. Secure (validated against a CA) TLS is the default for all new resources.
2026-07-01	Terraform Provider	17.8.0	This release adds an option to control insecure TLS (for example, a TLS/HTTPS connection with skipped certificate validation), as well as an option to upload a custom CA server certificate, to HTTP, Couchbase, ClickHouse, and MCP Gateway resources. Secure (validated against a CA) TLS is the default for all new resources.
2026-07-01	Control Plane	127.43.0	This release adds an option to control insecure TLS (for example, a TLS/HTTPS connection with skipped certificate validation), as well as an option to upload a custom CA server certificate, to HTTP, Couchbase, ClickHouse, and MCP Gateway resources. Secure (validated against a CA) TLS is the default for all new resources.
2026-07-01	Java SDK	17.8.0	This release adds an option to control insecure TLS (for example, a TLS/HTTPS connection with skipped certificate validation), as well as an option to upload a custom CA server certificate, to HTTP, Couchbase, ClickHouse, and MCP Gateway resources. Secure (validated against a CA) TLS is the default for all new resources.
2026-07-01	Python SDK	17.8.0	This release adds an option to control insecure TLS (for example, a TLS/HTTPS connection with skipped certificate validation), as well as an option to upload a custom CA server certificate, to HTTP, Couchbase, ClickHouse, and MCP Gateway resources. Secure (validated against a CA) TLS is the default for all new resources.
2026-07-01	Ruby SDK	17.8.0	This release adds an option to control insecure TLS (for example, a TLS/HTTPS connection with skipped certificate validation), as well as an option to upload a custom CA server certificate, to HTTP, Couchbase, ClickHouse, and MCP Gateway resources. Secure (validated against a CA) TLS is the default for all new resources.
2026-07-01	Go SDK	17.8.0	This release adds an option to control insecure TLS (for example, a TLS/HTTPS connection with skipped certificate validation), as well as an option to upload a custom CA server certificate, to HTTP, Couchbase, ClickHouse, and MCP Gateway resources. Secure (validated against a CA) TLS is the default for all new resources.
2026-06-24	Control Plane	127.27.0	This release updates the look and feel of the group detail Members and Roles tabs with a count line above each table, a refreshed empty state, and a clearer "no results" state when filtering.
2026-06-22	Control Plane	127.18.0	This release updates the look and feel of groups and roles tables.
2026-06-08	Desktop Application	24.32.0	This release introduces a new look for the StrongDM client and adds support for Access Workflows, which lets users request access to resources from within the client, and support for dynamic proxies. Resources connected through proxy clusters no longer show health check information.
2026-06-03	Desktop Application	23.74.1	This release updates the bundled CLI.
2026-05-30	Control Plane	126.88.0	This release adds support to the StrongDM client for using the operating system-configured HTTP proxy settings on macOS and Windows platforms for HTTPS connections from the client to the StrongDM control plane as well as connections to any proxy clusters in the organization. By default, if any SDM_HTTP_PROXY / SDM_HTTPS_PROXY / HTTP_PROXY / HTTPS_PROXY environment variables are set in the client's environment, the HTTP proxy to use is determined solely from these environment variables, as before. NO_PROXY is also respected when using environment variables to disable the use of proxies for specific hostnames. If these environment variables are not set, the client will instead now use any configured HTTP proxy in the operating system settings, with both static and automatic (PAC) proxies supported on macOS and Windows platforms. If no HTTP proxy is specified in environment variables or OS settings, the client continues to establishes direct connections. Changed OS proxy settings will be respected whenever new connections are established, including after network reconfiguration changes that invalidate existing connections. On Linux, only environment variables are supported for configuring the HTTP proxy, as before. If necessary, this default behaviour can be overridden by setting a new SDM_HTTP_PROXY_MODE environment variable on the client, which supports the following: never use a proxy (ignoring any environment/OS settings); use proxy environment variables (HTTP_PROXY/HTTPS_PROXY); use operating system proxy settings (static or PAC); or prefer proxy environment variables, if set, and otherwise use operating system settings (default).
2026-05-30	CLI	54.47.0	This release adds support to the StrongDM client for using the operating system-configured HTTP proxy settings on macOS and Windows platforms for HTTPS connections from the client to the StrongDM control plane as well as connections to any proxy clusters in the organization. By default, if any SDM_HTTP_PROXY / SDM_HTTPS_PROXY / HTTP_PROXY / HTTPS_PROXY environment variables are set in the client's environment, the HTTP proxy to use is determined solely from these environment variables, as before. NO_PROXY is also respected when using environment variables to disable the use of proxies for specific hostnames. If these environment variables are not set, the client will instead now use any configured HTTP proxy in the operating system settings, with both static and automatic (PAC) proxies supported on macOS and Windows platforms. If no HTTP proxy is specified in environment variables or OS settings, the client continues to establishes direct connections. Changed OS proxy settings will be respected whenever new connections are established, including after network reconfiguration changes that invalidate existing connections. On Linux, only environment variables are supported for configuring the HTTP proxy, as before. If necessary, this default behaviour can be overridden by setting a new SDM_HTTP_PROXY_MODE environment variable on the client, which supports the following: never use a proxy (ignoring any environment/OS settings); use proxy environment variables (HTTP_PROXY/HTTPS_PROXY); use operating system proxy settings (static or PAC); or prefer proxy environment variables, if set, and otherwise use operating system settings (default).
2026-05-29	Terraform Provider	17.5.1	This release updates the Terraform provider's terraform-plugin-sdk/v2 dependency to v2.11.0.
2026-05-28	CLI	54.46.0	This release adds Policy-Based Action Control (PBAC) support for Microsoft SQL Server resources, including all authentication types (username/password, Kerberos, and Azure AD). PBAC for Microsoft SQL Server supports SQL action controls, consistent with existing Postgres PBAC functionality.
2026-05-28	Control Plane	126.86.0	This release adds Policy-Based Action Control (PBAC) support for Microsoft SQL Server resources, including all authentication types (username/password, Kerberos, and Azure AD). PBAC for Microsoft SQL Server supports SQL action controls, consistent with existing Postgres PBAC functionality.
2026-05-28	Java SDK	17.5.0	This release adds Policy-Based Action Control (PBAC) support for Microsoft SQL Server resources, including all authentication types (username/password, Kerberos, and Azure AD). PBAC for Microsoft SQL Server supports SQL action controls, consistent with existing Postgres PBAC functionality.
2026-05-28	Python SDK	17.5.0	This release adds Policy-Based Action Control (PBAC) support for Microsoft SQL Server resources, including all authentication types (username/password, Kerberos, and Azure AD). PBAC for Microsoft SQL Server supports SQL action controls, consistent with existing Postgres PBAC functionality.
2026-05-28	Go SDK	17.5.0	This release adds Policy-Based Action Control (PBAC) support for Microsoft SQL Server resources, including all authentication types (username/password, Kerberos, and Azure AD). PBAC for Microsoft SQL Server supports SQL action controls, consistent with existing Postgres PBAC functionality.
2026-05-28	Ruby SDK	17.5.0	This release adds Policy-Based Action Control (PBAC) support for Microsoft SQL Server resources, including all authentication types (username/password, Kerberos, and Azure AD). PBAC for Microsoft SQL Server supports SQL action controls, consistent with existing Postgres PBAC functionality.
2026-05-26	CLI	54.45.0	This release adds an option to use Kerberos passwords directly when connecting to Microsoft SQL Server (Kerberos) resources. Admins can use it as an easier alternative to using Kerberos keytab files, which involved keeping track of the KVNO values.
2026-05-21	Control Plane	126.75.0	This release fixes an issue where the search field on the discovered Entra groups panel would clear while typing.
2026-05-19	Control Plane	126.72.0	This release fixes an issue where sdm admin healthchecks list and the corresponding Heathchecks List SDK method were incorrectly including deleted nodes and resources in the results, for up to 48 hours after the deletion.
2026-05-19	CLI	54.38.0	This release fixes an issue where under rare circumstances a StrongDM node could silently fail to load secret store configuration at startup, resulting in those secret stores being unreachable from that node until the next node restart or manual secret store update or health check.
2026-05-16	CLI	54.35.0	This release includes additional information about the operating system HTTP proxy configuration in the StrongDM diagnostics (doctor) report.
2026-05-13	CLI	54.33.0	This release adds support for TLS xRDP connections. It is tested against Oracle-Linux-9.7-2026.03.31-0 OCI VM.
2026-05-06	CLI	54.25.0	This release fixes an issue where sdm rdp replay --download would always fail with a session not found error when running on a client system in a timezone with a positive UTC offset.
2026-05-04	Control Plane	126.61.0	This release adds sdm audit requestable-entitlements, a new command for point-in-time requestable entitlement queries. Use --user <user-id> to see resources requestable by a user, --role <role-id> to see resources requestable through a role, or --resource <resource-id> to see accounts requestable for a resource. All variants support --at <timestamp> to query a specific point in time.
