SqlOS 3.26: Code-Owned Stays Code-Owned
Configuration ownership now covers branding and OAuth client lifecycle, FGA roles stay a startup contract, and public auth-page colors fail closed.
Blog
Auth, hierarchical authorization, EF Core, and practical .NET application security — release by release.
Configuration ownership now covers branding and OAuth client lifecycle, FGA roles stay a startup contract, and public auth-page colors fail closed.
Organization MFA now gates every token and code, admin lists use keyset cursors, and password and MFA admission stay atomic across replicas.
A patch release that tightens schema upgrades, confidential OAuth client authentication, and delegated SSO setup lifecycles.
Configure identity in code, operate it through authenticated APIs, and troubleshoot it in the dashboard without adding an external identity platform.
Use OAuth client credentials and SqlOS FGA for background workers while keeping credentials, policy, and revocation inside your application and SQL Server.