Ory Network, Ory Kratos v26.2.2 released

Ory Network, Ory Kratos

Phone number verification with SMS code

You can now verify phone numbers through the standalone verification flow, not just as a side effect of registration. When an SMS courier channel is configured, the verification page accepts both email addresses and phone numbers.

• The verification form input label changes to "Email or phone number" when an SMS channel is configured. Without an SMS channel, the label remains "Email".

• Submitting a phone number sends a verification code via SMS.

• The UI shows SMS-specific confirmation and success messages instead of email-specific ones.

• Unknown phone numbers are handled silently (no SMS is sent) to prevent enumeration and avoid SMS costs.

Update identity traits and metadata from OIDC claims on login

You can now configure OIDC providers to automatically update identity traits and metadata from the upstream provider's claims on every login — not just during registration.

Set update_identity_on_login to automatic on any OIDC provider to enable this. The same Jsonnet claims mapper that runs during registration will re-run on each login. If the mapper output differs from the stored identity, traits and metadata are updated before post-login hooks run.

The mapper receives the current identity as std.extVar('identity') with traits, metadata_public, and metadata_admin, so you can write conditional logic that preserves existing values or merges selectively.

When the mapper omits metadata_public or metadata_admin from its output, existing values are preserved. When it explicitly outputs {}, the fields are cleared.

This setting is available per provider in the Ory Console under advanced settings, and via the API as update_identity_on_login on the provider configuration.

This is now available on Ory Network, for the Ory Enterprise License, and will be part of the next Ory Open Source release.

Ory Hydra, Ory Keto, Ory Oathkeeper, Ory Polis, Ory Elements, Ory Enterprise License, and Ory Terraform

No significant changes in this release.