2026-05-04	CLI	54.22.0	This release adds sdm audit requestable-entitlements, a new command for point-in-time requestable entitlement queries. Use --user <user-id> to see resources requestable by a user, --role <role-id> to see resources requestable through a role, or --resource <resource-id> to see accounts requestable for a resource. All variants support --at <timestamp> to query a specific point in time.
2026-05-01	CLI	54.20.0	This release fixes a memory leak in the Kubernetes driver during long-running commands including interactive shell sessions, command execution, file copies, and port forwarding.
2026-04-30	Control Plane	126.59.0	This release adds point-in-time (SnapshotAt) query support for requestable entitlement list APIs in the SDKs: RequestableAccountEntitlements, RequestableResourceEntitlements, and RequestableRoleEntitlements. When SnapshotAt is used, filters that depend on live-only data are not supported and now return an error instead of silently returning incorrect results. This includes approvalType and approvalFlow for requestable entitlements, and accessedAfter and accessedBefore for granted entitlements.
2026-04-29	Control Plane	126.57.0	This release resolves an issue where the activity timeline histogram would display stale or incomplete data when switching date filters, including cases where sessions were not appearing despite being present in the summary count.
2026-04-29	Desktop Application	24.26.0	This release adds the MCP Gateway resource type that supports OAuth with Dynamic Client Registration (DCR), managed by the identity provider (IdP).
2026-04-29	CLI	54.19.0	This release adds the MCP Gateway resource type that supports OAuth with Dynamic Client Registration (DCR), managed by the identity provider (IdP).
2026-04-29	Control Plane	126.56.0	This release adds the MCP Gateway resource type that supports OAuth with Dynamic Client Registration (DCR), managed by the identity provider (IdP).
2026-04-29	Terraform Provider	17.2.0	This release adds the MCP Gateway resource type that supports OAuth with Dynamic Client Registration (DCR), managed by the identity provider (IdP).
2026-04-29	Python SDK	17.2.0	This release adds the MCP Gateway resource type that supports OAuth with Dynamic Client Registration (DCR), managed by the identity provider (IdP).
2026-04-29	Java SDK	17.2.0	This release adds the MCP Gateway resource type that supports OAuth with Dynamic Client Registration (DCR), managed by the identity provider (IdP).
2026-04-29	Ruby SDK	17.2.0	This release adds the MCP Gateway resource type that supports OAuth with Dynamic Client Registration (DCR), managed by the identity provider (IdP).
2026-04-29	Go SDK	17.2.0	This release adds the MCP Gateway resource type that supports OAuth with Dynamic Client Registration (DCR), managed by the identity provider (IdP).
2026-04-28	Control Plane	126.54.0	This release adds organization MFA management support to the StrongDM CLI, including commands to view, update, and validate Okta MFA settings for both API token and client-credentials authentication.
2026-04-28	CLI	54.18.0	This release adds organization MFA management support to the StrongDM CLI, including commands to view, update, and validate Okta MFA settings for both API token and client-credentials authentication.
2026-04-28	Control Plane	126.51.0	This release adds the sdm audit granted-entitlements CLI command for point-in-time entitlement queries. Use --user <user-id> to see resources granted to a user, --role <role-id> to see resources granted through a role, or --resource <resource-id> to see accounts granted access to a resource. All variants support --at <timestamp> to query a specific point in time.
2026-04-24	Control Plane	126.48.0	This release fixes Okta MFA settings so administrators can clear a previously stored client key ID (kid) from the MFA settings UI.
2026-04-17	Control Plane	126.22.0	This release fixes an issue where in an organization configured with an idle timeout and MFA, after the idle timeout locks the StrongDM client, unlocking the client by performing MFA would cause the client to immediately lock again. This occurred because the idle timeout was not reset on unlock.
2026-04-15	Control Plane	126.12.0	This release addresses a server-side issue where a failure to store policy authorization queries to a misconfigured Log Stream destination would sometimes retry indefinitely rather than failing and sending a warning notification email to the organization admin.
2026-04-09	Desktop Application	24.2.0	This release fixes a regression in desktop app version 23.99.0 or higher, where the application would fail to start due to missing static files.
2026-04-07	CLI	54.0.0	This release updates the CLI to suppress connection error notifications caused by the user cancelling the connection request.
2026-03-31	Control Plane	125.75.0	This release verifies support for MySQL 8.4.8 against 8.0.33 and 8.4.8 command-line clients, as well as verifies support for MySQL 9.6.0 against 8.0.33, 8.4.8, and 9.6.0 command-line clients.
2026-03-30	Control Plane	125.70.0	This release updates table filters styling.
2026-03-20	CLI	53.80.0	This release fixes an issue in the desktop app where errors during an "Update kubectl configuration" action would not be surfaced and could only be seen by running the sdm k8s update-config CLI command.
2026-03-20	Control Plane	125.27.0	This release adds support for using MCP Gateway with the Claude Desktop app.
2026-03-19	Control Plane	125.25.0	This release adds granted-entitlements and requestable-entitlements subcommands to sdm admin clouds, sdm admin clusters, sdm admin kubernetes, sdm admin websites, sdm admin servers, sdm admin rdp, and sdm admin ssh. These commands support --filter, --filter-json, --filters-help, --extended, --json, and --timeout flags.
2026-03-19	CLI	53.79.0	This release adds granted-entitlements and requestable-entitlements subcommands to sdm admin clouds, sdm admin clusters, sdm admin kubernetes, sdm admin websites, sdm admin servers, sdm admin rdp, and sdm admin ssh. These commands support --filter, --filter-json, --filters-help, --extended, --json, and --timeout flags.
2026-03-18	Control Plane	125.18.0	Fixed issue where pages were not loading properly for user's identity aliases when there was a large number of them.
2026-03-17	CLI	53.77.0	This release adds sdm admin users requestable-entitlements, sdm admin resources requestable-entitlements, and sdm admin roles requestable-entitlements commands for listing resources that can be requested via an access workflow. These commands support --filter, --filter-json, --filters-help, --extended, --json, and --timeout flags.
2026-03-17	Control Plane	125.13.0	This release adds sdm admin users requestable-entitlements, sdm admin resources requestable-entitlements, and sdm admin roles requestable-entitlements commands for listing resources that can be requested via an access workflow. These commands support --filter, --filter-json, --filters-help, --extended, --json, and --timeout flags.
2026-03-12	Control Plane	124.96.0	This release adds support in the Go, Java, Python, and Ruby SDKs for listing requestable account, resource, and role entitlements.
2026-03-12	Java SDK	16.21.0	This release adds support in the Go, Java, Python, and Ruby SDKs for listing requestable account, resource, and role entitlements.
2026-03-12	Python SDK	16.21.0	This release adds support in the Go, Java, Python, and Ruby SDKs for listing requestable account, resource, and role entitlements.
2026-03-12	Ruby SDK	16.21.0	This release adds support in the Go, Java, Python, and Ruby SDKs for listing requestable account, resource, and role entitlements.
2026-03-12	Go SDK	16.21.0	This release adds support in the Go, Java, Python, and Ruby SDKs for listing requestable account, resource, and role entitlements.
2026-03-12	Control Plane	124.92.0	This release introduces a new MCP Gateway resource that enables connections to remote MCP servers with fine-grained Cedar policies for controlling MCP tool calls. Authentication modes include OAuth, which uses a user token obtained via OAuth; PAT, which uses a Personal Access Token (Bearer token); and NoAuth, for servers that do not require authorization.
2026-03-12	CLI	53.66.0	This release introduces a new MCP Gateway resource that enables connections to remote MCP servers with fine-grained Cedar policies for controlling MCP tool calls. Authentication modes include OAuth, which uses a user token obtained via OAuth; PAT, which uses a Personal Access Token (Bearer token); and NoAuth, for servers that do not require authorization.
2026-03-12	Java SDK	16.20.0	This release introduces a new MCP Gateway resource that enables connections to remote MCP servers with fine-grained Cedar policies for controlling MCP tool calls. Authentication modes include OAuth, which uses a user token obtained via OAuth; PAT, which uses a Personal Access Token (Bearer token); and NoAuth, for servers that do not require authorization.
2026-03-12	Python SDK	16.20.0	This release introduces a new MCP Gateway resource that enables connections to remote MCP servers with fine-grained Cedar policies for controlling MCP tool calls. Authentication modes include OAuth, which uses a user token obtained via OAuth; PAT, which uses a Personal Access Token (Bearer token); and NoAuth, for servers that do not require authorization.
2026-03-12	Ruby SDK	16.20.0	This release introduces a new MCP Gateway resource that enables connections to remote MCP servers with fine-grained Cedar policies for controlling MCP tool calls. Authentication modes include OAuth, which uses a user token obtained via OAuth; PAT, which uses a Personal Access Token (Bearer token); and NoAuth, for servers that do not require authorization.
2026-03-12	Go SDK	16.20.0	This release introduces a new MCP Gateway resource that enables connections to remote MCP servers with fine-grained Cedar policies for controlling MCP tool calls. Authentication modes include OAuth, which uses a user token obtained via OAuth; PAT, which uses a Personal Access Token (Bearer token); and NoAuth, for servers that do not require authorization.
