[Yandex Cloud documentation](../index.md) > [Yandex Identity Hub](index.md) > Release notes

# Yandex Identity Hub release notes


## April 2026 {#april-2026}

* Added label management for organization user groups.


## March 2026 {#march-2026}

* Added MFA policy exception [management](operations/mfa/excluded-audience.md) functions.
* Supported additional parameters for binding an access policy to a cloud or folder.



## January 2026 {#january-2026}

* Added support for SMS as an [MFA](concepts/mfa.md) factor.

## December 2025 {#december-2025}

* Added a list of allowed `--acr-id` values when configuring an MFA policy in the CLI.


## November 2025 {#november-2025}

* Implemented the [My account](concepts/my-account.md) portal for user account management.


## October 2025 {#october-2025}

* Implemented [MFA policy](concepts/mfa.md#mfa-policies) management in organizations.
* Enabled suspension and reactivation of SAML federation users.
* Now you can [view](operations/get-users-groups.md) which groups a given user belongs to within an organization.


## Q3 2025 {#q3-2025}

* Added commands for managing SAML federation domains using the [CLI](../cli/cli-ref/organization-manager/cli-ref/federation/saml/index.md) and [API](saml/api-ref/Federation/index.md). <code><b><small>CLI</small></b></code> <code><b><small>API</small></b></code>
* Restored the option to [set up](operations/federation-group-mapping.md) access permissions to Yandex Cloud resources using federated user group mapping. <code><b><small>Management console</small></b></code> <code><b><small>Terraform</small></b></code>
* [Added](operations/enable-2fa-access.md) the option to enforce two-factor authentication for all Yandex account users of an organization. <code><b><small>Management console</small></b></code>


## Q2 2025 {#q2-2025}

* Yandex Identity Hub is now in [Public Preview](../overview/concepts/launch-stages.md).
* Enabled the use of [refresh tokens](../iam/concepts/authorization/refresh-token.md#token-enabling) in the Yandex Cloud CLI. <code><b><small>CLI</small></b></code>

## Q1 2025 {#q1-2025}

* [Updated](operations/hide-user-info.md) user visibility management in [organizations](concepts/organization.md). <code><b><small>Management console</small></b></code>


## Q4 2024 {#q4-2024}

* [Added](operations/hide-user-info.md) user visibility management in [organization](concepts/organization.md). <code><b><small>Management console</small></b></code>
* [OS Login](concepts/os-login.md) package building script is now available on VMs running Ubuntu 24.04.
* [Added](../iam/roles-reference.md#organization-manager-passportUserAdmin) the `organization-manager.passportUserAdmin` role to manage organization [users](concepts/membership.md) with [Yandex accounts](https://yandex.ru/id/about).
* In [Yandex Audit Trails](../audit-trails/index.md), [added](../audit-trails/concepts/events.md#organization) events for federated user group management: `CreateGroupMapping`, `DeleteGroupMapping`, and `UpdateGroupMapping`.
* Implemented user notification about the expiration of their Yandex Cloud SAML certificates.


## Q3 2024 {#q3-2024}

* Implemented sending notifications within an organization. <code><b><small>Management console</small></b></code>
* Added a script for deletion of OS Login packets from a virtual machine.
* You can now see the last authentication date of a service account or federated users. <code><b><small>Management console</small></b></code> <code><b><small>CLI</small></b></code> <code><b><small>API</small></b></code>
* Added federated user deletion event to Audit Trails: `DeleteFederatedUserAccounts`.


## Q2 2024 {#q2-2024}

* Added the **ACS URL** field for Yandex Identity Hub. <code><b><small>Management console</small></b></code>
* Added the `labels` parameter to work with labels when creating federations in Terraform. <code><b><small>Terraform</small></b></code>
* Added [OS Login](concepts/os-login.md) support for [CentOS Stream 9](https://yandex.cloud/en/marketplace/products/yc/centos-stream-9).
* Added validation of user numeric ID (UID) for [OS Login](concepts/os-login.md).


## Q1 2024 {#q1-2024}

* Added an option to delete federated users via the [CLI](../cli/cli-ref/organization-manager/cli-ref/federation/saml/delete-user-accounts.md) and [API](saml/api-ref/Federation/deleteUserAccounts.md). <code><b><small>CLI</small></b></code> <code><b><small>API</small></b></code>
* Fixed the Replay Attack vulnerability for SAML.