https://cybertoolchain.io/tools/stytch New releases and features in Stytch, tracked by The Cyber Toolchain. en Wed, 10 Jun 2026 00:00:00 GMT https://stytch.com/docs/resources/changelog#2026-06-10 https://stytch.com/docs/resources/changelog#2026-06-10 Wed, 10 Jun 2026 00:00:00 GMT Adds locale parameter to SMS and WhatsApp OTP API for Japanese, Russian, Dutch, Polish, Turkish, Persian, Vietnamese, and Czech languages • `locale` API parameter now accepts `ja`, `ru`, `nl`, `pl`, `tr`, `fa`, `vi`, and `cs` to set the language of SMS/WhatsApp OTP messages Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2026-01-23-email-risk-beta-update-to-event-log-streaming?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2026-01-23-email-risk-beta-update-to-event-log-streaming?utm_source=LaunchNotes&utm_medium=rss Fri, 16 Jan 2026 23:29:17 GMT Stytch adds Email Risk beta API for fraud detection and updates Event Log Streaming to remove Start events and add frontend SDK Error events • Adds `Check Email Risk` beta API endpoint returning `ALLOW`, `BLOCK`, or `CHALLENGE` actions based on email domain signals • Updates Event Log Streaming to remove duplicate `Start` events from the log stream starting 2026-01-30 • Updates Event Log Streaming to include previously missing frontend SDK `Error` events in the log stream Breaking changes: • The `Start` event type is removed from Event Log Streaming; monitoring/alerting using this event must switch to `Success` or `Error` events Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2026-01-23-email-risk-beta-update-to-event-log-streaming https://changelog.stytch.com/announcements/2026-01-23-email-risk-beta-update-to-event-log-streaming Fri, 16 Jan 2026 00:00:00 GMT Introduces the Email Risk API beta and announces frontend SDK error events in Event Log Streaming beginning January 30, 2026. • Adds the Check Email Risk beta API (`https://stytch.com/docs/fraud/api/check-email-risk`) to return `ALLOW`, `BLOCK`, or `CHALLENGE` actions and risk scores for email addresses. Contact the fraud team for beta access. • Announces that Event Log Streaming will include frontend SDK error events beginning January 30, 2026. Breaking changes: • Removing Start events from the Event Log stream starting 2026-01-30 means API events will no longer generate duplicate Start records; alerting or monitoring relying on `Start` events must be updated to use `Success` or `Error` events instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-11-07-sso-migration-gateway-beta?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-11-07-sso-migration-gateway-beta?utm_source=LaunchNotes&utm_medium=rss Fri, 07 Nov 2025 16:59:03 GMT Stytch introduces SSO Migration Gateway (beta) to route SAML callbacks between legacy auth and Stytch with no downtime. • Adds the SSO Migration Gateway (beta), a reverse proxy that routes SAML callbacks between an existing auth service and Stytch for incremental, low-risk cutover. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/client-id-metadata-documents-cimd-1?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/client-id-metadata-documents-cimd-1?utm_source=LaunchNotes&utm_medium=rss Fri, 17 Oct 2025 16:19:01 GMT Adds Client ID Metadata Documents (CIMD) support for Connected Apps to enable automatic client discovery and registration. • Enables CIMD discovery and registration for Stytch Connected Apps via dashboard or Terraform modules. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/client-id-metadata-documents-cimd-1 https://changelog.stytch.com/announcements/client-id-metadata-documents-cimd-1 Fri, 17 Oct 2025 00:00:00 GMT Adds Client ID Metadata Documents (CIMD) support for OAuth client discovery and registration • Enables CIMD discovery and registration directly in the Stytch Connected Apps dashboard. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-09-09-stytch-connected-apps-for-existing-auth-systems?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-09-09-stytch-connected-apps-for-existing-auth-systems?utm_source=LaunchNotes&utm_medium=rss Tue, 09 Sep 2025 15:59:04 GMT Stytch Connected Apps now supports integration with existing external authentication systems via OAuth • Adds support for "Connected Apps" that function as identity providers for any existing authentication system, not just Stytch core auth Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-09-09-stytch-connected-apps-for-existing-auth-systems https://changelog.stytch.com/announcements/2025-09-09-stytch-connected-apps-for-existing-auth-systems Tue, 09 Sep 2025 00:00:00 GMT Stytch Connected Apps now supports existing auth systems for OAuth and agent workflows • Adds support for using any existing authentication system as the core identity provider for Stytch Connected Apps • Enables issuing OAuth tokens for cross-app and AI agent + MCP interactions without migrating auth stacks • Provides consent UI with full lifecycle management and org-level policy controls for non-Stytch auth backends Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-09-05-stytch-datadog-integration?