2026-03-11	Control Plane	124.90.0	This release fixes an issue where resources granted to a user by a temporary account grant (that is, an admin assignment or via an access request) would appear in the desktop app prior to the account grant's start time. This issue was purely cosmetic and would not have allowed access to connect to the resource if the user attempted to do so.
2026-03-11	CLI	53.60.0	This release fixes an issue in the RDP (Certificate Based) resource type where the RDP protocol interpreter could incorrectly parse data associated with non-virtual channels as virtual channel data. In rare cases, this could potentially lead to undefined behavior, including node crashes or unexpectedly high memory usage.
2026-03-10	Control Plane	124.71.0	This release fixes an issue where the policy editor could not save.
2026-03-09	Control Plane	124.68.0	This release adds sdm admin users granted-entitlements, sdm admin resources granted-entitlements, and sdm admin roles granted-entitlements commands for listing access entitlements. These commands support --filter, --filter-json, --filters-help, --extended, --json, and --timeout flags.
2026-03-09	CLI	53.55.0	This release adds sdm admin users granted-entitlements, sdm admin resources granted-entitlements, and sdm admin roles granted-entitlements commands for listing access entitlements. These commands support --filter, --filter-json, --filters-help, --extended, --json, and --timeout flags.
2026-03-09	CLI	53.54.0	Disk usage information is now reported in diagnostics.
2026-03-05	CLI	53.46.0	This release updates AccountGrant to include an access_request_id field. When an account grant is created through an access request workflow, this field will contain the ID of the originating access request. For grants created directly by an admin, this field will be empty.
2026-03-05	Python SDK	16.17.0	This release updates AccountGrant to include an access_request_id field. When an account grant is created through an access request workflow, this field will contain the ID of the originating access request. For grants created directly by an admin, this field will be empty.
2026-03-05	Ruby SDK	16.17.0	This release updates AccountGrant to include an access_request_id field. When an account grant is created through an access request workflow, this field will contain the ID of the originating access request. For grants created directly by an admin, this field will be empty.
2026-03-05	Java SDK	16.17.0	This release updates AccountGrant to include an access_request_id field. When an account grant is created through an access request workflow, this field will contain the ID of the originating access request. For grants created directly by an admin, this field will be empty.
2026-03-05	Go SDK	16.17.0	This release updates AccountGrant to include an access_request_id field. When an account grant is created through an access request workflow, this field will contain the ID of the originating access request. For grants created directly by an admin, this field will be empty.
2026-03-04	CLI	53.43.0	This release contains no announceable changes for customers
2026-03-03	Control Plane	124.26.0	This release fixes an issue where groups (privileges) requestable or granted within a given Entra ID or Okta Groups resource would not display in the said resource's Entitlements page.
2026-03-03	Control Plane	124.27.0	This release fixes an issue where updating the Okta Org URL would not update the link that appears in the desktop app. In addition, this release fixes an issue where the privileges dropdown contained groups that could not have their membership manipulated.
2026-03-03	Control Plane	124.20.0	This release adds support for Databricks SQL.
2026-03-03	CLI	53.37.0	This release adds support for Databricks SQL.
2026-03-03	Terraform Provider	16.15.0	This release adds support for Databricks SQL.
2026-03-03	Java SDK	16.15.0	This release adds support for Databricks SQL.
2026-03-03	Python SDK	16.15.0	This release adds support for Databricks SQL.
2026-03-03	Go SDK	16.15.0	This release adds support for Databricks SQL.
2026-02-26	Control Plane	123.97.0	This release adds Entitlements > Read as a grantable permission when creating admin tokens and API keys. This permission is required to use the new GrantedAccountEntitlements, GrantedResourceEntitlements, and GrantedRoleEntitlements services.
2026-02-26	Control Plane	123.95.0	This release adds support in the Go, Java, Python, and Ruby SDKs for listing granted account, resource, and role entitlements.
2026-02-26	Java SDK	16.13.0	This release adds support in the Go, Java, Python, and Ruby SDKs for listing granted account, resource, and role entitlements.
2026-02-26	Python SDK	16.13.0	This release adds support in the Go, Java, Python, and Ruby SDKs for listing granted account, resource, and role entitlements.
2026-02-26	Go SDK	16.13.0	This release adds support in the Go, Java, Python, and Ruby SDKs for listing granted account, resource, and role entitlements.
2026-02-26	Ruby SDK	16.13.0	This release adds support in the Go, Java, Python, and Ruby SDKs for listing granted account, resource, and role entitlements.
2026-02-26	Control Plane	123.88.0	This release adds the Okta Groups resource type.
2026-02-26	CLI	53.30.0	This release adds the oktaGroups resource type.
2026-02-26	Terraform Provider	16.12.0	This release adds the oktaGroups resource type.
2026-02-26	Java SDK	16.12.0	This release adds the oktaGroups resource type.
2026-02-26	Ruby SDK	16.12.0	This release adds the oktaGroups resource type.
2026-02-26	Python SDK	16.12.0	This release adds the oktaGroups resource type.
2026-02-26	Go SDK	16.12.0	This release adds the oktaGroups resource type.
2026-02-19	CLI	53.17.0	This release fixes an issue where external UPNs (containing #EXT#) were not URL encoded when provisioning external grants, causing provisioning to fail.
2026-02-19	Control Plane	123.48.0	This release fixes an issue where in the Jira plugin, request types were not populating correctly in the plugin settings when there were more than 50 projects.
2026-02-18	Control Plane	123.40.0	This release adds internal safeguards for audit query log retrieval under sparse-result, large-range scans to reduce control-plane load.
2026-02-13	Control Plane	123.17.0	This release fixes an issue where the Admin UI would hang when navigating away from the Utilization report while data was still loading.
2026-02-13	Control Plane	123.13.0	This release fixes an issue where navigating away from the Managed Secrets report while data is loading no longer causes the Admin UI to hang.
2026-02-13	Control Plane	123.11.0	This release fixes an issue where the Admin UI hangs when navigating away from the Access Workflows report while it is loading data.
2026-02-12	Control Plane	123.4.0	This release fixes an issue where discovered Entra and Okta groups would lose permission information when discovered a second time.
2026-02-12	Control Plane	122.99.0	This release fixes an issue where the Admin UI hangs when navigating away from the User Activity report while data is loading.
2026-02-12	Control Plane	122.93.0	This release updates the Admin UI to use all healthy nodes when node_selector is not defined. When a secret engine's node_selector is not defined, all nodes that are reporting that the secret engine is healthy will be taken into account when communicating with the secret engine. For backward compatibility, existing secret engines will have node_selector set to tags:eng__{{name}}=true, where {{name}} is the secret engine's name.
2026-02-12	Control Plane	122.92.0	This release revises the Authorize StrongDM action in the StrongDM app for Slack to work better for Slack enterprise customers with multiple workspaces.
2026-02-11	CLI	53.0.0	This release adds a node_selector field to secret engines that allows selecting which nodes communicate with the engine. If the node_selector is empty the old fallback mechanism is used with the selector set to tags:eng__{{engine.name}}=true
2026-02-11	Control Plane	122.80.0	This release adds a node_selector field to secret engines that allows selecting which nodes communicate with the engine. If the node_selector is empty the old fallback mechanism is used with the selector set to tags:eng__{{engine.name}}=true
2026-02-11	Java SDK	16.6.0	This release adds a node_selector field to secret engines that allows selecting which nodes communicate with the engine. If the node_selector is empty the old fallback mechanism is used with the selector set to tags:eng__{{engine.name}}=true
2026-02-11	Ruby SDK	16.6.0	This release adds a node_selector field to secret engines that allows selecting which nodes communicate with the engine. If the node_selector is empty the old fallback mechanism is used with the selector set to tags:eng__{{engine.name}}=true
2026-02-11	Python SDK	16.6.0	This release adds a node_selector field to secret engines that allows selecting which nodes communicate with the engine. If the node_selector is empty the old fallback mechanism is used with the selector set to tags:eng__{{engine.name}}=true
2026-02-11	Go SDK	16.6.0	This release adds a node_selector field to secret engines that allows selecting which nodes communicate with the engine. If the node_selector is empty the old fallback mechanism is used with the selector set to tags:eng__{{engine.name}}=true
2026-02-10	Control Plane	122.73.0	[Fix] Resolves an issue where the app would seem to hang when navigating away from teh Standing Access report.
2026-02-09	Control Plane	122.61.0	This release fixes an issue where navigating away from the Executive Summary report while it's in a loading state no longer "hangs" the Admin UI.
2026-02-09	Control Plane	122.59.0	This release fixes an issue where SSH replays were not playing.
2026-02-06	Control Plane	122.47.0	This release fixes an issue with hanging navigation when navigating away from the Auditor Insights report.
2026-02-06	Control Plane	122.44.0	This release adds BootDiskLicense, GKEClusterName, and GKENodePool to discovered GCP VM instance details.
2026-02-06	CLI	52.96.0	This release adds BootDiskLicense, GKEClusterName, and GKENodePool to discovered GCP VM instance details.
