Klyo Changelog
Klyo Changelog
Every release of Klyo Gateway, Klyo Marketplace, and Klyo Context Engine, written for the security architects, platform engineers, and procurement teams who read it.
Latest updates
Browse the full timeline →Single sign-on is preserved across upgrades
Upgrading no longer drops a configured single sign-on. An install coming from an older version with OpenID Connect set up could find SSO gon…
Multiple identity providers with group-based access and roles
Single sign-on now supports more than one identity provider. LDAP directories and OIDC issuers are configured as a list, so staff in an Entr…
Saved provider and Secure-LLM keys now apply across all pods
A saved provider or Secure-LLM API key now works on every pod. Previously a key was known only to the pod that handled the save, so another…
Sign-in fixes for Entra, reverse proxies, and LDAP
Several sign-in paths are fixed. Microsoft Entra logins no longer fail with an unreachable-provider error: the signed identity token already…
Self-service certificate and secret management for single sign-on
Managing single sign-on credentials is now self-service. For Microsoft Entra, the gateway generates the sign-in certificate itself — create…
Single sign-on hardened with PKCE and strict token validation
Single sign-on is hardened. The authorization code exchange is protected with PKCE, and every endpoint is taken from the provider's own disc…