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-09-05-stytch-datadog-integration?utm_source=LaunchNotes&utm_medium=rss Fri, 05 Sep 2025 15:59:01 GMT Stytch adds a first-party Datadog integration for Event Log Streaming with one-click dashboard setup • Adds first-party Stytch Datadog integration to stream API events into observability Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-09-05-stytch-datadog-integration https://changelog.stytch.com/announcements/2025-09-05-stytch-datadog-integration Fri, 05 Sep 2025 00:00:00 GMT Stytch adds first-party Datadog integration for Event Log Streaming with one-click dashboard • Adds first-party Datadog integration to Stytch Event Log Streaming Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-08-29-stytch-php-sdk-user-device-history?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-08-29-stytch-php-sdk-user-device-history?utm_source=LaunchNotes&utm_medium=rss Fri, 29 Aug 2025 15:59:01 GMT Stytch PHP SDK GA with B2B auth headers and User Device History • Enables User Device History integration by allowing passing of a Telemetry ID to authentication endpoints for new device notifications. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-08-29-stytch-php-sdk-user-device-history https://changelog.stytch.com/announcements/2025-08-29-stytch-php-sdk-user-device-history Fri, 29 Aug 2025 00:00:00 GMT Stytch PHP SDK release and User Device History for B2B/Consumer auth • Adds the `stytch/stytch-php` Composer package for building authentication flows in PHP ecosystems including Laravel, Symfony, or WordPress • Introduces `MethodOptions` to set custom headers like `X-Stytch-Member-Session` in B2B Authorization settings • Enables User Device History recording powered by Stytch Device Fingerprinting for known device tracking and adaptive MFA triggers Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-08-15-standalone-sso-refresh-consumer-rbac-custom-scopes-copy-env-configs?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-08-15-standalone-sso-refresh-consumer-rbac-custom-scopes-copy-env-configs?utm_source=LaunchNotes&utm_medium=rss Fri, 15 Aug 2025 17:07:37 GMT Stytch adds external ID support to standalone SSO API, copy env configs in Dashboard, and consumer RBAC with custom scopes • Accepts `external_id` in Stytch SSO APIs to map unique identifiers from other sources for standalone modules. • Allows copying configurations across environments via the top-level environment switcher or 'Copy from' button on config pages. • Supports RBAC policies and custom scopes for consumer applications, requiring explicit assignment of roles and resources. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-08-15-standalone-sso-refresh-consumer-rbac-custom-scopes-copy-env-configs https://changelog.stytch.com/announcements/2025-08-15-standalone-sso-refresh-consumer-rbac-custom-scopes-copy-env-configs Fri, 15 Aug 2025 00:00:00 GMT Stytch adds standalone SSO external IDs, RBAC/copy-env via Dashboard UI, and consumer custom scopes • Adds support for external organization IDs in Stytch SSO APIs for standalone SSO alongside an existing authentication system. • Enables copying configurations across environments in the Stytch Dashboard • Introduces RBAC policies and custom scopes for consumer applications Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/saml-shield-zero-day-protection-for-your-saml-stack?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/saml-shield-zero-day-protection-for-your-saml-stack?utm_source=LaunchNotes&utm_medium=rss Wed, 06 Aug 2025 15:57:47 GMT Stytch launches open-source SAML Shield to detect SAML protocol vulnerabilities like XML signature wrapping before they reach your app. • Launches `SAML Shield`, a new protocol-level validator that inspects incoming SAML responses using a hardened ruleset to detect threats such as XML signature wrapping, replay attacks, and entity injection. • Adds integration via a managed backend (with automatic rule updates within 24 hours of CVE drops), a proxy mode for applications you do not control, and an open-source Node.js library for local validation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-08-01-isagent-mcp-ai-agents-panel-redirect-url-in-dashboard?