2026-02-04	Control Plane	122.30.0	This release fixes an issue that prevented discovered Entra Groups from having any extra information associated with them.
2026-02-04	CLI	52.92.0	This release fixes an issue in the Azure discovery scanner that was causing scan failures when a list of subscription IDs was specified in the connector.
2026-02-04	Control Plane	122.27.0	This release adds Terraform provider datasource "sdm_org_url_info" to return Organization settings.
2026-02-04	Terraform Provider	16.5.0	This release adds Terraform provider datasource "sdm_org_url_info" to return Organization settings.
2026-02-04	Java SDK	16.5.0	This release adds Terraform provider datasource "sdm_org_url_info" to return Organization settings.
2026-02-04	Python SDK	16.5.0	This release adds Terraform provider datasource "sdm_org_url_info" to return Organization settings.
2026-02-04	Ruby SDK	16.5.0	This release adds Terraform provider datasource "sdm_org_url_info" to return Organization settings.
2026-02-04	Go SDK	16.5.0	This release adds Terraform provider datasource "sdm_org_url_info" to return Organization settings.
2026-02-02	CLI	52.88.0	This release updates proxy workers to include their hostname in connection error messages. Connection error messages now include the address of the proxy cluster used for the connection. Gateway diagnostics now report "N/A" when no gateways are present.
2026-01-29	CLI	52.85.0	This release exposes the user employee number via the SDKs and Terraform, along with resource discovery information for Okta groups via the SDKs, Terraform, and CLI.
2026-01-29	Terraform Provider	16.3.0	This release exposes the user employee number via the SDKs and Terraform, along with resource discovery information for Okta groups via the SDKs, Terraform, and CLI.
2026-01-29	Python SDK	16.3.0	This release exposes the user employee number via the SDKs and Terraform, along with resource discovery information for Okta groups via the SDKs, Terraform, and CLI.
2026-01-29	Java SDK	16.3.0	This release exposes the user employee number via the SDKs and Terraform, along with resource discovery information for Okta groups via the SDKs, Terraform, and CLI.
2026-01-29	Ruby SDK	16.3.0	This release exposes the user employee number via the SDKs and Terraform, along with resource discovery information for Okta groups via the SDKs, Terraform, and CLI.
2026-01-29	Go SDK	16.3.0	This release exposes the user employee number via the SDKs and Terraform, along with resource discovery information for Okta groups via the SDKs, Terraform, and CLI.
2026-01-29	Control Plane	121.90.0	For Slack enterprise grid connections to the StrongDM app, the Connected Services page now displays the list of workspaces that are currently connected to the app at Slack. If there are no connected workspaces at Slack, we provide a link to the page there where that can be done.
2026-01-29	Control Plane	121.85.0	This release fixes an issue where local port overrides would sometimes not be reflected in the desktop app.
2026-01-28	Control Plane	121.78.0	This release adds support for the Employee Number field in User settings.
2026-01-26	Control Plane	121.56.0	This release addresses an auth loop issue experienced by Slack Enterprise customers where a single StrongDM user may have multiple Slack user IDs.
2026-01-23	Control Plane	121.43.0	This release adds support for the employee_number field in the sdm admin users CLI tree.
2026-01-23	CLI	52.78.0	This release adds support for the employee_number field in the sdm admin users CLI tree.
2026-01-21	Control Plane	121.25.0	This release fixes an issue where secret logs were being prepended to the table even if it mismatched the active filter.
2026-01-20	Desktop Application	23.74.0	We’ve modernized the desktop app to make it faster, more reliable, and easier to use. Resources are now shown in a single, streamlined list with filtering options for type and health status. Revisions to the Windows installer simplify setup and align MSI installs with the EXE installer. Behind the scenes, a major architectural upgrade improves stability, makes navigation smoother, and sets the stage for quicker, more seamless innovation in future releases.
2026-01-17	Control Plane	121.0.0	This release changes the way access requests are loaded and significantly improves the performance of the Requests > All Requests page of the Admin UI.
2026-01-15	Control Plane	120.88.0	This release fixes an issue introduced in server version 120.81.0 that caused some customers to lose access to the Access Workflows page of the Admin UI with a message that they were missing the required SKU.
2026-01-15	Control Plane	120.84.0	This release updates the Group members table in the Admin UI so it no longer infinitely loads.
2026-01-15	CLI	52.65.0	This release adds support for the "reason" field in access request approvals/denials. In addition, it ensures approver notifications are sent even if the requester lacks Slack integration or user configuration.
2026-01-15	Control Plane	120.77.0	This release adds support for the "reason" field in access request approvals/denials. In addition, it ensures approver notifications are sent even if the requester lacks Slack integration or user configuration.
2026-01-14	Control Plane	120.72.0	This release updates the Admin UI so that admins are no longer shown an "Assign members" button on managed groups when there are no current members.
2026-01-14	Control Plane	120.70.0	This release updates the proxy cluster list and detail pages to display version information.
2026-01-14	Control Plane	120.64.0	This release updates the Admin UI so that Auditors are no longer presented with a disconnect button on the connected services tab on the Integrations page.
2026-01-14	CLI	52.58.0	This release fixes an issue where connecting to Oracle resources would fail when warning messages were returned by the Oracle server during authentication. This could happen, for example, when the password of the configured Oracle user was in an expiry grace period, among other reasons. Warning messages are now correctly decoded if present during the Oracle authentication handshake and passed through to the connecting client.
2026-01-12	Control Plane	120.43.0	This release updates the Admin UI Groups table's "Managed By" filter to have more options in addition to SCIM provisioning.
2026-01-12	Control Plane	120.38.0	This release fixes an issue that prevented Slack Enterprise Grid users who authorized in a different workspace from the bot's installation from being found during user lookups.
2026-01-12	Control Plane	120.35.0	This release changes the entities that are logged in the query log as part of an authorization decision. These entities will now be limited to just those related to the principal, action, resource and context of the request.
2026-01-12	CLI	52.55.0	This release updates the SDKs so that the managed secrets retrieve call does not require passing of a public key.
2026-01-12	Java SDK	15.45.0	This release updates the SDKs so that the managed secrets retrieve call does not require passing of a public key.
2026-01-12	Python SDK	15.45.0	This release updates the SDKs so that the managed secrets retrieve call does not require passing of a public key.
2026-01-12	Go SDK	15.45.0	This release updates the SDKs so that the managed secrets retrieve call does not require passing of a public key.
2026-01-12	Ruby SDK	15.45.0	This release updates the SDKs so that the managed secrets retrieve call does not require passing of a public key.
2026-01-09	CLI	52.53.0	This release fixes a permissions issue when using API keys to audit access requests. If the token does not have the audit:users permission, the name will simply be blank.
2026-01-09	Control Plane	120.21.0	This release allows ServiceNow request approvals to defer the start time to the time indicated by startFrom, formatted per RFC3339.
2026-01-08	Control Plane	120.19.0	This release updates interactive exec sessions for SSH and K8s to now result in ssh logs or k8s for commands entered during those sessions.
2026-01-08	Control Plane	120.10.0	This release fixes an issue that allowed temporary access to be granted to Microsoft Entra ID resources without including groups as privileges, or to groups that aren't valid.
2026-01-07	CLI	52.48.0	This release improves doctor diagnostics collection under exceptional conditions where some diagnostics collectors could previously take longer than the default collection timeout and result in no diagnostics being collected. Long-running collectors are now interrupted if collection takes too long, so the overall collection still succeeds.
2025-12-24	CLI	52.39.0	This release removes a limitation when connecting to RDP (Certificate Based) resources from clients that required smart card sharing/redirection to be explicitly disabled in the Windows Remote Desktop Connection and macOS Windows App RDP client connection settings in order to successfully log in to the RDP server. Connections to RDP resources now work regardless of whether the smart card sharing setting is enabled; any local smart cards present on the client are ignored and continue to be inaccessible on the remote RDP server.
2025-12-24	CLI	52.38.0	This release improves error reporting when an RDP server rejects the initial protocol negotiation.
2025-12-23	Ruby SDK	15.43.0	This release updates the Ruby SDK with several changes. Version 15.43.0 adds automatic encryption/decryption support for managed secret APIs. In addition, the ManagedSecret.value will be automatically encrypted using associated secret_engine key during create/update calls, and ManagedSecret.value will be automatically decrypted using automatically generated Private/Public key pair for Retrieve calls when the provided public_key is empty.
2025-12-23	Python SDK	15.43.0	This release updates the Python SDK with several changes. When creating or updating ManagedSecret its value should be an unencrypted JSON value. It will be automatically encrypted using secret engine's Public Key. When retrieving a secret there is no longer a need to generate an RSA private/public key pair. If the passed public_key value is empty, a new key will be automatically generated and used. This key will be used for any further secret retrievals using the same Client. The returned value doesn't need further decryption. It's already decrypted.
2025-12-22	CLI	52.34.0	This release updates the sdm status CLI command to output a warning to stderr when it cannot detect a running StrongDM listener service.
