Skip to main content

Release notes: SecureAuth CIAM 2.28.1

Summary of changes in SecureAuth CIAM platform (formerly known as Cloudentity) version 2.28.1.

For platform component version details, see SecureAuth platform dependencies version reference.

Release Date: September 11, 2026

Bug fixes​

  • Clock difference tolerance for access token validation – Access token validation now tolerates a small clock difference between nodes when checking a token's issued-at and not-before times, which removes the occasional Token is not valid yet rejection seen on multi-node deployments shortly after a token was issued. The tolerance is 30 seconds by default and is configurable at the deployment level; validation of token expiry is unchanged. Deployments that moved from 2.27.7 to 2.28.0 regain this behavior. [AUT-13888]

  • Security updates – This release includes security updates to platform dependencies and base images.