These updates are focused on improving account reliability, reducing duplicate users, and giving administrators more control over how users are created and managed through SSO and SCIM integrations.
Highlights
Improved control and reliability for SSO and SCIM provisioning workflows
Reduced risk of duplicate user accounts during identity synchronization
Better handling of expired and deleted accounts
More accurate user profile updates
Expanded support for forwarding activity logs to external monitoring platforms
SSO & SCIM Improvements
Greater Control Over SSO and SCIM Provisioning
Core 7.5.2 introduces new controls that give administrators more flexibility over how user accounts are created, updated, and managed through SSO and SCIM integrations.
What’s new:
SCIM provisioning can now be enabled or disabled independently.
SSO login behavior can now be configured to:
Allow or prevent automatic user creation
Allow or prevent profile updates from identity providers
Benefits:
Helps organizations align Core with internal identity management policies
Prevents unintended user creation before provisioning is fully configured
Allows SSO to be used strictly for authentication when desired
Reduces the chance of identity provider data overwriting administrator-managed profile information
Improved User Matching & Duplicate Prevention
Several enhancements have been made to improve account matching and reduce duplicate user creation during SSO and SCIM synchronization.
Enhancements include:
Deleted user accounts are no longer reused during SCIM provisioning
Existing users created outside of SCIM are now matched more reliably
Username handling between SSO and SCIM has been standardized
Benefits:
Reduces duplicate accounts during onboarding and migrations
Improves sign-in consistency for end users
Minimizes administrative cleanup and troubleshooting
Improved Handling of Expired Users
Core now prevents expired users from being unintentionally reactivated through SCIM or identity provider updates.
What changed:
Identity provider updates will no longer automatically restore expired users to active status.
Profile updates can still be applied without reactivating the account.
Benefits:
Preserves administrator-controlled access decisions
Helps maintain accurate license and seat management
Prevents unintended user access restoration
User Profile Experience
More Accurate Profile Updates in the User Interface
Core now updates only the fields that a user or administrator intentionally changes within a profile.
What improved:
Editing individual profile settings no longer triggers unnecessary updates to unrelated profile fields.
Benefits:
Reduces accidental profile changes
Improves reliability when managing user settings
Creates a cleaner and more predictable editing experience
Activity Log & Monitoring Enhancements
Expanded External Activity Log Forwarding
Core now supports forwarding activity log events to additional external monitoring and observability platforms.
What’s new:
Multiple external destinations can now receive activity log events simultaneously.
External forwarding works alongside Core’s primary internal logging system.
Configuration can be managed at the environment and tenant level.
Benefits:
Improves visibility into platform activity
Supports centralized monitoring and compliance workflows
Enables easier integration with existing enterprise observability tools
Adds flexibility for organizations with custom reporting requirements