Mobile SDKs: Native support for Android and Apple platforms

Two changes landing together to harden identity and integration security. Organizations can now configure and manage SSO directly from Organization > Settings > SSO Settings. Primary and additional login domains, IdP metadata, SAML attribute mapping, and Entra ID or generic SAML 2.0 are editable in place, with no support ticket needed for setup, domain renames, certificate rotation, or metadata refresh. Custom integrations connecting to the Management API now use OAuth 2.0 Scoped Grants instead of long-lived personal access tokens. Users see and approve exactly what an integration can do on a consent page, with scopes at the resource-action level on a publish, write, read hierarchy, per-space selection, short-lived access tokens, rotating refresh tokens, and immediate revocation. Self-service SSO and OAuth 2.0 Scoped Grants is both available on Premium and Enterprise.

You can now create an environment — a place for safely testing automation tools (like FlowMotion or the Storyblok MCP Server), workflows, and configuration changes without touching production. As teams are increasingly adopting automation tools directly inside their production spaces, we're releasing this initial version to get a safe place to test automations into your hands quickly to reduce the risk of unintended changes, and we'll be expanding the Environments capabilities based on what we hear from you. This is the first step in a longer roadmap we'll build with you. In this first release, the feature introduces: Environment creation: a new setup flow lets you configure your new Space with options to decide what you'd like to bring from your Space to the new environment, including:Whether to recreate custom roles and user access assignmentsWhether to duplicate the component structure or use the Shared Components App insteadWhether to carry over asset folder structure and internal tags (note: assets themselves are not duplicated)Environment switcher: a new sidebar component to see which environment you're in and switch between environments tied to the same production space.Environment Scoped Personal Access Tokens: tokens can be restricted to a specific environment to keep your production Space safe. How it works: The environment has access to the same functionalities as the main SpaceThe environment automatically duplicates the content, components, and datasources from the main Space. Duplicating custom roles and user access assignments during environment creation is optional.Usage inside an environment (AI credits, storage, traffic) counts toward your organization's overall quota.1 Environment per Org is included at no additional cost for Elite Plan Organizations. Additional paid Environments are available for Premium & Elite Plans. For this initial release, there is no visual tool to promote the changes, but it can still be done via CLI. Also, Apps configuration, releases, pipelines, workflows/stages, and other items are not yet duplicated during the Environment creation — support for these is considered for future iterations. Learn More