All issues

Search results

CON_APP_KEY recovery cannot clear the blocking token when two ACTIVE tokens differ only by USER_TYPE

Team/API Access Mgt & Authorization

Type/Bug

U2

Status: Open.

#28440 In wso2/product-is;

· deshankoswatte opened on Sep 11, 2026

Password recovery confirmation email contains unresolved sp/callback placeholders when not provided in the recovery API request

Team/User & identity administration

Type/Bug

U2

Status: Open.

#28439 In wso2/product-is;

· Hashith00 opened on Sep 11, 2026

Documentation missing for Password Expired User Identification API + External scheduled task tutorial (v7.0.0 onwards)

Type/Bug

Type/Docs

U2

Status: Open.

#28438 In wso2/product-is;

· darksoul96 opened on Sep 10, 2026

[Docs] Undocumented invalidation_impl requirement for carbon-cache-sync-manager

Type/Bug

Type/Docs

U2

Status: Open.

#28436 In wso2/product-is;

· patricnilackshan opened on Sep 10, 2026

Introduce a tenant-level governance config to skip the account unlock email on email verification

Team/User & identity administration

Type/NewFeature

Status: Open.

#28434 In wso2/product-is;

· sadilchamishka opened on Sep 10, 2026

Self-service consent revoke/reject has no effect once a required authorization has been approved (multi-party consent)

Type/Bug

Status: Open.

#28433 In wso2/product-is;

· hasithakn opened on Sep 10, 2026

Docs still require -Dndatasource.disable.rollbackOnReturn=true, which has had no effect since IS 5.10.0

Type/Bug

Type/Docs

Status: Open.

#28432 In wso2/product-is;

· vfraga opened on Sep 9, 2026

Database docs: unescaped & in driver-level timeout URL examples prevents the server from starting

Type/Bug

Type/Docs

Status: Open.

#28431 In wso2/product-is;

· vfraga opened on Sep 9, 2026

WS-Federation Passive STS disable_applies_to_in_response config behaviour

Type/Bug

U2

Status: Open.

#28430 In wso2/product-is;

· pabasara-mahindapala opened on Sep 9, 2026

Document the Console Subject settings and build_subject_identifier_from_sp_config required to control the introspection response's username field

Type/Bug

Type/Docs

Status: Open.

#28429 In wso2/product-is;

· subu0106 opened on Sep 9, 2026

SAMLSSOConfigServiceImpl.getServiceProvider(issuer) loads every SAML SP in the tenant and filters client-side, serialized behind a single tenant causes 30s–150s get under concurrency

Team/User & identity administration

Type/Bug

U2

Status: Open.

#28426 In wso2/product-is;

· Hashith00 opened on Sep 8, 2026

Support Custom URL for Password Reset Enforcer

Team/Authentication & registration

Type/Improvement

U2

Status: Open.

#28425 In wso2/product-is;

· isuruhettiarachchi opened on Sep 8, 2026