- API tokens: Ability to restrict requests based on IP addresses, and user permissions can be set based on group memberships.
- Kerberos: Possibility to enable SSO for user avatar URLs.
- SAML: Support for login hint when using 2-step login.
- OIDC: Redirect based on user directory does not save selected user directories.
- Name change of IP restriction modes to prevent confusion with IP lists.
- Improved SAML test page debug info.
- More robust test login incognito mode detection.