Pomerium

No entries match these filters. Clear filters

1. changelog Oct 12, 2026 · issue 104

   Pomerium adds MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. gateway, hosted IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems., SSH session recording, incremental config diffing, and Databroker query engine in v0.32.0⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢ ⤢
   └──▷ TRY IT
   Declare that a frontend route depends on a backend API route so Pomerium sets session cookies on both domains during a single login — eliminating cross-origin fetch failures.
   copy

   $ https://app.example.com/dashboard?pomerium_additional_hosts=api.example.com

   • Adds pomerium_additional_hosts query parameter at the route level to declare cross-origin authentication dependencies, so Pomerium sets session cookies across up to five domains during a single OAuth flow.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a new GetOptions API on the Databroker with field-level indexing, additional filter operators, and order by support, replacing full-record scans with targeted lookups.
   • Adds a hosted identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. type so Pomerium can manage its own OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. provider, removing the requirement to stand up an external IdP before getting started.
   • Improves MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. support by adding OAuth refresh tokenrefresh tokenA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API. issuance and honoring for MCP sessions, keeping long-running agents connected without repeated interactive logins, and by adding dynamic client registration via client ID metadata documents so MCP clients can register with Pomerium automatically.
   • Adds a control-plane debug server with gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. channelz support for inspecting live gRPC channels and connections.

   +5 more show less

   • Adds a Databroker browser debug view for browsing Databroker records directly to diagnose session, policy, or sync issues.
   • Adds streaming health updates over gRPC so dashboards and the Enterprise Console can reflect component health in real time.
   • Adds SSH session recording and playback for privileged SSH connections in Pomerium Enterprise, with full keystroke and terminal output capture reviewable from the Console.
   • Adds reverse tunneling, jump-host mode, an interactive routes portal, and per-key session revocation to Native SSH Access in v0.32.0.
   • Switches Native SSH Access from the Device Code flow to the standard OAuth Authorization Code flow.
   • Adds pomerium_additional_hosts query parameter at the route level to declare cross-origin authentication dependencies, so Pomerium sets session cookies across up to five domains during a single OAuth flow.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a new GetOptions API on the Databroker with field-level indexing, additional filter operators, and order by support, replacing full-record scans with targeted lookups.
   • Adds a hosted identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. type so Pomerium can manage its own OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. provider, removing the requirement to stand up an external IdP before getting started.
   • Adds a control-plane debug server with gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. channelz support for inspecting live gRPC channels and connections.
   • Adds a Databroker browser debug view for browsing Databroker records directly to diagnose session, policy, or sync issues.

   +3 more show less

   • Adds streaming health updates over gRPC so dashboards and the Enterprise Console can reflect component health in real time.
   • Adds SSH session recording and playback for privileged SSH connections in Pomerium Enterprise, with full keystroke and terminal output capture reviewable from the Console.
   • Adds reverse tunneling, jump-host mode, an interactive routes portal, and per-key session revocation to Native SSH Access in v0.32.0.

   2 more in Everything

2. updated seen Oct 6, 2026 · issue 096

   Pomerium adds SSH session recording, MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. hardening, distroless images, and new Enterprise Console startup flags.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢ ⤢
   └──▷ TRY IT
   Bootstrap the Enterprise Console with directory sync and auto-route creation at startup, with no web UI configuration required.
   copy

   $ pomerium-console -directory-provider github -url https://console.corp.example.com

   Navigate the Enterprise Console to review and play back an SSH session recording after an incident.
   📍In the Enterprise Console, go to Recordings, filter by the target Pomerium route and SSH user, select a recording, then click Play to replay the full terminal session.
   • Adds -directory-provider and related startup flags to the Enterprise Console, enabling full directory sync configuration without the web UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds -url startup flag to the Enterprise Console to auto-create the console's own Pomerium route on first boot.
   • Adds base-nossl-debian12 distroless base image variant for published Pomerium container images, structurally removing libssl3 from every deployment.
   • Adds node_id as an alternative stable primary key for GitHub directory provider users, preventing policy breakage on GitHub account renames.
   • Adds OAuth Client ID Metadata Document (CIMDCIMDA text-based Short Message Service protocol from Nokia for exchanging SMS messages between applications and SMS centers, used to build tools that send, receive, or test carrier messaging flows.) support for inbound MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. authorization, letting downstream clients (Claude Code, ChatGPT, MCP Inspector) identify via CIMD.

