About this release
Overview of Access 3.9.2 changes, module versions and upgrade requirements.
Access 3.9.2 strengthens SAML and OIDC validation, improves authentication-flow state handling, and updates the included platform modules and audit guidance.
Highlights
Section titled “Highlights”Stronger federation validation
Section titled “Stronger federation validation”SAML broker responses are bound to the pending request, selected IdP and receiving ACS, with mandatory signature protection and replay checks. OIDC adds JWT client authentication and more explicit policy for required authentication context and remote signing-key retrieval.
Authentication flows that preserve the right context
Section titled “Authentication flows that preserve the right context”Returning to method selection preserves an active SAML request, while terminal cancellation clears it. Expired authentication results are rerun across chains, and Kerberos/SPNEGO provides an alternative to Windows-only IWA.
Updated platform modules and operations
Section titled “Updated platform modules and operations”The included module references match AuthN 2026.118, FOSS/Pipes 2026.158, Entra ID 2026.33 and Tokens 2026.10. The platform updates include atomic cluster session writes and the chain-based audit model. Review audit configuration and the full-cluster restart requirement before upgrading.
Explore the release
Section titled “Explore the release”| Release notes Explore features, improvements, fixes, and links to detailed configuration guidance. | Open the release notes |
| Breaking changes Review changes that may require configuration updates before or after the upgrade. | Review breaking changes |
In this section