Added

• feat: Agents client, Organization Clients & Role Groups, Directory Provisioning sync groups, Guardian factor settings & paginated Event Stream Deliveries
  #909 (fern-api[bot])
  • Agents — new top-level agents() client with full CRUD (list, create, read, update, delete) and create:agents / read:agents / update:agents / delete:agents scopes.
  • Organization Clients — new organizations().clients() sub-client to associate, list, get, update, and remove org-to-client associations (checkpoint pagination); adds
    is_app_entitlement_active on organizations and an include_client_association_for list filter.
  • Organization Role Groups — new organizations().roles().groups() sub-client to list groups assigned to a role within an organization.
  • Organization-Level Roles — Role and role list/filter now support type (tenant / organization) and owner_id.
  • Directory Provisioning sync groups — connections().directoryProvisioning() gains addSynchronizedGroupSelections / deleteSynchronizedGroupSelections; Self-Service SSO tickets add
    sync_groups on the Google Workspace config.
  • Guardian factor settings — GuardianFactor now exposes an optional settings object (otp_length, otp_expiration_time).
  • Misc: country_codes added to AculContextEnum; new shared NotFound / Conflict error schemas.

Fixes

• feat: Agents client, Organization Clients & Role Groups, Directory Provisioning sync groups, Guardian factor settings & paginated Event Stream Deliveries
  #909 (fern-api[bot])
  • Event Stream Deliveries pagination — deliveries().list(...) now returns a SyncPagingIterable<EventStreamDelivery> with checkpoint pagination (breaking: previously
    List<EventStreamDelivery>).

Added

• feat: Branding Theme Identifiers, Self-Service Third-Party Client Access, Cross-App Access & Session Actor support #906 (fern-api[bot])
• feat: add access token exchange and generic subject token type to Tok… #904 (kailash-b)

Added

• feat: add MIGRATION_GUIDE #900 (tanya732)
• feat: remove Federated Connections Tokensets, add per-request retries #899 (fern-api[bot])
• feat: add Organization Role Members, thirdPartyClientAccess, optional fields and contains breaking changes #893 (fern-api[bot])
• chore: update jackson version #898 (tanya732)
• feat: Add Token Vault support to the Authentication API #894 (kailash-b)

Added

• chore: Add Auth Client tests #890 (tanya732)
• feat: Add Custom Token Exchange Support #889 (tanya732)

Added

• feat: FedCM, Native Social Login, Connection Options support #883 (fern-api[bot])

Added

• feat: Add tenant security headers (CSP/XSS) and update Branding/PhoneTemplate models #875 (fern-api[bot])
• Chore: Add pagination metadata access in Examples #873 (tanya732)

Added

• Feat: Add User Effective Roles/Permissions, Organization Groups, Role Groups, and Tenant Country Codes #871 (fern-api[bot])
• Feat: Add support for Group Roles and Rate Limit Policies #870 (fern-api[bot])

Added

• feat: Add FedCM login and ES384/ES512 DPoP algorithms #867 (fern-api[bot])
• Feat: Add passkey fields, error types, and resource server enhancements #863 (fern-api[bot])

Added

• Chore: Add Automatic-Module-Name to JAR manifest #864 (tanya732)

Added

• feat: Add SSE events API, refresh token revocation, branding identifiers, and connection options #860 (fern-api[bot])
• Add logging support and SDK regeneration — April 22, 2026 #858 (fern-api[bot])
• Feat: Add Support for Synchronized Groups for a Connection Directory Provisioning Configuration and Self-Service Domain Verification and Organizations Discovery #857 (fern-api[bot])