   +15 more show less

   • Adds configurable inbound Dynamic Client Registration in Pomerium Zero, off by default in Pomerium core and togglable per cluster in Zero cluster settings under the MCP section.
   • Adds RFC 8252 §7.3-compliant loopback redirect URI matching for MCP OAuth, allowing CLI clients to request a different loopback port than originally registered.
   • Relaxes client_id metadata URL validation to accept query strings, resolving rejections for ChatGPT's MCP connector.
   • Adds upstream OAuth support for MCP routes — Pomerium discovers upstream OAuth metadata, completes authorization flows, caches client and token state, and injects upstream access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. into MCP traffic.
   • Adds Dynamic Client Registration fallback for upstream MCP OAuth flows.
   • Adds auto-discovery for MCP connect, disconnect, and authorize endpoints, reducing static upstream OAuth configuration.
   • Adds pkg/mcp/configapi library exposing Pomerium's ConfigService as MCP tools, with generated schemas, sensitive-field handling, and update-safety checks.
   • Adds MCP route indicators and connect/disconnect controls to the routes portal.
   • Adds SSH session recording and playback to Pomerium Enterprise, capturing every keystroke and terminal output for privileged SSH connections.
   • Supports local on-disk directory or any S3-compatibleS3-compatibleAn object-storage API that mirrors Amazon S3's HTTP interface, so any client or cyber tool written for AWS S3 works unchanged against any compliant storage backend. bucket as SSH session recording storage, configured per cluster.
   • Adds a blob-URI builder in the Enterprise Console for configuring SSH session recording storage without hand-writing connection strings.
   • Adds a Recordings UI in the Enterprise Console to browse, sort, and filter SSH session recordings by route, SSH user, target host, duration, and size.
   • Records SSH sessions in .asciicast (asciinema-style) format for portable storage and replay.
   • Adds Revoke and block future authentication option to the session revocation dialog in the Enterprise Console.
   • Returns the cluster health panel to the Enterprise Console in a lighter-weight implementation.
   • Adds -directory-provider and related startup flags to the Enterprise Console, enabling full directory sync configuration without the web UI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds -url startup flag to the Enterprise Console to auto-create the console's own Pomerium route on first boot.
   • Adds OAuth Client ID Metadata Document (CIMDCIMDA text-based Short Message Service protocol from Nokia for exchanging SMS messages between applications and SMS centers, used to build tools that send, receive, or test carrier messaging flows.) support for inbound MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. authorization, letting downstream clients (Claude Code, ChatGPT, MCP Inspector) identify via CIMD.
   • Adds configurable inbound Dynamic Client Registration in Pomerium Zero, off by default in Pomerium core and togglable per cluster in Zero cluster settings under the MCP section.
   • Adds upstream OAuth support for MCP routes — Pomerium discovers upstream OAuth metadata, completes authorization flows, caches client and token state, and injects upstream access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. into MCP traffic.