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-08-01-isagent-mcp-ai-agents-panel-redirect-url-in-dashboard?utm_source=LaunchNotes&utm_medium=rss Fri, 01 Aug 2025 14:59:03 GMT New isAgent NPM package and panel for detecting agentic traffic; Dashboard redirect URL management. • Adds the `@stytch/is-agent` npm package with an isAgent() function returning `is_agent_client_hint` and `identity`, plus a React `<IsAgent>` component to detect and handle programmatic/LLM traffic • Adds Dashboard navigation to `Configuration > Redirect URLs` tab at `/dashboard/redirect-urls` to update and assign defaults for project redirect URLs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-08-01-isagent-mcp-ai-agents-panel-redirect-url-in-dashboard https://changelog.stytch.com/announcements/2025-08-01-isagent-mcp-ai-agents-panel-redirect-url-in-dashboard Fri, 01 Aug 2025 00:00:00 GMT New isAgent NPM package for AI traffic detection, MCP panel event, and dashboard redirect URL editor • Adds `@stytch/is-agent` NPM package with JavaScript/React support to detect agentic traffic via `is_agent_client_hint` and `identity` fields This is not a security measure: attackers can modify browser responses. • Enables editing and assigning default project redirect URLs in the Dashboard under Configuration > Redirect URLs tab or `/dashboard/redirect-urls` path Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-07-25-self-serve-event-log-streaming-member-email-updates-and-country-code-allowlists?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-07-25-self-serve-event-log-streaming-member-email-updates-and-country-code-allowlists?utm_source=LaunchNotes&utm_medium=rss Fri, 25 Jul 2025 17:17:09 GMT Self-serve event log streaming setup, member-initiated email updates, and country code allowlists for SMS/WhatsApp. • Adds `Activity → Stream Settings` in the dashboard to self-serve configure event log streaming to Datadog or Grafana Loki without support contact. • Adds a `Start a self-serve email update endpoint` allowing members to change their own email via magic link with 5-minute reservation. • Adds per-project country code allowlists for SMS and WhatsApp traffic to block toll fraud, configurable via Dashboard, Terraform, or Programmatic Workspace Actions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-07-25-self-serve-event-log-streaming-member-email-updates-and-country-code-allowlists https://changelog.stytch.com/announcements/2025-07-25-self-serve-event-log-streaming-member-email-updates-and-country-code-allowlists Fri, 25 Jul 2025 00:00:00 GMT Stytch adds self-serve event log streaming via dashboard/API, member email update flow, and country code allowlists for SMS/WhatsApp. • Adds manual setup of event log streaming in the `Activity → Stream Settings` dashboard view to send logs to Datadog or Grafana Loki without support assistance. • Adds the ability for members to update their own email addresses via a self-serve flow using `email magic links`, controlled by the `stytch.[self|member].update.info.email` RBAC permission. • Adds per-project country code allowlists for SMS and WhatsApp traffic to restrict outbound messages to specific countries, configurable via dashboard, Terraform, or Programmatic Workspace Actions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-07-18-trusted-auth-tokens-text-customization-fingerprinting-improvements?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-07-18-trusted-auth-tokens-text-customization-fingerprinting-improvements?utm_source=LaunchNotes&utm_medium=rss Fri, 18 Jul 2025 16:19:07 GMT Stytch adds Trusted Auth Tokens via /sessions/attest, full text customization in Auth SDKs, and fingerprinting improvements. • Adds `Trusted Auth Tokens` capability to exchange any trusted JWT into a Stytch session • Adds the `/sessions/attest` endpoint for attesting external JWTs • Adds `strings` prop support for full text customization in B2B and Consumer Auth SDKs (JS, Android, iOS) • Uses `node_modules/@stytch/vanilla-js/messages/b2b/en.po` and `node_modules/@stytch/vanilla-js/messages/en.po` as default text catalogs for overriding strings Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-07-18-trusted-auth-tokens-text-customization-fingerprinting-improvements https://changelog.stytch.com/announcements/2025-07-18-trusted-auth-tokens-text-customization-fingerprinting-improvements Fri, 18 Jul 2025 00:00:00 GMT Stytch 2025.07.18 introduces Trusted Auth Tokens to extend sessions from third-party JWTs and allows comprehensive text customization in JS/Android/iOS Auth SDKs. • Stytch 2025.07.18 introduces Trusted Auth Tokens to extend sessions from third-party JWTs and allows comprehensive text customization in JS/Android/iOS Auth SDKs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-07-10-stytch-mcp-server?