SSO, Multi-Provider AI, and Sandcastle State
Single Sign-On (SSO)
Workspaces can now require members to sign in through their company's identity provider.
- Any OIDC provider -- Works with Okta, Azure AD, Google Workspace, and any OIDC-compatible identity provider
- SCIM directory sync -- Automatically provision and deprovision user accounts when people join or leave your organization
- Workspace enforcement -- Require all members to authenticate through SSO so no one bypasses your identity policies
More AI Models
Assist now supports models from additional providers, giving you more flexibility in how your tools and agents run.
- New providers -- Google Gemini, Cerebras, Perplexity, and OpenAI models are now available alongside Anthropic
- Choose per workflow -- Select the best model for each agent or tool based on speed, cost, or capability
Sandcastle Persistent State
AI-built apps (sandcastles) can now store and retrieve data that persists between sessions.
- Read and write data -- Sandcastle apps can save records, update them, and query them with pagination
- Survives sessions -- Data persists across browser refreshes and between different users
Slack Long Message Handling
AI responses in Slack are no longer truncated when they exceed the message size limit. Long responses are automatically split into multiple messages so nothing is lost.
Security Improvements
- DNS rebinding protection for all outbound requests
- Workspace deactivation now enforced across Slack, MCP, and all API endpoints