21st October, 2026

• WHAT'S NEW:
• Automatic Tracking of User Renames in Active Directory: The LDAP Gateway now tracks users by their immutable unique identifier (objectGUID). When a user’s username or email changes in Active Directory, the existing miniOrange account is updated automatically instead of creating a duplicate. Synchronizations run seamlessly with no manual intervention required.
• Delete or Disable Users on Deletion: With Delete User Sync enabled, administrators can now choose how miniOrange handles users deleted from Active Directory: automatically delete the user or disable them. Disabling retains the user’s record in miniOrange while blocking access.
• SSL Certificate Management for LDAPS: A new SSL Certificate section in the Admin Console lets administrators view certificate details, track expiration dates, and receive proactive alerts before certificates expire. Certificates can be updated directly from the console without backend configuration, minimizing downtime during rotations.
• Custom NameID for Kerberos/IWA SSO: Administrators using Kerberos/IWA authentication can now configure the NameID attribute and format of the SAML assertion sent during Kerberos-authenticated SSO. Choose which LDAP attribute—such as mail, userPrincipalName, sAMAccountName, or any custom attribute—is sent to downstream Service Providers as the user identifier, ensuring compatibility with Service Providers requiring specific NameID values or formats.

• IMPROVEMENTS:
• Redesigned Admin Panel: The LDAP Gateway admin panel has been redesigned with a cleaner, more consistent look across all configuration pages. Layout and navigation are easier to follow, while all existing LDAP integration features and settings remain fully functional.
• Faster, Lighter Bulk User Sync: Large-scale user synchronizations now consume less memory and finish faster. The LDAP Gateway calculates changes more efficiently and retrieves user data in parallel, reducing overall sync time and server resources needed.
• Asynchronous User Sync with Status Tracking: LDAP synchronization now runs asynchronously so large syncs no longer block system processes. Each sync operation is assigned a transaction ID that lets you follow its status in real time, improving overall stability and visibility.
• Safer User Cleanup with Source Identification: The LDAP Gateway now tags synced users with a dedicated LDAP source identifier so they can be distinguished from users provisioned through other channels (such as HRMS via SCIM/API). During user cleanup and delete sync, only users originally created by the Gateway are removed, leaving all other user records untouched across on-premise and cloud deployments.

• BUG FIXES:
• Duplicate Users in Multi-Directory Sync Fix: Resolved an issue where configuring multiple Active Directories with overlapping users could create duplicate entries during one-time synchronization. The LDAP Gateway now correctly identifies unique users across all connected directories to prevent re-creating existing users.
• Additional Admin Login Fix: The miniOrange LDAP Gateway now correctly authenticates Additional Admin users. Previously, Additional Admin accounts received an "Incorrect Username/Password" error when attempting to log in, caused by an invalid customer validation response from the IAM API. This issue has been resolved; Additional Admin users can now log in to the gateway admin console as expected.