   +9 more show less

   • Adds Dynamic Client Registration fallback for upstream MCP OAuth flows.
   • Adds auto-discovery for MCP connect, disconnect, and authorize endpoints, reducing static upstream OAuth configuration.
   • Adds pkg/mcp/configapi library exposing Pomerium's ConfigService as MCP tools, with generated schemas, sensitive-field handling, and update-safety checks.
   • Adds SSH session recording and playback to Pomerium Enterprise, capturing every keystroke and terminal output for privileged SSH connections.
   • Supports local on-disk directory or any S3-compatibleS3-compatibleAn object-storage API that mirrors Amazon S3's HTTP interface, so any client or cyber tool written for AWS S3 works unchanged against any compliant storage backend. bucket as SSH session recording storage, configured per cluster.
   • Adds a blob-URI builder in the Enterprise Console for configuring SSH session recording storage without hand-writing connection strings.
   • Adds a Recordings UI in the Enterprise Console to browse, sort, and filter SSH session recordings by route, SSH user, target host, duration, and size.
   • Records SSH sessions in .asciicast (asciinema-style) format for portable storage and replay.
   • Adds Revoke and block future authentication option to the session revocation dialog in the Enterprise Console.

   6 more in Everything

3. Enterprise Console Updates Aug 21, 2026 · issue 053

   Pomerium Enterprise Console adds -directory-provider and -url startup flags, plus a restored cluster health view.

   • Adds -directory-provider and related startup flags so directory sync can be fully configured at launch without using the web UI.
   • Adds -url startup flag that lets the console automatically create its own Pomerium route on first boot, eliminating a manual setup step for new installs.

   2 details in Everything

4. MCP OAuth Compatibility & Hardening Aug 21, 2026 · issue 053

   Pomerium adds MCP OAuthMCP OAuthAn authentication layer for the Model Context Protocol that lets MCP clients obtain delegated access tokens so cyber tools can call MCP servers on a user's behalf without handling raw credentials. server-side hardening: CIMDCIMDA text-based Short Message Service protocol from Nokia for exchanging SMS messages between applications and SMS centers, used to build tools that send, receive, or test carrier messaging flows. support, configurable inbound DCR, RFC 8252 loopback matching, and prefixed tokens.

   └──▷ HOW TO FIND IT
   Enable inbound Dynamic Client Registration for a specific cluster so downstream MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. clients can self-register, without enabling it globally.
   📍In the Zero dashboard, go to Cluster Settings for the target cluster and toggle Inbound Dynamic Client Registration on.
   • Adds OAuth Client ID Metadata Document (CIMD) support for inbound MCP routes, letting downstream clients (Claude Code, ChatGPT, MCP Inspector) identify themselves via the lighter-weight CIMD registration path instead of full DCR.
   • Adds a runtime toggle in Pomerium Zero cluster settings to enable inbound Dynamic Client Registration (DCR) per cluster; the feature ships off by default instead of relying on a single global default.
   • MCP access and refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API. are now issued with prefixes pom_mat_… and pom_mrt_…, making Pomerium-issued credentials identifiable in logs and catchable by secret-scanning tools.
   • Loopback redirect URI matching is now RFC 8252 §7.3-compliant: port differences on localhost/loopback URIs are ignored, allowing CLI clients like Claude Code to use a different loopback port than the one originally registered.
   • Relaxes client_id metadata URL validation to accept URLs containing a query string, enabling compatibility with ChatGPT's MCP connector which was previously rejected with a 400.

   5 details in Everything

5. Platform & Image Hardening Aug 21, 2026 · issue 053

   Pomerium ships distroless images and stable GitHub user keying via node_id to harden deployments.

   • Pomerium container images now use the base-nossl-debian12 distroless variant instead of base-debian12, structurally removing libssl3 from every deployment.
   • The GitHub directory provider can now use GitHub's stable node_id as the primary key for directory users instead of the GitHub login (username), so policies survive account renames or username reuse.

   2 details in Everything

6. MCP: Upstream OAuth, Dynamic Client Registration & Route Discovery Jul 28, 2026 · release notes

   Pomerium adds upstream OAuth with token caching, DCR fallback, auto-discovery, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.-facing ConfigService APIs

   • Adds upstream OAuth support for MCP routes including automatic metadata discovery, authorization flow completion, client and token state caching, and upstream access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. injection into MCP traffic.
   • Adds Dynamic Client Registration (DCR) as a fallback mechanism for upstream OAuth flows to support clients lacking Client ID Metadata Document support.
   • Injects the iss parameter in MCP authorization flows using Pomerium's host as the issuer value to align with the MCP spec.
   • Enables auto-discovery for MCP connect, disconnect, and authorize endpoints to reduce static upstream OAuth configuration requirements.
   • Implements SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly.-safe HTTP fetching for MCP metadata discovery with stricter protected-resource metadata handling including path-prefix validation.

