Enhancements and bug fixes - December 2024

The following changes are included in this release.

Elastic Cloud SAML single-sign on is now generally available. You can now centrally control authentication and authorization to your Elastic Cloud organization by setting up SAML single-sign on, either through the Elastic Cloud UI or the API.

Using this feature, you can automatically provision accounts for new users and map IdP groups to Elastic Cloud roles. You can also optionally enforce SSO login for all members of your organization.

For more information, refer to Configure Elastic Cloud SAML single sign-on.

Use both methods to resolve DNS challenge. From now, the domain challenge can be stored either as a TXT record on an elastic_challenge.domain.com subdomain, or as a TXT record in domain.com that has the value elastic_challenge=token.

Set Kibana session timeout on the specific Cloud SSO authc provider. Updates the kibana.yml rendering logic to only set the session timeout for the Cloud SSO authc provider (only in versions 7.11+).

Updated the dry run error message and steps in the deployment Activity page. The indications that a dry run plan attempt was a failure were temporarily removed. The error message was due to the new plan not having been applied, which is the expected behavior with a dry run.