Spitfire 0.22.0 release notes
Released: 2026-10-10
- SAML 2.0 single sign-on: sign in with ADFS, Entra ID, Okta, Keycloak and other SAML identity providers (Single sign-on page → SAML 2.0). The identity provider gets the entity ID and the ACS, or the SP metadata; the IdP's metadata comes from its URL or as XML. Sign-in always starts at Spitfire: the response's signature, audience and validity are checked, an encrypted assertion is opened, and responses Spitfire did not ask for are refused. As with OIDC: e-mail domains, allowed and admin groups, group sync and accounts created on first sign-in.
Updating
Your installation tells you about a new release itself: admins see its notes and the update command for that installation at the top of the UI. The command backs up the database first and keeps the settings (Updating). You can also follow new releases with the RSS feed.