2025-12-22	Control Plane	119.66.0	This release updates the Admin UI so that tokens can no longer be added to groups.
2025-12-22	Control Plane	119.65.0	This release modifies the labels of the entitlements CSV download to be more verbose.
2025-12-20	Control Plane	119.59.0	This release makes requestable entitlements generally available.
2025-12-20	CLI	52.31.0	This release improves the health check errors for RDP password resources for Network Level Authentication (NLA)-related errors. More informative detailed Windows error messages are now shown where previously only the numeric error code was shown.
2025-12-20	Control Plane	119.58.0	This release prevents API keys and admin tokens from being members of groups.
2025-12-19	Desktop Application	23.64.0	This release updates the Windows CLI location, Windows installer logging, and README files, and adds automatic PATH maintenance and stability improvements. The sdm CLI is now named sdm.exe and is located in SDM\resources (previously sdm32.exe or sdm.amd64.exe). The resources directory is added directly to PATH, so symlinks are no longer needed for the sdm command to work. In addition, the NSIS installer now writes detailed logs to %TEMP%\sdm-install.log for easier troubleshooting. Distribution packages now include README files with installation and uninstallation instructions. On Windows, the desktop app ensures the sdm command PATH is correct on every startup. Lastly, users who install without admin privileges no longer see a crash screen when the VNM service isn't installed.
2025-12-19	CLI	52.29.0	This release improves the health check error message for RDP resources when the configured user is not permitted to access the server via remote desktop. Previously this returned "bad credentials", when in fact this error indicates the credentials were correct but the user is denied access to remote desktop by policy and/or group membership. This now returns `User does not have permission to access the server'.
2025-12-19	CLI	52.26.0	This release updates the Go SDK with the following changes. When creating or updating ManagedSecret its Value should be an unencrypted JSON value. It will be automatically encrypted using the secret engine's Public Key. When retrieving a secret there is no longer a need to generate an RSA private/public key pair. If the passed publicKey value is empty, a new key will be automatically generated and used. This key will be used for any further secret retrievals using the same Client. The returned value doesn't need further decryption, as it is already decrypted.
2025-12-19	Go SDK	15.43.0	This release updates the Go SDK with the following changes. When creating or updating ManagedSecret its Value should be an unencrypted JSON value. It will be automatically encrypted using the secret engine's Public Key. When retrieving a secret there is no longer a need to generate an RSA private/public key pair. If the passed publicKey value is empty, a new key will be automatically generated and used. This key will be used for any further secret retrievals using the same Client. The returned value doesn't need further decryption, as it is already decrypted.
2025-12-18	Control Plane	119.40.0	This release adds functionality to link/unlink existing managed resources to discovered resources.
2025-12-17	Control Plane	119.24.0	This release fixes an issue on the Secrets page of the Admin UI, where the first created secret would not show up in the list.
2025-12-17	CLI	52.21.0	This release allows enabling resource lock on SSH servers.
2025-12-17	Control Plane	119.20.0	This release allows enabling resource lock on SSH servers.
2025-12-17	Terraform Provider	15.41.0	This release allows enabling resource lock on SSH servers.
2025-12-17	Java SDK	15.41.0	This release allows enabling resource lock on SSH servers.
2025-12-17	Go SDK	15.41.0	This release allows enabling resource lock on SSH servers.
2025-12-17	Python SDK	15.41.0	This release allows enabling resource lock on SSH servers.
2025-12-17	Ruby SDK	15.41.0	This release allows enabling resource lock on SSH servers.
2025-12-13	Control Plane	119.0.0	This release adds support for Discovery Connectors to the API.
2025-12-13	CLI	52.17.0	This release adds support for Discovery Connectors to the API.
2025-12-12	Go SDK	15.40.0	This release adds support for Discovery Connectors to the API.
2025-12-12	Terraform Provider	15.40.0	This release adds support for Discovery Connectors to the API.
2025-12-12	Ruby SDK	15.40.0	This release adds support for Discovery Connectors to the API.
2025-12-12	Java SDK	15.40.0	This release adds support for Discovery Connectors to the API.
2025-12-12	Python SDK	15.40.0	This release adds support for Discovery Connectors to the API.
2025-12-12	Control Plane	118.96.0	This release updates the Download CSV dropdown menu items to say "Export all granted rows".
2025-12-12	Terraform Provider	15.39.0	This release fixes an issue causing failures using groups via JSON.
2025-12-12	CLI	52.16.0	This fixes an issue where the wrong certificate would be used when connecting to an RDP (Certificate Based) resource when using NLA with a third-party CA.
2025-12-12	Control Plane	118.92.0	This release fixes an issue causing failures using groups via JSON.
2025-12-12	Java SDK	15.39.0	This release fixes an issue causing failures using groups via JSON.
2025-12-12	Python SDK	15.39.0	This release fixes an issue causing failures using groups via JSON.
2025-12-12	Ruby SDK	15.39.0	This release fixes an issue causing failures using groups via JSON.
2025-12-12	Go SDK	15.39.0	This release fixes an issue causing failures using groups via JSON.
2025-12-11	Control Plane	118.85.0	This release fixes an issue with reports sorting.
2025-12-11	CLI	52.13.0	Kubernetes driver fix for connections not closing when the API requests were done with "Connection: Close" header set.
2025-12-10	Control Plane	118.78.0	This release fixes an issue where the delete role button under Role Settings would disappear.
2025-12-10	Control Plane	118.77.0	This release fixes an issue when dragging a file over a drag and drop file input, such as the certificate fields in Cluster forms. The input now accepts the dropped file as input and outputs the contents of the file in the text area.
2025-12-09	Control Plane	118.64.0	This release addresses an issue that may cause user authorization in the StrongDM App for Slack to be ineffectual for users in the primary workspace of a connected Slack Enterprise Grid account.
2025-12-05	Control Plane	118.47.0	This release adds best-effort command parsing of SSH and Kubernetes exec sessions to Log Stream.
2025-12-04	Control Plane	118.35.0	Public notes appear on https://strongdm.com/docs. Leave blank if the change is not customer-facing, or if it is a feature that is not yet Generally Available. Do not write "None" or "N/A". Examples: This release adds support for Neuralink. This release is incompatible with CLI versions below: vA.B.C This release patches the following third-party CVEs: CVE-1984-12345 -->
2025-12-02	CLI	51.90.0	This release implements progressive scanning for discovery of GCP resources.
2025-12-01	CLI	51.89.0	When multiple AD DCs are configured for RDP Certificate resources for LDAP-based user SID lookup of Identity Aliases, the LDAP connections are now randomly distributed across the DCs to improve load balancing. Additionally, the connection timeout for LDAP has been shortened to ensure failover in the presence of a failed/unavailable DC.
2025-11-27	Control Plane	118.6.0	This release allows service accounts to request and manage access via the CLI and the sdm access command tree.
2025-11-27	CLI	51.86.0	This release allows service accounts to request and manage access via the CLI and the sdm access command tree.
2025-11-26	Control Plane	118.5.0	This release enables type:postgres type:mysql syntax to work like id:1 id:2, allowing (type1 or type2) and other_filters in a single clause. This release also changes Type string to Types []string following the existing ID field pattern.
2025-11-26	Control Plane	118.2.0	This release fixes an issue where access request reasons made entirely of whitespace characters was counted as providing a reason.
2025-11-26	Control Plane	117.98.0	This release updates the help text on the Secret Store field on resource forms for better clarity.
2025-11-26	CLI	51.85.0	This release adds support for Network Level Authentication (NLA) for RDP (Certificate Based) resources. NLA may now be enabled for new and existing RDP (Certificate Based) resources by configuring a new optional Server FQDN field in the resource as well as the DC Hostnames. Configuring these fields will cause new connections to those resources to perform NLA using Kerberos. This is only supported in on-premises Active Directory environments; using Microsoft Entra ID still requires that target Windows servers be configured to not require NLA. In addition, this release fixes an issue where creating or updating MySQL and PostgreSQL mTLS resources would incorrectly report a failure to validate the client certificate and key when storing those credentials in a secret store.
2025-11-26	Control Plane	117.97.0	This release adds support for Network Level Authentication (NLA) for RDP (Certificate Based) resources. NLA may now be enabled for new and existing RDP (Certificate Based) resources by configuring a new optional Server FQDN field in the resource as well as the DC Hostnames. Configuring these fields will cause new connections to those resources to perform NLA using Kerberos. This is only supported in on-premises Active Directory environments; using Microsoft Entra ID still requires that target Windows servers be configured to not require NLA. In addition, this release fixes an issue where creating or updating MySQL and PostgreSQL mTLS resources would incorrectly report a failure to validate the client certificate and key when storing those credentials in a secret store.
2025-11-26	Terraform Provider	15.35.0	This release adds support for Network Level Authentication (NLA) for RDP (Certificate Based) resources. NLA may now be enabled for new and existing RDP (Certificate Based) resources by configuring a new optional Server FQDN field in the resource as well as the DC Hostnames. Configuring these fields will cause new connections to those resources to perform NLA using Kerberos. This is only supported in on-premises Active Directory environments; using Microsoft Entra ID still requires that target Windows servers be configured to not require NLA. In addition, this release fixes an issue where creating or updating MySQL and PostgreSQL mTLS resources would incorrectly report a failure to validate the client certificate and key when storing those credentials in a secret store.