   +3 more show less

   • Updates the routes portal UI to display server indicators and connect/disconnect controls for MCP-enabled routes.
   • Improves upstream authentication recovery by refreshing expired upstream tokens before forcing reauthentication and recovering auth after late config delivery.
   • Adds pkg/mcp/configapi library exposing Pomerium's ConfigService as MCP tools with generated schemas, sensitive-field handling, and update-safety checks.

   8 details in Everything

7. Configurable DNS Resolvers seen Jul 23, 2026 · issue 023

   Pomerium v0.32.0 adds configurable DNS resolvers with custom servers and tunable refresh rates for upstream hostname resolution.

   • Supports specifying custom DNS servers for resolving upstream routes, independent of the host system's resolver.
   • Enables tunable DNS refresh rates so Pomerium picks up record changes on a schedule matching your environment.
   • Delivers consistent, centrally configured name resolution across all Pomerium components for dynamic and clustered deployments.

   3 details in Everything

8. Faster Config Updates & a New Databroker Query Engine seen Jul 23, 2026 · issue 023

   Pomerium v0.32.0 adds incremental route diffing, a new Databroker query/index engine, and Pebble-backed in-memory storage.

   • Adds incremental config diffing for routes — only changed routes are recomputed and applied, reducing churn on large route sets.
   • Introduces Databroker indexing and query support, including field-based record lookup, a new GetOptions API, additional filter operators, and order-by.
   • Replaces the in-memory store with Pebble, aligning it with the persistent backend and setting a default path for the file backend.
   • Sync gains a latest stream option and safely aborts calls with invalid record versions, improving resilience for large deployments.

   4 details in Everything

9. Hosted Identity Provider seen Jul 23, 2026 · issue 023

   Pomerium v0.32.0 adds a hosted identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. so teams can authenticate without standing up their own OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. server.

   └──▷ HOW TO FIND IT
   Enable the Pomerium-hosted IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. as your identity source instead of wiring up an external OIDC provider — ideal for evaluations or small deployments.
   📍In the Pomerium console, go to Settings › Identity Provider and select the Pomerium-hosted IdP as your identity source.
   • New hosted identity provider type lets Pomerium manage authentication without requiring teams to configure an external OIDC provider.
   • Built-in refresh handling authenticates session refresh requests and correctly hashes the derived IdP configuration for clean session renewal.

   2 details in Everything

10. MCP: Refresh Tokens, Dynamic Client Registration & Friendlier Errors seen Jul 23, 2026 · issue 023

    Pomerium MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. gateway gains OAuth refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API., dynamic client registration, and customizable error pages.

    • Adds OAuth refresh tokenrefresh tokenA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API. support for MCP sessions, keeping long-running AI agents and clients connected without repeated interactive logins.
    • Supports dynamic client registration via client ID metadata documents, letting MCP clients register with Pomerium automatically.
    • Enables customizable MCP 401 error pages with clearer messaging for unauthorized client domains.
    • Makes allowed client domains optional in MCP configuration, simplifying onboarding.
    • Sets a proper WWW-Authenticate header on unauthorized MCP responses.

    5 details in Everything

11. MCP: Upstream OAuth, Dynamic Client Registration & Route Discovery seen Jul 23, 2026 · issue 023

    Pomerium's MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. gateway gains upstream OAuth with token caching, Dynamic Client Registration, and route auto-discovery.

