v16.23.0

v16.23.0 - Add locks for managed secrets.

Locks can be used to grant exclusive access to retrieving a secret for one person at a time.
Upon releasing the lock the managed secret gets automatically rotated

v16.22.0

v16.22.0 - Add activity tracking for ssh and rdp drivers, allowing inactivity timeout for resource locks

v16.21.0

v16.21.0 - Requestable Account, Resource, and Role Entitlements

• Added RequestableAccountEntitlements, RequestableResourceEntitlements, and RequestableRoleEntitlements services for listing requestable access entitlements by account, resource, and role

v16.20.0

v16.20.0 - The MCP Gateway resource that supports connections to remote MCP servers with fine-grained Cedar policies for controlling MCP tool calls.

Supported authentication modes:

• MCP Gateway (OAuth): uses a user token obtained via OAuth
• MCP Gateway (PAT): uses a Personal Access Token (Bearer token)
• MCP Gateway (NoAuth): for servers that do not require authorization

v16.17.0

v16.17.0 - Add access request ID to account grant

• AccountGrant now exposes access_request_id, the ID of the access request that created the grant, if any

v16.16.0

v16.16.0 - New variants of MCP Gateway resource

• Added MCP Gateway (PAT) dedicated for connections with common Bearer token
• Added MCP Gateway (NoAuth) dedicated for connections that do not require any authorization

v16.15.0

v16.15.0 - Mark Databricks SQL driver as stable

• mark Databricks SQL driver stable

v16.14.0

v16.14.0 - Add resource lock timeouts

v16.13.0

v16.13.0 - Granted Account, Resource, and Role Entitlements

• Added GrantedAccountEntitlements, GrantedResourceEntitlements, and GrantedRoleEntitlements services for listing access entitlements by account, resource, and role

v16.12.0

v16.12.0 - Add oktaGroups support

• Adds the oktaGroups driver to resource related endpoints