2025-11-26	Python SDK	15.35.0	This release adds support for Network Level Authentication (NLA) for RDP (Certificate Based) resources. NLA may now be enabled for new and existing RDP (Certificate Based) resources by configuring a new optional Server FQDN field in the resource as well as the DC Hostnames. Configuring these fields will cause new connections to those resources to perform NLA using Kerberos. This is only supported in on-premises Active Directory environments; using Microsoft Entra ID still requires that target Windows servers be configured to not require NLA. In addition, this release fixes an issue where creating or updating MySQL and PostgreSQL mTLS resources would incorrectly report a failure to validate the client certificate and key when storing those credentials in a secret store.
2025-11-26	Java SDK	15.35.0	This release adds support for Network Level Authentication (NLA) for RDP (Certificate Based) resources. NLA may now be enabled for new and existing RDP (Certificate Based) resources by configuring a new optional Server FQDN field in the resource as well as the DC Hostnames. Configuring these fields will cause new connections to those resources to perform NLA using Kerberos. This is only supported in on-premises Active Directory environments; using Microsoft Entra ID still requires that target Windows servers be configured to not require NLA. In addition, this release fixes an issue where creating or updating MySQL and PostgreSQL mTLS resources would incorrectly report a failure to validate the client certificate and key when storing those credentials in a secret store.
2025-11-26	Go SDK	15.35.0	This release adds support for Network Level Authentication (NLA) for RDP (Certificate Based) resources. NLA may now be enabled for new and existing RDP (Certificate Based) resources by configuring a new optional Server FQDN field in the resource as well as the DC Hostnames. Configuring these fields will cause new connections to those resources to perform NLA using Kerberos. This is only supported in on-premises Active Directory environments; using Microsoft Entra ID still requires that target Windows servers be configured to not require NLA. In addition, this release fixes an issue where creating or updating MySQL and PostgreSQL mTLS resources would incorrectly report a failure to validate the client certificate and key when storing those credentials in a secret store.
2025-11-26	Ruby SDK	15.35.0	This release adds support for Network Level Authentication (NLA) for RDP (Certificate Based) resources. NLA may now be enabled for new and existing RDP (Certificate Based) resources by configuring a new optional Server FQDN field in the resource as well as the DC Hostnames. Configuring these fields will cause new connections to those resources to perform NLA using Kerberos. This is only supported in on-premises Active Directory environments; using Microsoft Entra ID still requires that target Windows servers be configured to not require NLA. In addition, this release fixes an issue where creating or updating MySQL and PostgreSQL mTLS resources would incorrectly report a failure to validate the client certificate and key when storing those credentials in a secret store.
2025-11-24	Control Plane	117.86.0	This release adds support for managing EC2 instances, Azure VMs, and GCE instances on Windows platform as RDP resources in StrongDM.
2025-11-22	Control Plane	117.79.0	This release adds an email address under the user account name in the Resource Entitlements tab of the Admin UI and updates the behavior of the "Search accounts..." functionality to include email addresses as well as user names.
2025-11-21	Control Plane	117.72.0	This release sorts resource filters on their name instead of the database type alias.
2025-11-20	CLI	51.75.0	This release corrects an issue with connecting to Oracle resources using server or client character sets other than AL32UTF8 (the default) from the SQLPlus client. Previously such connections would fail with authentication errors.
2025-11-19	CLI	51.74.0	This release implements progressive scanning for discovery of AWS resources.
2025-11-19	Control Plane	117.50.0	This release introduces a new enterprise secret store type called StrongDM Vault. Additionally this release adds secret engines for managing database credentials for Microsoft SQL Server, MySQL/MariaDB, and PostgreSQL. Admin UI changes include the following: the Strong Vault secret store field on resource settings was renamed to Stored in StrongDM; and the Strong Vault secret store was removed from the secret stores list.
2025-11-19	CLI	51.73.0	This release introduces a new enterprise secret store type called StrongDM Vault. Additionally this release adds secret engines for managing database credentials for Microsoft SQL Server, MySQL/MariaDB, and PostgreSQL. Admin UI changes include the following: the Strong Vault secret store field on resource settings was renamed to Stored in StrongDM; and the Strong Vault secret store was removed from the secret stores list.
2025-11-19	Java SDK	15.33.0	This release introduces a new enterprise secret store type called StrongDM Vault. Additionally this release adds secret engines for managing database credentials for Microsoft SQL Server, MySQL/MariaDB, and PostgreSQL. Admin UI changes include the following: the Strong Vault secret store field on resource settings was renamed to Stored in StrongDM; and the Strong Vault secret store was removed from the secret stores list.
2025-11-19	Go SDK	15.33.0	This release introduces a new enterprise secret store type called StrongDM Vault. Additionally this release adds secret engines for managing database credentials for Microsoft SQL Server, MySQL/MariaDB, and PostgreSQL. Admin UI changes include the following: the Strong Vault secret store field on resource settings was renamed to Stored in StrongDM; and the Strong Vault secret store was removed from the secret stores list.
2025-11-19	Terraform Provider	15.33.0	This release introduces a new enterprise secret store type called StrongDM Vault. Additionally this release adds secret engines for managing database credentials for Microsoft SQL Server, MySQL/MariaDB, and PostgreSQL. Admin UI changes include the following: the Strong Vault secret store field on resource settings was renamed to Stored in StrongDM; and the Strong Vault secret store was removed from the secret stores list.
2025-11-19	Python SDK	15.33.0	This release introduces a new enterprise secret store type called StrongDM Vault. Additionally this release adds secret engines for managing database credentials for Microsoft SQL Server, MySQL/MariaDB, and PostgreSQL. Admin UI changes include the following: the Strong Vault secret store field on resource settings was renamed to Stored in StrongDM; and the Strong Vault secret store was removed from the secret stores list.
2025-11-19	Ruby SDK	15.33.0	This release introduces a new enterprise secret store type called StrongDM Vault. Additionally this release adds secret engines for managing database credentials for Microsoft SQL Server, MySQL/MariaDB, and PostgreSQL. Admin UI changes include the following: the Strong Vault secret store field on resource settings was renamed to Stored in StrongDM; and the Strong Vault secret store was removed from the secret stores list.
2025-11-17	Control Plane	117.39.0	This release updates the user access on the Catalog page for resources that have an account grant that starts in the future to have a status of "Granted by temporary access" rather than "Pending".
2025-11-14	Control Plane	117.32.0	This release fixes an issue where device trust status for new authentications would be unknown for up to a minute.
2025-11-14	CLI	51.66.0	This release adds the created at date for Users, Services, and Tokens to the CLI output, and exposes the data as read-only in the SDKs.
2025-11-14	Control Plane	117.29.0	This release adds the created at date for Users, Services, and Tokens to the CLI output, and exposes the data as read-only in the SDKs.
2025-11-14	Terraform Provider	15.31.0	This release adds the created at date for Users, Services, and Tokens to the CLI output, and exposes the data as read-only in the SDKs.
2025-11-14	Java SDK	15.31.0	This release adds the created at date for Users, Services, and Tokens to the CLI output, and exposes the data as read-only in the SDKs.
2025-11-14	Ruby SDK	15.31.0	This release adds the created at date for Users, Services, and Tokens to the CLI output, and exposes the data as read-only in the SDKs.
2025-11-14	Python SDK	15.31.0	This release adds the created at date for Users, Services, and Tokens to the CLI output, and exposes the data as read-only in the SDKs.
2025-11-14	Go SDK	15.31.0	This release adds the created at date for Users, Services, and Tokens to the CLI output, and exposes the data as read-only in the SDKs.
2025-11-13	CLI	51.65.0	This release adds new VNM-related CLI commands: sdm system vnm install (to install the VNM service, sdm system vnm uninstall (to uninstall the VNM service), sdm system vnm status (to check VNM service status), sdm system vnm files (to extract the VNM files from CLI binary), and sdm system desktop uninstall (general desktop uninstall command.
2025-11-13	Control Plane	117.19.0	This release updates device trust status for active sessions more quickly and reliably when settings related to device trust are changed.
2025-11-13	Control Plane	117.16.0	This release retries Resource Discovery Scans that fail to dispatch 3 times before eventually erroring over approximately 40 minutes.
2025-11-12	Control Plane	117.8.0	This release adds unstable MySQL secret engine support. MySQL secret engine is used to manage MySQL account credentials.
2025-11-12	CLI	51.63.0	This release adds unstable MySQL secret engine support. MySQL secret engine is used to manage MySQL account credentials.
2025-11-12	Control Plane	117.4.0	This release adds a support for EC2 and IAM authentication methods in HashiCorp Vault for RDP and SSH certificate authorities.
2025-11-12	CLI	51.62.0	This release adds a support for EC2 and IAM authentication methods in HashiCorp Vault for RDP and SSH certificate authorities.
