About this release
Overview of what is new in Access 3.9.0 and what to review before upgrading
Access 3.9.0 makes authentication flows more predictable, gives administrators finer control over SAML re-authentication, and opens up more possibilities for data transformation through Pipes.
Highlights in 3.9.0
Section titled “Highlights in 3.9.0”Authentication that follows the configured policy
Section titled “Authentication that follows the configured policy”Freja QR and app-switch flows now follow the configured total timeout from browser to backend. Impersonate selections are protected against repeated submissions, so the next authentication step cannot be started more than once.
More precise federation control
Section titled “More precise federation control”SAML re-authentication can be required globally, for selected service providers, or by an application or profile. The policies combine predictably while still respecting an incoming ForceAuthn requirement.
Easier data transformation
Section titled “Easier data transformation”The new MapProperty valve translates source values into item properties, while JsonToItems can preserve scalar JSON arrays as multi-value properties—for example, collections returned in Entra ID custom security attributes.
Explore the release
Section titled “Explore the release”| Release notes Explore features, improvements, fixes, and links to detailed configuration guidance. | Open the release notes |
| Breaking changes Review changes that may require configuration updates before or after the upgrade. | Review breaking changes |
In this section