Ory Network, Ory Kratos v26.2.11 released

Ory Network

Bulk terminate identity sessions from the console

Admins can now terminate sessions for many identities at once from the identities list in the console. Each row has a checkbox, and the new selection banner shows how many identities are selected with a single "Terminate sessions" action.

For typesense search, a "Select all matching" link selects every identity that matches the active filter, up to 250 results. Beyond that point, the banner shows "Too many matches. Refine your search to use this action." For basic search, the same link iterates the paginated list and selects up to 5000 identities, with a toast when the cap is reached.

For the no-filter case, the wildcard path tells the backend to drain every session in the project in batches, so no client-side pagination is required.

Closing the confirmation dialog mid-termination cancels the in-flight request and stops further calls.

This is now available on Ory Network.

Ory Kratos

Accept Microsoft Entra's non-standard SCIM payload for removing group members

Microsoft Entra deviates from RFC 7644 when removing a single member from a group: instead of a value-path filter (path: members[value eq "<id>"]), it sends op: remove with a bare path: members and the member to remove in a value array. SCIM now interprets this payload as a selective remove of the listed members. Previously the bare path caused every member of the group to be cleared, so any Entra-provisioned group was emptied on a single-user remove event. RFC 7644-compliant payloads (a bare remove with no value, or a value-path filter) are unchanged.

This is now available on Ory Network and for the Ory Enterprise License.

Ory Hydra, Ory Keto, Ory Oathkeeper, Ory Polis, Ory Elements, and Ory Terraform

No significant changes in this release.