Issues

• Active Directory user store moves the user entry to the User Search Base when the cn attribute is updated

  Team/User & identity administration
  wso2/product-is#28611 · Filter by author vfraga opened on Oct 15, 2026
  1

• SAML Authentication Behavior Compatibility Between IS 6.1 and IS 7.3

  Type/BugU2
  wso2/product-is#28610 · Filter by author Manchiz opened on Oct 15, 2026

• Upgrade third-party dependencies: Bouncy Castle 1.86, Solr 10.0.0.wso2v6, httpclient5 in yubico-webauthn

  Type/Improvement
  wso2/product-is#28609 · Filter by author raviendalpatadu opened on Oct 15, 2026
  

• SCIM2 Outbound provisioning with AWS IAM Identity Center fails due to mismatch in the payload

  Type/Bug
  wso2/product-is#28601 · Filter by author piraveena opened on Oct 15, 2026
  1

  

• [Feature] Support conditional branching in flows

  Team/Authentication & registrationType/NewFeature
  Feature

  wso2/product-is#28595 · Filter by author ashanthamara opened on Oct 14, 2026
  

• IdentityKeyStoreGeneratorImpl uses non-conforming country code in context certificate DN, fails with Bouncy Castle 1.85+

  Bug

  wso2/product-is#28592 · Filter by author raviendalpatadu opened on Oct 14, 2026
  

• [Migration]Concerns regarding OIDC claims

  Type/BugU2
  wso2/product-is#28591 · Filter by author DilshaniSH opened on Oct 14, 2026
  

• Console support for approval workflows on adding or removing users from a group

  Team/User & identity administrationType/Improvement
  wso2/product-is#28588 · Filter by author sadilchamishka opened on Oct 14, 2026
  

• Sub organization role support for B2B SaaS applications

  Team/B2BType/NewFeature
  Feature

  wso2/product-is#28587 · Filter by author VIHANGAGIT opened on Oct 14, 2026
  

• Account lock is silently lost when accountLocked is "Managed in user store" and the user store write fails

  Type/Bug
  wso2/product-is#28586 · Filter by author ShammiL opened on Oct 14, 2026

• [Bug] SCIM PATCH attempts LDAP attribute update for internally managed custom claims in secondary AD user store – WSO2 IS 7.3.0

  Team/Identity Server CoreType/Bug
  wso2/product-is#28584 · Filter by author VasiiH opened on Oct 13, 2026

• Gaps in Verifiable Credential Presentation feature

  wso2/product-is#28583 · Filter by author shashimalcse opened on Oct 13, 2026
  1

• Password recovery flow fails for users in a secondary user store

  Team/Authentication & registrationType/Bug
  wso2/product-is#28582 · Filter by author RushanNanayakkara opened on Oct 13, 2026

• Password recovery flow writes all existing user claims back to the user store

  Team/Authentication & registrationType/Bug
  Bug

  wso2/product-is#28581 · Filter by author RushanNanayakkara opened on Oct 13, 2026
  

• DCR update ignores 'require_pushed_authorization_requests' and sets PAR from 'require_signed_request_object'

  Component/OAuthTeam/API Access Mgt & AuthorizationType/BugU2
  wso2/product-is#28580 · Filter by author pavinduLakshan opened on Oct 13, 2026
  1

• Organization APIs are listed in the API Authorization of M2M applications although M2M apps cannot be shared with organizations

  Priority/HighTeam/API Access Mgt & AuthorizationType/BugType/UXui
  wso2/product-is#28579 · Filter by author pavinduLakshan opened on Oct 13, 2026

• AI Gateway Integration Documentation is using an outdate version of API Platform

  AI-Agent/In-ProgressType/BugType/Docs
  wso2/product-is#28576 · Filter by author sajitha-tj opened on Oct 12, 2026
  1

  

• Orphaned IDN_FED_AUTH_SESSION_MAPPING data from IS 6.x is not removed by the session data cleanup scripts or the migration client

  Team/Identity Server CoreType/BugU2
  wso2/product-is#28575 · Filter by author ishita2002rai opened on Oct 12, 2026

• Support URL / URN vct and SD-JWT VC Type Metadata for credential templates

  Type/Improvement
  wso2/product-is#28563 · Filter by author shashimalcse opened on Oct 9, 2026

• Support credential revocation with IETF Token Status List (issuer and OpenID4VP verifier)

  Type/NewFeature
  wso2/product-is#28562 · Filter by author shashimalcse opened on Oct 9, 2026
  1

• Connect external data sources for credential issuance

  Type/NewFeature
  wso2/product-is#28561 · Filter by author shashimalcse opened on Oct 9, 2026

• Support configurable issuer display (name, logo, locale) in OpenID4VCI Credential Issuer metadata

  Type/Improvement
  wso2/product-is#28560 · Filter by author shashimalcse opened on Oct 9, 2026

• Support per-tenant signing key and certificate management (import, CSR, purpose-based keys) for OpenID4VP/OpenID4VCI

  Team/API Access Mgt & AuthorizationType/NewFeature
  wso2/product-is#28559 · Filter by author shashimalcse opened on Oct 9, 2026

• SCIM2 GET /Groups (Console "Groups" page) fails with HTTP 500 when a PRIMARY user store contains a group

  Type/BugU2
  wso2/product-is#28557 · Filter by author lakshithakasun opened on Oct 9, 2026
  

• Remove all authorized applications of a user does not revoke tokens that have a token binding

  Type/BugU2
  wso2/product-is#28556 · Filter by author mifrazmurthaja opened on Oct 9, 2026