    • Adds upstream OAuth support for MCP routes: Pomerium discovers upstream OAuth metadata, completes authorization flows, caches client and token state, and injects upstream access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. into MCP traffic.
    • Adds Dynamic Client Registration (DCR) as a fallback for upstream OAuth flows, enabling tools like MCP Inspector that lack Client ID Metadata Document support.
    • Includes the iss parameter in MCP authorization flows, returning Pomerium's host as the issuer to align with the upcoming 2026-07-28 MCP spec.
    • Enables auto-discovery for MCP connect, disconnect, and authorize endpoints, reducing static upstream OAuth configuration for compatible servers.
    • MCP metadata discovery now uses SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly.-safe HTTP fetching with stricter protected-resource metadata handling, including path-prefix validation.

    +3 more show less

    • MCP routes in the routes portal now display server indicators and connect/disconnect controls for easier identification and management.
    • Adds proactive upstream token refresh before forcing reauthentication, upstream auth recovery after late config delivery, and clearer errors when upstream tokens can't be resolved.
    • Introduces a new pkg/mcp/configapi library that exposes Pomerium's ConfigService as MCP tools, with generated schemas, sensitive-field handling, and update-safety checks.

    8 details in Everything

12. Native SSH: Authorization Code Flow, Reverse Tunnels & Jump-Host Mode seen Jul 23, 2026 · issue 023

    Pomerium v0.32.0 adds OAuth Authorization Code flow, reverse tunnels, jump-host mode, and an interactive routes portal for native SSH.

    └──▷ USE IT
    Enable reverse tunneling so SSH servers behind NAT or on edge networks can dial out to Pomerium and receive authorized inbound sessions.
    yaml copy

    ssh_upstream_tunnel: true

    Enable jump-host (ProxyJump) mode so clients can tunnel straight through Pomerium to an upstream SSH server without requiring the upstream to trust Pomerium's User CA.
    yaml copy

    ssh_allow_direct_tcpip: true

    Enable the interactive routes portal so users who SSH to Pomerium without specifying a route get a picker of all destinations they're authorized to reach.
    yaml copy

    ssh_routes_portal: true

    • Switches SSH authentication to the OAuth Authorization Code flow (replacing Device Code), delivering a faster browser login with full telemetry observability.
    • Adds reverse tunneling via ssh_upstream_tunnel flag, letting upstream SSH servers dial out to Pomerium — ideal for edge devices, NAT'd networks, and isolated environments.
    • Adds jump-host (ProxyJump) mode via ssh_allow_direct_tcpip flag, letting clients connect through Pomerium to upstreams without requiring the upstream to trust Pomerium's User CA.
    • Adds an interactive routes portal via ssh_routes_portal flag, presenting authorized destinations as a picker when a client SSHes to Pomerium without specifying a route.
    • Adds per-key session management and revocation in the Pomerium UI, binding each SSH key to an OAuth user with policy evaluated on every connection.

    +1 more show less

    • Adds Pomerium policy support for upstream SSH tunnels.

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !SSH authentication now uses the Authorization Code grant; upstream IdPs must have the Authorization Code grant enabled (v0.31.x and earlier used Device Code, which is no longer used).
13. Revoke and Block: Stronger Session Revocation (Enterprise) seen Jul 23, 2026 · issue 023

    Pomerium Enterprise adds Revoke and block future authentication to permanently lock out users during incident response.

    └──▷ HOW TO FIND IT
    During an incident response, permanently lock out a compromised user so they cannot silently re-authenticate through SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. after session revocation.
    📍In the Enterprise Console, go to Sessions, find the target user's session, open the revocation dialog, and select Revoke and block future authentication.
    • Adds a Revoke and block future authentication option to the session revocation dialog, preventing SSO re-authentication loops after revocation.
    • Enforces blocks via a deny/revocation list so blocked users are rejected on all subsequent requests, not just the current session.

    2 details in Everything

14. SSH Session Recording (Enterprise) seen Jul 23, 2026 · issue 023

    Pomerium Enterprise adds SSH session recording with full keystroke capture, S3-compatibleS3-compatibleAn object-storage API that mirrors Amazon S3's HTTP interface, so any client or cyber tool written for AWS S3 works unchanged against any compliant storage backend. storage, and a Console playback UI.

