🚀 Alpha Identity Server Release Notes

:rocket: Alpha Identity Server Release Notes
Release Date: May 14, 2026


:locked_with_key: 1. Force Logout Without Consent Page

A new env configuration has been added to support direct global logout without displaying the consent/confirmation page.

:gear: Configuration :label: Variable :pushpin: Value
Environment Variable IDS_FORCE_GLOBAL_LOGOUT true

:sparkles: Behaviour

  • Users are logged out immediately from the Identity Server session.
  • Logout consent page is skipped when IDS_FORCE_GLOBAL_LOGOUT enabled.

:shield: 2. Client Secret Expiry Validation Improvements (NPFRBT-1388)

Updated client validation logic for client_secret_expires_at.

The client is now considered valid when:

:clipboard: Condition :white_check_mark: Behaviour
client_secret_expires_at <= 1970-12-31T23:59:59.999Z Treated as non-expiring
client_secret_expires_at >= current timestamp Treated as valid

:sparkles: Benefits

  • Supports permanent/non-expiring client credentials.
  • Prevents unintended authentication failures for legacy clients.

:spouting_whale: Docker Image

:package: Service :label: Image Tag
Identity Server neutrinos.azurecr.io/alpha/alpha-identity-server:26.5.8.1.38-rc.0