SSO Self-Service
- Infrastructure
- Security
Organization owners and admins can now self-configure and manage SSO, OpenID Connect (OIDC), SAML 2.0, and Microsoft Entra ID, directly in Storyblok.
OAuth 2.0 Scoped Grants
- Extensions
- Security
- Developer Experience
OAuth 2.0 Scoped Grants are now available for custom integrations connecting to the Management API.
Instead of relying on long-lived personal access tokens, integrations can request clearly defined permissions that users review and approve on a consent page. Scopes are set at the resource-action level using a publish, write, and read hierarchy, with per-space selection, short-lived access tokens, rotating refresh tokens, and immediate revocation.
OAuth 2.0 Scoped Grants are available on Premium and Enterprise.