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-07-10-stytch-mcp-server?utm_source=LaunchNotes&utm_medium=rss Thu, 10 Jul 2025 15:59:01 GMT Launch of official Stytch MCP Server for programmatic agent configuration • Adds the `Stytch MCP Server` at mcp.stytch.dev to allow AI agents and developers to configure Stytch projects programmatically Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-07-10-stytch-mcp-server https://changelog.stytch.com/announcements/2025-07-10-stytch-mcp-server Thu, 10 Jul 2025 00:00:00 GMT Official Stytch MCP Server launch enables programmatic project configuration via AI agents • Launches the official Stytch Model Context Protocol (MCP) Server for programmatic automation of Stych projects, redirect URLs, and email templates. • Enables AI agents to configure Stytch assets programmatically using OAuth-based agent authorization, replacing dashboard clicks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-06-27-stytch-dashboard-refresh?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-06-27-stytch-dashboard-refresh?utm_source=LaunchNotes&utm_medium=rss Fri, 27 Jun 2025 16:10:44 GMT Stytch dashboard refresh introduces quick search (⌘K/Ctrl+K), unified Activity tab for logs, and reorganized workspace settings. • Adds keyboard shortcut `⌘K` / `Ctrl+K` for quick search to find settings, products, project details, or copy IDs • Unifies Event Logs and Device Fingerprinting Logs under the new 'Activity' tab in left-hand navigation • Relocates workspace settings (team, billing, project configurations) to a dedicated new page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-06-27-stytch-dashboard-refresh https://changelog.stytch.com/announcements/2025-06-27-stytch-dashboard-refresh Fri, 27 Jun 2025 00:00:00 GMT Stytch dashboard refresh introduces global ⌘K/Ctrl+K search and unified Activity tab for logs. • Adds `⌘K` / `Ctrl+K` keyboard shortcut to the dashboard to quickly find settings, products, project details, or copy IDs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-06-20-improved-user-locking-configuration-device-fingerprinting-verdict-reason-overrides?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-06-20-improved-user-locking-configuration-device-fingerprinting-verdict-reason-overrides?utm_source=LaunchNotes&utm_medium=rss Fri, 20 Jun 2025 16:17:52 GMT New dashboard UI for user lockout thresholds and API overrides for fraud verdict reasons • Adds dashboard configuration for fine-tuned user locking thresholds in the Basic settings section with new default values Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-06-20-improved-user-locking-configuration-device-fingerprinting-verdict-reason-overrides https://changelog.stytch.com/announcements/2025-06-20-improved-user-locking-configuration-device-fingerprinting-verdict-reason-overrides Fri, 20 Jun 2025 00:00:00 GMT Adds user-level lockout configuration in dashboard and fraud verdict reason overrides via API • Adds ability to override default actions for specific device fingerprinting verdict reasons (e.g. `VIRTUAL_MACHINE`) via API or backend SDKs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-06-17-connected-apps-organization-app-policies-and-consent-management?utm_source=LaunchNotes&utm_medium=rss https://changelog.stytch.com/announcements/2025-06-17-connected-apps-organization-app-policies-and-consent-management?utm_source=LaunchNotes&utm_medium=rss Tue, 17 Jun 2025 15:59:01 GMT Adds organization-level app policies allowing admins to manage, revoke, and allowlist connected third-party apps. • Enables IT administrators to view all authorized third-party apps and their granted scopes within a Stytch organization. • Allows revocation of access to any connected app through the dashboard or API. • Supports enforcing an allowlist to restrict which apps members can connect with. