v1.3.4

• A resource type your identity provider will not let IdPVault read no longer
  fails the whole backup. Previously a single unreadable endpoint meant the
  backup produced nothing at all; now every other resource type is captured
  normally and the one that was refused is recorded on the snapshot with the
  reason from your provider. This affects, for example, Okta orgs without API
  Access Management, which return an error for authorization servers.
• Refused resource types are recorded on the snapshot manifest, never inside
  the snapshot itself, so they cannot appear as drift, raise an alert, or be
  treated as something to restore.
• Errors from a provider now include that provider's own error code rather
  than only an HTTP status.