    └──▷ HOW TO FIND IT
    Review a full audit trail of a privileged SSH session after the fact — filter by user or host, then replay terminal output.
    📍In the Enterprise Console, go to Recordings, filter by SSH user or target host, select a session, and click Play to replay the recorded terminal output.
    • Adds full SSH session capture and playback: every keystroke and terminal output for privileged SSH connections is recorded and replayable directly from the Enterprise Console.
    • Supports flexible recording storage: point recordings at a local on-disk directory or any S3-compatible bucket, configured per cluster.
    • Introduces a blob-URI builder in the Enterprise Console so admins can configure recording storage without hand-writing connection strings, with support for Go CDK driver options and advanced parameters.
    • New Recordings UI lets teams browse, sort, and filter SSH session recordings by route, SSH user, target host, duration, and size.
    • Recordings are stored in open, portable asciinema-style (.asciicast) format for easy archiving, parsing, and third-party replay.

    5 details in Everything

15. SSH Session Recording (Enterprise) seen Jul 23, 2026 · issue 004

    Pomerium Enterprise adds SSH session recording with full keystroke capture, S3-compatibleS3-compatibleAn object-storage API that mirrors Amazon S3's HTTP interface, so any client or cyber tool written for AWS S3 works unchanged against any compliant storage backend. storage, and a Console playback UI.

    └──▷ HOW TO FIND IT
    Review a full audit trail of a privileged SSH session after the fact — filter by user or host, then replay terminal output.
    📍In the Enterprise Console, go to Recordings, filter by SSH user or target host, select a session, and click Play to replay the recorded terminal output.
    • Adds full SSH session capture and playback: every keystroke and terminal output for privileged SSH connections is recorded and replayable directly from the Enterprise Console.
    • Supports flexible recording storage: point recordings at a local on-disk directory or any S3-compatible bucket, configured per cluster.
    • Introduces a blob-URI builder in the Enterprise Console so admins can configure recording storage without hand-writing connection strings, with support for Go CDK driver options and advanced parameters.
    • New Recordings UI lets teams browse, sort, and filter SSH session recordings by route, SSH user, target host, duration, and size.
    • Recordings are stored in open, portable asciinema-style (.asciicast) format for easy archiving, parsing, and third-party replay.

    5 details in Everything

16. Native SSH: Authorization Code Flow, Reverse Tunnels & Jump-Host Mode seen Jul 23, 2026 · issue 004

    Pomerium v0.32.0 adds OAuth Authorization Code flow, reverse tunnels, jump-host mode, and an interactive routes portal for native SSH.

    └──▷ USE IT
    Enable reverse tunneling so SSH servers behind NAT or on edge networks can dial out to Pomerium and receive authorized inbound sessions.
    yaml copy

    ssh_upstream_tunnel: true

    Enable jump-host (ProxyJump) mode so clients can tunnel straight through Pomerium to an upstream SSH server without requiring the upstream to trust Pomerium's User CA.
    yaml copy

    ssh_allow_direct_tcpip: true

    Enable the interactive routes portal so users who SSH to Pomerium without specifying a route get a picker of all destinations they're authorized to reach.
    yaml copy

    ssh_routes_portal: true

    • Switches SSH authentication to the OAuth Authorization Code flow (replacing Device Code), delivering a faster browser login with full telemetry observability.
    • Adds reverse tunneling via ssh_upstream_tunnel flag, letting upstream SSH servers dial out to Pomerium — ideal for edge devices, NAT'd networks, and isolated environments.
    • Adds jump-host (ProxyJump) mode via ssh_allow_direct_tcpip flag, letting clients connect through Pomerium to upstreams without requiring the upstream to trust Pomerium's User CA.
    • Adds an interactive routes portal via ssh_routes_portal flag, presenting authorized destinations as a picker when a client SSHes to Pomerium without specifying a route.
    • Adds per-key session management and revocation in the Pomerium UI, binding each SSH key to an OAuth user with policy evaluated on every connection.