2025-11-12	Terraform Provider	15.28.0	This release adds a support for EC2 and IAM authentication methods in HashiCorp Vault for RDP and SSH certificate authorities.
2025-11-12	Java SDK	15.29.0	This release adds a support for EC2 and IAM authentication methods in HashiCorp Vault for RDP and SSH certificate authorities.
2025-11-12	Ruby SDK	15.29.0	This release adds a support for EC2 and IAM authentication methods in HashiCorp Vault for RDP and SSH certificate authorities.
2025-11-12	Python SDK	15.29.0	This release adds a support for EC2 and IAM authentication methods in HashiCorp Vault for RDP and SSH certificate authorities.
2025-11-12	Go SDK	15.29.0	This release adds a support for EC2 and IAM authentication methods in HashiCorp Vault for RDP and SSH certificate authorities.
2025-11-07	Desktop Application	23.41.0	This release updates the desktop app to show a notification when a resource connection fails.
2025-11-07	CLI	51.56.0	This release updates the desktop app to show a notification when a resource connection fails.
2025-11-07	Desktop Application	23.40.0	This release fixes a regression that broke admin installations for a target user using the --SDMUSER flag.
2025-11-07	CLI	51.55.0	This release fixes a regression that broke admin installations for a target user using the --SDMUSER flag.
2025-11-07	CLI	51.54.0	This release fixes an issue that caused certain log messages to be erroneously omitted from the diagnostics.
2025-11-07	Control Plane	116.91.0	This release adds a support for user lookup for Okta MFA by ExternalID.
2025-11-06	Control Plane	116.88.0	This release fixes a race condition where multiple concurrent SCIM requests that all introduce the same new Identity Set would result in multiple creation attempts for that set.
2025-11-05	Control Plane	116.80.0	Fixed bug preventing users from setting a start date on access requests
2025-11-04	Control Plane	116.75.0	This release updates the Admin UI's Lock Status column of lockable resources to show the full user's name.
2025-11-04	Control Plane	116.72.0	This release fixes an issue where the link in the hover text on an account in the policy editor does not link to the correct page.
2025-11-04	Control Plane	116.71.0	This release updates the SCIM provisioning details on the User Management Settings page to show"Token created" instead of "Created" for the label of the token's created date.
2025-11-03	Control Plane	116.65.0	This release updates the token expiry column to have a tool tip with the exact time of the expiration.
2025-11-03	Control Plane	116.64.0	This release fixes a validation bug where the last node associated with a connector could not be removed via the Admin UI. In addition, it updates some SCIM error messages to contain more useful information when modifying Identity Aliases.
2025-11-01	CLI	51.47.0	This release updates discovery scanning in AWS, so it falls back to scanning only the current region if listing all regions fails.
2025-10-31	Control Plane	116.60.0	This release updates access requests so that users can no longer request access to a resource with an empty reason.
2025-10-31	Control Plane	116.59.0	This release fixes an issue where secret engine health checks were showing up for the wrong secret engine.
2025-10-31	Control Plane	116.57.0	This release adds a resource type filter to the managed resources page of the Admin UI that groups the resource by the legacy category.
2025-10-30	CLI	51.46.0	This release ensures that the desktop app version displays in sdm doctor.
2025-10-29	CLI	51.45.0	This release updates the version of Go used to build the product to version 1.25.3. This version of Go fixes a regression in TLS certificate verification introduced in Go 1.25.2 that resulted in TLS certificates containing SAN extension DNS names with trailing periods to fail to parse. This could result in failures to connect to resources that presented server TLS certificates with such DNS names, such as those generated in some Kubernetes environments.
2025-10-29	Control Plane	116.55.0	This release updates the version of Go used to build the product to version 1.25.3. This version of Go fixes a regression in TLS certificate verification introduced in Go 1.25.2 that resulted in TLS certificates containing SAN extension DNS names with trailing periods to fail to parse. This could result in failures to connect to resources that presented server TLS certificates with such DNS names, such as those generated in some Kubernetes environments.
2025-10-24	Control Plane	116.51.0	This release adds activity type icons for connectors.
2025-10-24	Control Plane	116.49.0	This release adds support for storage and retrieval of the username property in the Active Directory secret engine's secrets, and adds support for Identity Set identity mapping for password-based authentication in RDP servers. Identity Aliases should be a name of the secret storing the credentials for the given user and the $SDM_USERNAME variable should be used in the resource's username and password paths.
2025-10-24	CLI	51.42.0	This release adds support for storage and retrieval of the username property in the Active Directory secret engine's secrets, and adds support for Identity Set identity mapping for password-based authentication in RDP servers. Identity Aliases should be a name of the secret storing the credentials for the given user and the $SDM_USERNAME variable should be used in the resource's username and password paths.
2025-10-23	Control Plane	116.48.0	This release adds a small empty state component to porcelain. It uses the empty state component in the managed resources page and refactors the asset and connector table empty states to use this new component. Additionally the totalResourceCount query is moved a level higher so the new empty state can be rendered without any table components.
2025-10-23	Control Plane	116.46.0	This release fixes a scenario where Slack can appear to hang when making a request that fails. Now an informative message will be displayed to the user.
2025-10-23	Control Plane	116.45.0	This release updates activity log icons to have tooltips.
2025-10-23	Control Plane	116.44.0	This release fixes the vertical alignment on the proxy clusters table for the diagnostics button.
2025-10-23	CLI	51.40.0	This release adds ElastiCache IAM authentication.
2025-10-23	Terraform Provider	15.27.0	This release adds ElastiCache IAM authentication.
2025-10-23	Go SDK	15.27.0	This release adds ElastiCache IAM authentication.
2025-10-23	Ruby SDK	15.27.0	This release adds ElastiCache IAM authentication.
2025-10-22	Control Plane	116.41.0	This release updates the icon associated with health status to use checkbox and X icons.
2025-10-22	Control Plane	116.40.0	This release fixes a rare scenario that would cause ServiceNow access request-related functionality to break, or for data to fall out of sync from StrongDM.
2025-10-22	Control Plane	116.36.0	This release updates the sdm__connector_id tag on any nodes associated with Discovery Connectors to contain their respective connector IDs.
2025-10-21	Control Plane	116.31.0	This release adds "No results found" to various comboboxes with static menus.
2025-10-21	Control Plane	116.27.0	This release updates tables with no content to no longer have a dividing bar between the head and body of the table.
2025-10-20	Control Plane	116.21.0	This release updates connectors, so that when modifying the Node IDs field of a discovery connector, the nodes you provide will now be tagged with the relevant sdm__connector_id tag. This tag is used by connectors to select nodes to run scans.
2025-10-20	Control Plane	116.14.0	This release addresses an issue where the client session ID metadata associated with recent queries against resource types supporting this metadata (PostgreSQL, Oracle, SQL Server) was not displayed in the Logs > Queries page of the admin UI. This was caused by this metadata being omitted from a cache of new queries, and so was only displayed in the admin UI for older queries not served from that cache.
2025-10-20	Control Plane	116.12.0	This release wraps credential controls in error boundary.
2025-10-20	Control Plane	116.10.0	This release adds new optional fields (roleArn and roleExternalID) for the AWS Secrets Manager secret store, which enable a gateway to assume an IAM role when accessing AWS Secrets Manager.
2025-10-20	Terraform Provider	15.25.0	This release adds new optional fields (roleArn and roleExternalID) for the AWS Secrets Manager secret store, which enable a gateway to assume an IAM role when accessing AWS Secrets Manager.
2025-10-20	Java SDK	15.25.0	This release adds new optional fields (roleArn and roleExternalID) for the AWS Secrets Manager secret store, which enable a gateway to assume an IAM role when accessing AWS Secrets Manager.
2025-10-20	Python SDK	15.25.0	This release adds new optional fields (roleArn and roleExternalID) for the AWS Secrets Manager secret store, which enable a gateway to assume an IAM role when accessing AWS Secrets Manager.
2025-10-20	Go SDK	15.25.0	This release adds new optional fields (roleArn and roleExternalID) for the AWS Secrets Manager secret store, which enable a gateway to assume an IAM role when accessing AWS Secrets Manager.
2025-10-20	Ruby SDK	15.25.0	This release adds new optional fields (roleArn and roleExternalID) for the AWS Secrets Manager secret store, which enable a gateway to assume an IAM role when accessing AWS Secrets Manager.
2025-10-17	Control Plane	116.9.0	This release improves the performance of deleting resources and accounts that have many open sessions to resources. This situation can occur in particular when frequently using service accounts to access StrongDM resources in short-lived containers.
2025-10-17	Control Plane	116.6.0	This release presents a new "no search results" message on secret engine and secret tabs.
2025-10-17	Control Plane	116.5.0	This release adds the resource type (asset kind) selector to discovery connector forms for configuration. Additionally, it changes the name of Asset.family in GraphQL to Asset.kind to be consistent.
2025-10-16	CLI	51.34.0	This release corrects an issue when using the SQLPlus Oracle Client where sending a username with a shorter length than the actual username on the server would cause error: ORA-03146: invalid buffer length for TTC field.
