New Features
OIDC Public Clients
Orchestrator Upgrade Required
This feature requires Orchestrator release v2025.05.2 or higher.

Click to enlarge
In a OIDC app you can now mark an app as a public client. Public clients, such as SPAs and native applications, cannot securely store authentication credentials. Therefore, public clients support a limited set of grant types, namely:
Authorization Code
Refresh Token
Implicit (ID Token)
Implicit (Access Token)
Learn more about OIDC application patterns.
LDAP Provider
Limited Availability
The LDAP provider is not enabled by default. If you would like to enable this on your account please contact support@strata.io.
Fixes
Improve the single logout URL experience when migrating from Environments to Deployments.