    +1 more show less

    • Adds Pomerium policy support for upstream SSH tunnels.

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !SSH authentication now uses the Authorization Code grant; upstream IdPs must have the Authorization Code grant enabled (v0.31.x and earlier used Device Code, which is no longer used).
17. MCP: Upstream OAuth, Dynamic Client Registration & Route Discovery seen Jul 23, 2026 · issue 004

    Pomerium's MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. gateway gains upstream OAuth with token caching, Dynamic Client Registration, and route auto-discovery.

    • Adds upstream OAuth support for MCP routes: Pomerium discovers upstream OAuth metadata, completes authorization flows, caches client and token state, and injects upstream access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. into MCP traffic.
    • Adds Dynamic Client Registration (DCR) as a fallback for upstream OAuth flows, enabling tools like MCP Inspector that lack Client ID Metadata Document support.
    • Includes the iss parameter in MCP authorization flows, returning Pomerium's host as the issuer to align with the upcoming 2026-07-28 MCP spec.
    • Enables auto-discovery for MCP connect, disconnect, and authorize endpoints, reducing static upstream OAuth configuration for compatible servers.
    • MCP metadata discovery now uses SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly.-safe HTTP fetching with stricter protected-resource metadata handling, including path-prefix validation.

    +3 more show less

    • MCP routes in the routes portal now display server indicators and connect/disconnect controls for easier identification and management.
    • Adds proactive upstream token refresh before forcing reauthentication, upstream auth recovery after late config delivery, and clearer errors when upstream tokens can't be resolved.
    • Introduces a new pkg/mcp/configapi library that exposes Pomerium's ConfigService as MCP tools, with generated schemas, sensitive-field handling, and update-safety checks.

    8 details in Everything

18. Revoke and Block: Stronger Session Revocation (Enterprise) seen Jul 23, 2026 · issue 004

    Pomerium Enterprise adds Revoke and block future authentication to permanently lock out users during incident response.

    └──▷ HOW TO FIND IT
    During an incident response, permanently lock out a compromised user so they cannot silently re-authenticate through SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. after session revocation.
    📍In the Enterprise Console, go to Sessions, find the target user's session, open the revocation dialog, and select Revoke and block future authentication.
    • Adds a Revoke and block future authentication option to the session revocation dialog, preventing SSO re-authentication loops after revocation.
    • Enforces blocks via a deny/revocation list so blocked users are rejected on all subsequent requests, not just the current session.

    2 details in Everything

19. MCP: Refresh Tokens, Dynamic Client Registration & Friendlier Errors seen Jul 23, 2026 · issue 004

    Pomerium MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. gateway gains OAuth refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API., dynamic client registration, and customizable error pages.

    • Adds OAuth refresh tokenrefresh tokenA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API. support for MCP sessions, keeping long-running AI agents and clients connected without repeated interactive logins.
    • Supports dynamic client registration via client ID metadata documents, letting MCP clients register with Pomerium automatically.
    • Enables customizable MCP 401 error pages with clearer messaging for unauthorized client domains.
    • Makes allowed client domains optional in MCP configuration, simplifying onboarding.
    • Sets a proper WWW-Authenticate header on unauthorized MCP responses.

    5 details in Everything

20. Hosted Identity Provider seen Jul 23, 2026 · issue 004

    Pomerium v0.32.0 adds a hosted identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. so teams can authenticate without standing up their own OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. server.

    └──▷ HOW TO FIND IT
    Enable the Pomerium-hosted IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. as your identity source instead of wiring up an external OIDC provider — ideal for evaluations or small deployments.
    📍In the Pomerium console, go to Settings › Identity Provider and select the Pomerium-hosted IdP as your identity source.
    • New hosted identity provider type lets Pomerium manage authentication without requiring teams to configure an external OIDC provider.
    • Built-in refresh handling authenticates session refresh requests and correctly hashes the derived IdP configuration for clean session renewal.