2025-10-16	Control Plane	115.97.0	This release adds mapped identities (such as Kubernetes privileges) to the account, resource, and role entitlements CSV downloads. These identities are encoded as a comma-separated list with double quotes surrounding the elements if more than one mapped identity is included.
2025-10-15	Control Plane	115.92.0	This release adjusts connector details page break points to accommodate a wider table.
2025-10-15	Desktop Application	23.24.0	This release fixes an issue so that using both @logout and @notify policy annotations no longer cause the desktop app notification popup to hang for 10 seconds.
2025-10-15	Control Plane	115.88.0	This release updates networking tables to use the new "no search results" messaging.
2025-10-14	Desktop Application	23.23.0	This release updates the desktop app copyright.
2025-10-13	Control Plane	115.81.0	This release updates tables in the Admin UI to show a new "no results" message when search results return nothing.
2025-10-13	CLI	51.26.0	This release adds the MySQL (mTLS) resource type.
2025-10-13	Terraform Provider	15.22.0	This release adds the MySQL (mTLS) resource type.
2025-10-13	Python SDK	15.22.0	This release adds the MySQL (mTLS) resource type.
2025-10-13	Java SDK	15.22.0	This release adds the MySQL (mTLS) resource type.
2025-10-13	Go SDK	15.22.0	This release adds the MySQL (mTLS) resource type.
2025-10-13	Ruby SDK	15.22.0	This release adds the MySQL (mTLS) resource type.
2025-10-10	CLI	51.25.0	This release fixes a behavior in the Oracle driver where users would see two connection attempts (first one timing out) when initially using an Oracle resource. Connections to an oracle resource should now only yield one connection attempt (excluding redirects).
2025-10-10	CLI	51.23.0	This release removes obsolete support for Oracle Database versions 8i and 11g (clients and servers) from Oracle resources, which have not been officially supported for several years.
2025-10-10	Control Plane	115.73.0	This release updates Admin UI table loaders to be centered to distinguish them from normal rows.
2025-10-10	Control Plane	115.72.0	This release rearranges tabs on the Admin UI Roles details page tabs to be ordered Access Rules, Entitlements, Groups, Members, Settings.
2025-10-10	Control Plane	115.71.0	This release fixes an issue where API, admin, or SCIM tokens with permissions to update role names but not modify access rules failed to update role names due to a permissions error.
2025-10-09	CLI	51.20.0	This release fixes an issue with Oracle resources where connections from JDBC-based Oracle clients (such as DBeaver and SQL Developer) could fail with a decoding error during authentication. This issue only occurred with certain non-default Oracle client and server configurations, such as having client query result caching enabled.
2025-10-09	Control Plane	115.69.0	This release changes the state of scheduling scans when scans are scheduled using the scan requested field.
2025-10-09	Control Plane	115.68.0	This release updates query logs to correctly show the client's sessionID instead of the internal sessionID.
2025-10-09	Desktop Application	22.59.15	This release fixes an issue so that when the sdm network becomes degraded for short periods but recovers, the alert banner is not shown, but if the network becomes degraded for longer than 15 seconds, the banner is shown.
2025-10-08	CLI	51.17.0	This release reverts changes to Oracle health checks in the StrongDM CLI to perform a full authentication and validation of the username and password as part of the health check. These changes introduced an issue causing health checks to fail in some Oracle environments, and so have been temporarily reverted to the original implementation, which only validated connectivity to the Oracle database server.
2025-10-08	Control Plane	115.59.0	This release updates various comboboxes throughout the Admin UI to have menu items when there are no results found.
2025-10-08	Control Plane	115.58.0	This release updates the Admin UI to display the groups information banner if the user is currently provisioned by roles, not groups, from the identity provider. If a user reaches out to StrongDM and switches provisioning from roles to groups, then the banner will no longer be displayed.
2025-10-07	CLI	51.15.0	This release fixes an issue where both Azure Connectors and Entra ID resources were running the same scan. This release splits Azure Connector scans and Entra ID scans so they only scan relevant resources.
2025-10-07	Control Plane	115.56.0	This release fixes an issue where both Azure Connectors and Entra ID resources were running the same scan. This release splits Azure Connector scans and Entra ID scans so they only scan relevant resources.
2025-10-07	Control Plane	115.55.0	This release updates Admin UI search bars above tables to no longer have a button for triggering the search. The "x" icon for clearing the filters is only visible if there are custom filters active.
2025-10-07	Control Plane	115.54.0	This release adds a copy connector tag button to the connector forms and the connector table. This tag is used by admins to dynamically attach nodes to a connector for discovery.
2025-10-06	Desktop Application	23.15.0	This release adds support to the desktop app for HTTP proxies via the HTTP_PROXY and HTTPS_PROXY headers and excludes paths via NO_PROXY.
2025-10-03	Control Plane	115.44.0	This release improves and adds to connector forms and settings.
2025-10-03	Control Plane	115.38.0	This release fixes an issue where the header for the Admin UI Update Certificate Authority modal was appearing on the bottom instead of the top of the modal, and an issue where the radio panel for Certificate Authorities would not remain updated properly after confirming the switch to a new Certificate Authority.
2025-10-02	CLI	51.9.0	This release exposes the groups subtree under sdm admin for the new Groups feature which is now generally available.
2025-10-02	Control Plane	115.33.0	This release fixes an issue where the Admin UI Integrations page would shift at certain window sizes.
2025-10-02	Control Plane	115.29.0	This release makes StrongDM user groups generally available. Groups in StrongDM provide a way to organize users and manage permissions at scale. Instead of assigning users to roles individually, you can create groups, assign users to those groups, and then assign roles to the entire group. This makes access management more efficient and easier to maintain.
2025-10-01	Control Plane	115.24.0	This release updates query logs to contain session IDs on applicable resources.
2025-09-30	CLI	51.3.0	This release adds more debug logs to Couchbase resources on nodes.
2025-09-28	Control Plane	114.99.0	Scans that find no entities now get properly marked as completed.
2025-09-26	CLI	50.99.0	This release improves the health check for Oracle resources by validating authentication and query execution complete successfully using the configured credentials. Previously, health checks for Oracle resources only performed a basic connectivity check and would not detect some misconfigurations such as an incorrect username or password.
2025-09-26	CLI	50.97.0	This release adds support for connecting to Oracle databases on version 23ai from supported JDBC and SQL*Plus clients.
2025-09-25	CLI	50.92.0	GCP discovery scans will now attempt to scan the current project-ID if the list of all projects can not be obtained (e.g. if permission is not available)
2025-09-25	Control Plane	114.80.0	None
2025-09-25	CLI	50.90.0	This release adds support for PLAIN mode of DSEAuthenticator in Cassandra (DSE).
2025-09-24	Control Plane	114.73.0	This release resolves an issue where installations that use the MSI installer could not autoupdate
2025-09-24	Desktop Application	23.11.0	This release updates the desktop app to no longer make ping calls to determine if the network is online
2025-09-24	CLI	50.86.0	The sdm admin network vnm sub-commands now return more useful information when an error occurs.
2025-09-23	CLI	50.83.0	This release improves detection and logging of authentication errors when connecting to Oracle resources, to assist in the diagnosis of resource configuration errors such as an incorrectly-configured username, password, or service name.
2025-09-23	Desktop Application	23.9.0	This release updates the desktop app to show network offline view when the network is unreachable
2025-09-23	Control Plane	114.61.0	This release fixes a bug where Roles would not sync to Okta as Groups
2025-09-23	CLI	50.81.0	This release adds support for connecting to Oracle databases on version 23ai from the Toad client using its native driver.
2025-09-22	Control Plane	114.55.0	This release exposes Group related permissions for use when creating an API Key or Admin Token
2025-09-22	Java SDK	15.16.0	This release exposes Group related permissions for use when creating an API Key or Admin Token
2025-09-22	Terraform Provider	15.16.0	This release exposes Group related permissions for use when creating an API Key or Admin Token
2025-09-22	Go SDK	15.16.0	This release exposes Group related permissions for use when creating an API Key or Admin Token
2025-09-22	Ruby SDK	15.16.0	This release exposes Group related permissions for use when creating an API Key or Admin Token
2025-09-22	Python SDK	15.16.0	This release exposes Group related permissions for use when creating an API Key or Admin Token
2025-09-19	Control Plane	114.51.0	Proxy cluster health status is now available at a glance on the list page.
2025-09-19	Control Plane	114.49.0	This release adds support for Groups to the SDKs and Terraform provider.
2025-09-19	Java SDK	15.15.0	This release adds support for Groups to the SDKs and Terraform provider.
2025-09-19	Terraform Provider	15.15.0	This release adds support for Groups to the SDKs and Terraform provider.
2025-09-19	Python SDK	15.15.0	This release adds support for Groups to the SDKs and Terraform provider.
2025-09-19	Go SDK	15.15.0	This release adds support for Groups to the SDKs and Terraform provider.
2025-09-19	Ruby SDK	15.15.0	This release adds support for Groups to the SDKs and Terraform provider.