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-06-17-connected-apps-organization-app-policies-and-consent-management https://changelog.stytch.com/announcements/2025-06-17-connected-apps-organization-app-policies-and-consent-management Tue, 17 Jun 2025 00:00:00 GMT Stytch adds organization-level app policies allowing admins to view grants, revoke access via API or dashboard, and enforce allowlists. • Adds ability to view all authorized third-party apps and their granted scopes for Stytch organization members • Enables admins to revoke access to a connected app through the dashboard or API. • Introduces an allowlist enforcement feature to restrict which apps members can connect with Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/hackathon-projects-stytch-component-playground-a-live-ui-builder-for-your-next-login-flow https://changelog.stytch.com/announcements/hackathon-projects-stytch-component-playground-a-live-ui-builder-for-your-next-login-flow Fri, 23 May 2025 00:00:00 GMT Stytch introduces a live UI builder to help developers create and export custom login flow configurations quickly. • Adds `Component Playground`, a browser-based builder to theme, preview, and copy production-ready UI configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/hackathon-projects-unified-mobile-biometrics-ship-faster-support-everyone https://changelog.stytch.com/announcements/hackathon-projects-unified-mobile-biometrics-ship-faster-support-everyone Thu, 22 May 2025 00:00:00 GMT Stytch pre-built mobile UI now includes native Touch ID, Face ID, and Android Biometric Prompt support. • Adds `Touch ID`, `Face ID` and `Android Biometric Prompt` to the pre-built mobile UI for iOS and Android. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/hackathon-projects-stytch-cli-and-connected-apps-in-the-command-line https://changelog.stytch.com/announcements/hackathon-projects-stytch-cli-and-connected-apps-in-the-command-line Mon, 19 May 2025 00:00:00 GMT Release of the Stytch CLI tool for managing authentication projects from the terminal. • Releases the `stytch` CLI tool (available via npm or go install) to run Stytch API commands directly in the terminal. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-04-25-manage-scim-connections-in-the-stytch-dashboard https://changelog.stytch.com/announcements/2025-04-25-manage-scim-connections-in-the-stytch-dashboard Fri, 25 Apr 2025 00:00:00 GMT New dashboard UI for managing SCIM connections directly in the Stytch admin interface • Adds a new management interface within the Stytch Dashboard to view and configure SCIM connections without requiring support tickets Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-04-11-connected-apps-for-remote-mcp-servers-webhooks-for-consumer-auth https://changelog.stytch.com/announcements/2025-04-11-connected-apps-for-remote-mcp-servers-webhooks-for-consumer-auth Fri, 11 Apr 2025 00:00:00 GMT New support for Connected Apps on remote MCP servers and webhooks for Consumer Auth user mutations • Adds `Stytch Connected Apps` support for authorization of Remote Model Context Protocol (MCP) servers • Adds webhook event types for user creation, updates, and deletion in the Consumer Auth platform • Adds a `webhooks` tab in the Stytch dashboard side navigation to configure webhook URLs and event types Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-04-04-external-ids https://changelog.stytch.com/announcements/2025-04-04-external-ids Fri, 04 Apr 2025 00:00:00 GMT New External IDs feature allows referencing users and members with custom identifiers instead of UUIDs • Adds `external_id` parameter to CreateUser, CreateMember, PasswordMigrate, UpdateUser, and UpdateMember endpoints • Allows using external IDs in path parameters for GET /v1/users/<external_id> and GET /v1/b2b/organizations/<slug>/member endpoints • Enables external IDs in user_ids/member_ids search filters for UserSearch and MemberSearch endpoints Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-03-28-cname-improvements-for-test-environments https://changelog.stytch.com/announcements/2025-03-28-cname-improvements-for-test-environments Fri, 28 Mar 2025 00:00:00 GMT Custom CNAME support in Stytch test environments via Project Settings. • Adds full support for custom CNAMEs in test environments Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2025-03-07-improved-device-fingerprinting-dashboard https://changelog.stytch.com/announcements/2025-03-07-improved-device-fingerprinting-dashboard Fri, 07 Mar 2025 00:00:00 GMT Stytch adds rule impact testing and expanded identifiers (ip_address, country_code, asn) to Device Fingerprinting • Adds `Rule Impact Testing` to the Device Fingerprinting dashboard to compare potential verdict actions over the past 7 days before deploying a rule • Expands Device Fingerprinting rule identifiers to include `ip_address`, `country_code`, and `asn` alongside existing options • Adds `Identifier Context` view in the dashboard showing how many fingerprints share a particular identifier Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/launch-week-admin-portal-self-serve-management-for-organizations-and-enterprise-auth