    2 details in Everything

21. Faster Config Updates & a New Databroker Query Engine seen Jul 23, 2026 · issue 004

    Pomerium v0.32.0 adds incremental route diffing, a new Databroker query/index engine, and Pebble-backed in-memory storage.

    • Adds incremental config diffing for routes — only changed routes are recomputed and applied, reducing churn on large route sets.
    • Introduces Databroker indexing and query support, including field-based record lookup, a new GetOptions API, additional filter operators, and order-by.
    • Replaces the in-memory store with Pebble, aligning it with the persistent backend and setting a default path for the file backend.
    • Sync gains a latest stream option and safely aborts calls with invalid record versions, improving resilience for large deployments.

    4 details in Everything

22. Configurable DNS Resolvers seen Jul 23, 2026 · issue 004

    Pomerium v0.32.0 adds configurable DNS resolvers with custom servers and tunable refresh rates for upstream hostname resolution.

    • Supports specifying custom DNS servers for resolving upstream routes, independent of the host system's resolver.
    • Enables tunable DNS refresh rates so Pomerium picks up record changes on a schedule matching your environment.
    • Delivers consistent, centrally configured name resolution across all Pomerium components for dynamic and clustered deployments.

    3 details in Everything

23. SSH Session Recording (Enterprise) Jun 19, 2026 · release notes

    Pomerium Enterprise adds SSH session recording and playback with Console UI and S3/local storage support

    └──▷ HOW TO FIND IT
    Use the Enterprise Console to navigate to SSH settings and configure storage using the new blob-URI builder without manual connection strings
    📍Go to Settings › Native SSH Access › Recording Storage in the Enterprise Console
    • Adds a blob-URI builder in the Enterprise Console for configuring SSH recording storage via Go CDK driver options
    • Adds SSH session recording and playback UI in the Enterprise Console with filtering by route, user, host, duration, and size
    • Captures SSH sessions in .asciicast format for portable storage and replay

    3 details in Everything

24. Revoke and Block: Stronger Session Revocation (Enterprise) Apr 8, 2026 · release notes

    Pomerium adds Revoke and block option to prevent SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. re-auth loops in Enterprise Console

    └──▷ HOW TO FIND IT
    Immediately block a compromised user from re-authenticating via SSO during an incident.
    📍In the Enterprise Console session management dialog, check Revoke and block future authentication before confirming revocation
    • Adds a Revoke and block future authentication checkbox to the session revocation dialog in the Enterprise Console

    1 detail in Everything

25. Configurable DNS Resolvers Jan 20, 2026 · release notes

    Pomerium v0.32.0 introduces configurable DNS resolvers and tunable refresh rates via new configuration options.

    • Adds the ability to specify custom DNS servers for upstream hostname resolution, allowing Pomerium to bypass the host system's resolver
    • Adds tunable DNS record refresh intervals so administrators can control how frequently Pomerium updates cached address records

    2 details in Everything

26. Native SSH: Authorization Code Flow, Reverse Tunnels & Jump-Host Mode Jan 20, 2026 · release notes

    Pomerium v0.32.0 adds SSH reverse tunnels, jump-host mode, OAuth auth code flow and interactive routes portal

    • SSH logins now use the standard Authorization Code grant instead of Device Code for faster browser login.
    • Adds support for reverse tunneling via the ssh_upstream_tunnel runtime flag to reach hosts behind NAT or edge devices.
    • Enables jump-host (ProxyJump) mode through the ssh_allow_direct_tcpip runtime flag, allowing policy enforcement without upstream trust of Pomerium's User CA.
    • Introduces an interactive routes portal enabled by the ssh_routes_portal runtime flag for selecting destinations from a picker.
    • Allows per-key session revocation listed in the Pomerium UI.

    5 details in Everything