Issues

• After Protocols->Kerberos consolidation into tabs (Admin Console) one test fails

  rcbj/iya-sts#567 · Filter by author rcbjBlueMars opened on Oct 11, 2026

• Test common client authentication libraries

  rcbj/iya-sts#566 · Filter by author rcbjBlueMars opened on Oct 11, 2026

• Add social media identity providers as federation options

  rcbj/iya-sts#565 · Filter by author rcbjBlueMars opened on Oct 11, 2026

• Fine Grained Authorization Subsystem

  rcbj/iya-sts#564 · Filter by author rcbjBlueMars opened on Oct 11, 2026

• Add support for AuthZen

  rcbj/iya-sts#563 · Filter by author rcbjBlueMars opened on Oct 11, 2026

• Add a back button on authentication workflow pages such as MFA registration.

  rcbj/iya-sts#562 · Filter by author rcbjBlueMars opened on Oct 11, 2026

• Add support for multiple authenticated sessions

  rcbj/iya-sts#561 · Filter by author rcbjBlueMars opened on Oct 11, 2026
  1

• Remove the "Use a passkey as second step (WebAuthn)" checkbox completely when webauthn is enabled as the only authn mechanism

  rcbj/iya-sts#554 · Filter by author rcbjBlueMars opened on Oct 10, 2026

• Outbound SCIM client across cells (multi-region)

  rcbj/iya-sts#553 · Filter by author rcbjBlueMars opened on Oct 10, 2026

• Outbound SCIM client: push users and groups to another identity provider

  rcbj/iya-sts#552 · Filter by author rcbjBlueMars opened on Oct 10, 2026
  1

• Phishing Resistant Passkeys

  rcbj/iya-sts#544 · Filter by author rcbjBlueMars opened on Oct 9, 2026

• Translate the prose the server writes into console views (setting descriptions, policy sentences, module text)

  rcbj/iya-sts#543 · Filter by author rcbjBlueMars opened on Oct 9, 2026

• Native-speaker review of the #539 language catalogs

  rcbj/iya-sts#542 · Filter by author rcbjBlueMars opened on Oct 9, 2026

• WS-Trust: authenticate the requester by a WS-Security signature on the message

  rcbj/iya-sts#521 · Filter by author rcbjBlueMars opened on Oct 8, 2026

• Client certificate authentication for every protocol where it makes sense

  rcbj/iya-sts#520 · Filter by author rcbjBlueMars opened on Oct 8, 2026

• Adapt scripts in this repo to work with windows/cygwin.

  rcbj/iya-sts#512 · Filter by author rcbjBlueMars opened on Oct 7, 2026

• Admin console: keep the page across a re-sign-in when the session ends

  rcbj/iya-sts#508 · Filter by author rcbjBlueMars opened on Oct 7, 2026
  1

• TLS 1.2 session tickets resume under a different SNI (RFC 6066 section 3); and stale tlsfuzzer plan entries about session IDs

  rcbj/iya-sts#507 · Filter by author rcbjBlueMars opened on Oct 7, 2026

• Risk: with MEDIUM at 3, single address signals (tor-exit and similar) raise a familiar sign-in to MEDIUM less often

  rcbj/iya-sts#503 · Filter by author rcbjBlueMars opened on Oct 7, 2026

• Add OAuth2/OIDC option to switch from JWT access_token format to opaque tokens

  rcbj/iya-sts#501 · Filter by author rcbjBlueMars opened on Oct 7, 2026

• oauthConfidential can say TRUE while the application's only token endpoint auth method is none

  rcbj/iya-sts#466 · Filter by author rcbjBlueMars opened on Oct 6, 2026

• /admin-api/delegation and /admin-api/audit promise a seq that is "monotonic and never reused"; under request workers it is per process

  rcbj/iya-sts#465 · Filter by author rcbjBlueMars opened on Oct 6, 2026
  1

• Directory flush can still deadlock: the insert-race fallback locks a row out of key order

  bug
  rcbj/iya-sts#447 · Filter by author rcbjBlueMars opened on Oct 5, 2026

• Upgrade @noble/curves: 1.4.0 cannot write or read a P-521 ECDSA signature in DER

  rcbj/iya-sts#445 · Filter by author rcbjBlueMars opened on Oct 5, 2026
  1

• Rewrite the runtime, management API and protocol handlers in Rust

  rcbj/iya-sts#444 · Filter by author rcbjBlueMars opened on Oct 5, 2026
  1