Alpha Identity Server Release Notes
Release Date: May 14, 2026
1. Force Logout Without Consent Page
A new env configuration has been added to support direct global logout without displaying the consent/confirmation page.
| Environment Variable | IDS_FORCE_GLOBAL_LOGOUT |
true |
Behaviour
- Users are logged out immediately from the Identity Server session.
- Logout consent page is skipped when
IDS_FORCE_GLOBAL_LOGOUTenabled.
2. Client Secret Expiry Validation Improvements (NPFRBT-1388)
Updated client validation logic for client_secret_expires_at.
The client is now considered valid when:
client_secret_expires_at <= 1970-12-31T23:59:59.999Z |
Treated as non-expiring |
client_secret_expires_at >= current timestamp |
Treated as valid |
Benefits
- Supports permanent/non-expiring client credentials.
- Prevents unintended authentication failures for legacy clients.
Docker Image
| Identity Server | neutrinos.azurecr.io/alpha/alpha-identity-server:26.5.8.1.38-rc.0 |