https://changelog.stytch.com/announcements/launch-week-admin-portal-self-serve-management-for-organizations-and-enterprise-auth Thu, 20 Feb 2025 00:00:00 GMT Stytch launches embeddable Admin Portal components for self-serve org and enterprise auth management • Adds `AdminPortalSSO`, `AdminPortalOrgSettings`, `AdminPortalMemberManagement`, and `AdminPortalSCIM` components to the `@stytch/react/b2b/adminPortal` module Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/launch-week-connected-apps-make-any-app-an-oauth-provider-for-integrations-and-ai-agents https://changelog.stytch.com/announcements/launch-week-connected-apps-make-any-app-an-oauth-provider-for-integrations-and-ai-agents Wed, 19 Feb 2025 00:00:00 GMT Stytch introduces Connected Apps to make any app an OAuth 2.0/OIDC identity provider via dashboard and SDK • Introduces `Connected Apps` feature allowing applications to act as compliant OAuth 2.0/OIDC Identity Providers • Adds ability to configure `Client types`, `Custom scopes`, `Custom claims`, `Secret rotation`, `PKCE`, and `Redirect URLs` for Connected Apps • Enables issuing access tokens, transferring authentication state, and authenticating AI agents via the new Connected Apps integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/launch-week-fraud-risk-prevention-intelligent-rate-limiting-real-time-monitoring-and-more https://changelog.stytch.com/announcements/launch-week-fraud-risk-prevention-intelligent-rate-limiting-real-time-monitoring-and-more Tue, 18 Feb 2025 00:00:00 GMT Stytch adds live traffic charts to fraud dashboard, filters event logs without telemetry IDs, and enables SDK support for Fraud & Risk Prevention • Adds `dashboard` live chart view with filters for verdict actions, reasons, and detected device types to visualize traffic health • Upgrades `event_log` filtering to allow navigation by time frame or parameters without requiring a specific telemetry ID • Enables dashboard-based rule creation from existing fingerprints, allowing selection of action and expiration directly in the UI • Improves `Intelligent Rate Limiting` (IntRL) precision for low-volume fraudulent traffic detection via refined internal sub-signals • Extends Fraud and Risk Prevention endpoints to backend SDKs for Node, Go, Python, Ruby, Kotlin, Java, and Rust Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2024-12-20-programmatic-workspace-actions-terraform https://changelog.stytch.com/announcements/2024-12-20-programmatic-workspace-actions-terraform Fri, 20 Dec 2024 00:00:00 GMT Stytch adds Programmatic Workspace Actions API and open beta Terraform provider for IaC management • Adds Programmatic Workspace Actions through the Management API or Go SDK to create projects, configure SDK settings, manage public tokens and secrets, define RBAC policies, set redirect URLs, and update email templates. • Launches open beta Stytch Terraform Provider for provisioning and automating Stytch projects via declarative Infrastructure-as-Code Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2024-12-13-email-otp-cross-org-passwords-1 https://changelog.stytch.com/announcements/2024-12-13-email-otp-cross-org-passwords-1 Fri, 13 Dec 2024 00:00:00 GMT Adds Email OTP and Cross-Org Passwords as new B2B authentication methods. • Adds Email One-Time Passcodes (OTP) as a primary authentication method for B2B organizations, enabling verification of email ownership via one-time passcodes sent to the user's email. • Adds Cross-Organization Passwords support, allowing users to log in to all their organizations with a single shared password and supporting organization-specific logins and discovery flows. Enabling this requires a project with no active members who already have passwords. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/email-subject-2024-12-06-dfp-external-metadata-react-native-pre-built-ui https://changelog.stytch.com/announcements/email-subject-2024-12-06-dfp-external-metadata-react-native-pre-built-ui Fri, 06 Dec 2024 00:00:00 GMT Adds external_metadata field to DFP API and B2B pre-built UI components for React Native SDK • Adds `external_metadata` field to the Device Fingerprinting API's Fingerprint Lookup endpoint to associate user data with Stych fingerprints. • Enables searchable metadata in the DFP analytics Dashboard, allowing searches by external metadata fields. • Auto-populates the `external_metadata` field for DFP Protected Auth integrations via the Stytch SDK. • Adds a suite of B2B pre-built UI components (MFA, Passwords, Email Magic Links, OTP, TOTP, Discovery) to the React Native SDK. