IAM 8.4 release notes Toggle navigation About Release and support Release notes IAM 8.4 - Changelog Required upgrade actions Deprecation announcement Incubating features Installation and upgrade Operation Initial configuration Configuration management Authentication Self-services Target applications OAuth and OIDC SAML API access control Flows (Airlock IAM concept) Loginapp Configuration Adminapp Configuration Service Container Configuration Transaction Approval Configuration IAM REST APIs Customizing UIs and texts Security best practices Third-party licenses Release and support Release notes IAM 8.4 release notes This chapter describes new features in Airlock IAM 8.4, lists potentially necessary changes when upgrading from IAM 8.3 to 8.4, and lists features removed in 8.4.  Info This is an LTS (long-term support) release of Airlock IAM. For further information, see: Release information for earlier supported releases: IAM 8.3 release notes IAM 8.2 release notes IAM 8.1 release notes Airlock IAM 8.4 is available here: Product download page: Techzone download area Quay.io: https://quay.io/airlock/iam Main new features  Info Refer to the IAM 8.4 - Changelog for a complete list of changes. Config automation Using YAML Configuration CLIs Configuration snippets Config Editor standalone mode: see IAM Config Editor (UI) . Check out the deep-dive video on the new config automation features: - OIDC / OAuth Delegation and Impersonation in token exchange Improved performance for very large numbers of end-users / tokens. Configurable issuer and audience for Client Credential Grant access tokens . Open API enforcement for requests and responses for all IAM REST APIs Flow Improvements Configuration context retention policies On-failure gotos Generic events in flow steps Additional and custom attributes in REST responses Authentication Factors Suggest display names for FIDO/Passkey during enrollment self-service (see FIDO passkey registration and migration ) Persist transports to improve FIDO Passkey login experience Display Airlock 2FA device activation code in Adminapp Display Cronto cryptogram in Adminapp OATH OTP enrollment self-services for end-users Support Redis Sentinel mode Usage analytics Release Video -