Mar 13, 2026 - Cloud

New features

• SSO is Now Generally Available: Single sign-on with custom claims role mapping for OIDC, SAML, and Entra ID is now GA, giving organizations a production-ready way to manage Bindplane access through their identity provider.

• Splunk & Chronicle Forwarder Migration Now Generally Available: The Splunk Universal Forwarder and Chronicle Forwarder migration tools are now GA, providing production-ready paths to migrate existing forwarder configurations into Bindplane-managed pipelines.

• SecOps Pipelines is Now in Public Preview: Configure and manage Google SecOps data processing pipelines directly within Bindplane.

• Multiple API Keys per User: Users can now create up to 25 API keys, each with a custom description and optional expiration date. Keys can be individually revoked, and the UI shows last-used timestamps and expiration status so you can keep track of what's active.

• Bindplane AI Skill CLI: New CLI commands let you generate, install, update, and uninstall Bindplane as an AI skill for coding assistants like Claude Code, Cursor, and OpenCode, bringing Bindplane's CLI capabilities directly into your AI-assisted development workflow.

Improvements

• SSO Enhancements: Building on the custom claims role mapping released Feb 27, SSO now includes audit events for project access changes synced from your identity provider, automatic session logout when a user's SSO roles change, and a breakglass user option for emergency access if your IdP goes down. SSO is also now available for individual organizations on Bindplane Galaxy Edition.

• Blueprint Previews: Blueprints now include before/after example telemetry so you can visualize exactly what a blueprint's transformations will do — currently available on select blueprints, with more being added. A live preview option lets you input your own telemetry and see the output in real time. Delete dialogs also now link directly to any dependent blueprints.

• User, Project, and Role Management via API and CLI: You can now add or remove users from projects and change roles directly through the REST API and CLI, without needing to use the UI.

• Fleet Display Names: You can now change a Fleet's display name directly in the UI.

• Resource Creation Drawers: The UX for creating new resources (sources, destinations, processors) has been improved with a cleaner drawer experience.

• Install Agent Screen: The secret key is now hidden by default on the install agents screen, reducing the risk of accidental exposure.

• Configurable SecOps Ingestion API Endpoint: The Chronicle HTTPS exporter now lets you override the endpoint and API version, giving organizations with custom or regional SecOps deployments more flexibility in how they route data.

• Policy Acceptance for API Users: API-only users now receive clear guidance and actionable next steps when policy acceptance is required, instead of a generic error with no context.

Bug fixes

• Agent Connection Distribution: Resolved an issue where uneven agent connection distribution across server nodes could cause slowness in large deployments.

• Mass Disconnect Recovery: Fixed a bug where connection pools could become depleted after a large number of agents disconnected simultaneously, preventing new connections from being established.

• Configuration Search: Fixed a bug where searching configurations with a query that matched nothing would incorrectly return all results instead of an empty list.

• Kubernetes Agent Scheduling: Fixed an issue where K8s agents weren't running on all nodes due to missing pod tolerations.

• Regex Highlighting: Fixed a bug where the cursor couldn't be moved past a capture group in the regex highlighting editor.

• Metrics Timeline Compression: Resolved a compression issue affecting the metrics timeline display.

• Blueprint Library Processor Deletion: Fixed a bug where deleting a blueprint processor from the library would leave the blueprint in a broken state with a blank name and an unresponsive library tab.