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2024-11-08-github-oauth-b2b-sandbox-values https://changelog.stytch.com/announcements/2024-11-08-github-oauth-b2b-sandbox-values Fri, 08 Nov 2024 00:00:00 GMT Adds GitHub as a B2B OAuth provider with JIT provisioning and B2B sandbox test values • Enables GitHub as an official OAuth provider for B2B authentication, supporting Just-in-Time (JIT) Provisioning and Discovery. • Adds sandbox values to the B2B API, including `sandbox@stytch.com` email and sample organization IDs for testing in the Test environment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2024-10-25-improved-sso-connections https://changelog.stytch.com/announcements/2024-10-25-improved-sso-connections Fri, 25 Oct 2024 00:00:00 GMT Adds External SSO Connections for multi-org sharing and OIDC custom scopes, attribute mapping to trusted_metadata, and auto token refresh • Adds External SSO Connections enabling a single SAML or OIDC connection to authenticate across multiple organizations • Adds custom OIDC scopes configurable per connection or through query parameters. • Adds attribute mapping for OIDC connections to propagate values into the member's `trusted_metadata` field • Adds automatic refresh of OIDC access tokens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2024-10-11-stytch-sso-login https://changelog.stytch.com/announcements/2024-10-11-stytch-sso-login Fri, 11 Oct 2024 00:00:00 GMT Stytch dashboard now supports SSO login for all accounts with self-serve configuration via Workspace Settings. • Adds SSO login to stytch.com for all account tiers, including Free, allowing developers to log in via SAML or OIDC. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2024-09-18-stytch-fraud-risk-prevention https://changelog.stytch.com/announcements/2024-09-18-stytch-fraud-risk-prevention Wed, 18 Sep 2024 00:00:00 GMT Stytch launches Fraud & Risk Prevention with intelligent rate limiting, a configurable rules engine (Allow/Challenge/Block), and ML-powered device detection via API. • Adds intelligent rate limiting driven by predictive analysis of device, user, and traffic sub-signals to detect unusual traffic volumes and adapt to new attacker profiles in real-time without restricting legitimate users. • Introduces a Security Rules Engine that allows programmatic configuration of Allow, Challenge, or Block verdicts via API or Dashboard for bespoke access rules. • Deploys an ML-powered device detection model that programmatically assesses the risk of new or spoofed browser types by comparing them against historical version data. • Provides a cloneable example app on GitHub demonstrating Adaptive MFA implementation using Stytch's Device Fingerprinting to enforce MFA only for unrecognized devices. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2024-09-13-slack-and-hubspot-oauth https://changelog.stytch.com/announcements/2024-09-13-slack-and-hubspot-oauth Fri, 13 Sep 2024 00:00:00 GMT Adds Slack and HubSpot as OAuth providers with JIT provisioning and email verification capabilities • Adds support for Slack and HubSpot OAuth providers alongside Google and Microsoft • Introduces `email_verification` step to challenge users when OAuth providers do not guarantee verified emails • Enables JIT provisioning by OAuth tenant, allowing bypass of email verification for specific tenants Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2024-09-06-scim-groups-scim-admin-portal https://changelog.stytch.com/announcements/2024-09-06-scim-groups-scim-admin-portal Fri, 06 Sep 2024 00:00:00 GMT Stytch adds SCIM Groups support and a new Admin Portal UI for managing SCIM connections • Adds `scim_group_implicit_role_assignments` field to SCIM Connection config to automate role assignment from IdP groups • Adds SCIM configuration and management interface in the Stytch Admin Portal for creating, deleting, and rotating tokens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch https://changelog.stytch.com/announcements/2024-08-30-new-dashboard-roles-sms-autofill https://changelog.stytch.com/announcements/2024-08-30-new-dashboard-roles-sms-autofill Fri, 30 Aug 2024 00:00:00 GMT New templated dashboard roles and SMS autofill for OTP login across mobile SDKs • Adds templated user roles (admins, developers, support agents) in Workspace settings for simpler permission management • Enables automatic Stytch role assignments based on email domains for JIT Provisioning workflows • Adds SMS autofill for OTP login in pre-built UI components across iOS, Android, and React Native SDKs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/stytch