# ZITADEL v4.16.0

- Product: ZITADEL (https://whatsnew.fyi/product/zitadel)
- Vendor: ZITADEL
- Date: 2026-07-10
- Version: v4.16.0
- Original notes: https://github.com/zitadel/zitadel/releases/tag/v4.16.0
- Permalink: https://whatsnew.fyi/product/zitadel/releases/v4.16.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Correct scope validation in token exchange
- **fixed** — Correctly remove adjacent roles on user grants
- **fixed** — Increase performance of ListUser by login name ignore case
- **fixed** — Allow custom protocols for native apps again
- **fixed** — Improve contrast of IDP processing message
- **fixed** — Improve error handling for user registration
- **fixed** — Migrate legacy Tailwind v4 opacity utilities and fix checkbox contrast color
- **fixed** — Preserve org domain suffix through account chooser navigation
- **fixed** — Prevent IDP auto-creation failure when name fields are missing
- **fixed** — Redirect to loginname instead of empty accounts page when org scope filters all sessions
- **fixed** — Use correct requestId with oidc_ prefix in Prompt.LOGIN + loginHint flow
- **fixed** — Prevent double triggering of verification emails
- **added** — Allow managing invite code in secret generators
- **added** — FIPS 140-3 compliant build and runtime checks

#### [4.16.0](https://github.com/zitadel/zitadel/compare/v4.15.3...v4.16.0) (2026-07-10)


###### Bug Fixes

* correct scope validation in token exchange ([#12312](https://github.com/zitadel/zitadel/issues/12312)) ([02d07e9](https://github.com/zitadel/zitadel/commit/02d07e951b0b6ff8d5fa5e74b65209a8e9efddfe)), closes [#12319](https://github.com/zitadel/zitadel/issues/12319) [#12322](https://github.com/zitadel/zitadel/issues/12322) [#12319](https://github.com/zitadel/zitadel/issues/12319) [#12322](https://github.com/zitadel/zitadel/issues/12322)
* Correctly remove adjacent roles on user grants ([dc89900](https://github.com/zitadel/zitadel/commit/dc899002ec77eb30c1c2ab6326dcccf6f522d419))
* increase performance of ListUser by login name ignore case ([#12350](https://github.com/zitadel/zitadel/issues/12350)) ([8fed358](https://github.com/zitadel/zitadel/commit/8fed3582c47f01724bb70cf199570188f24a692d))
* **login:** allow custom protocols for native apps again ([#12332](https://github.com/zitadel/zitadel/issues/12332)) ([5b3c10e](https://github.com/zitadel/zitadel/commit/5b3c10ecd7cf4730071eab3acbd05afd2d470405))
* **login:** improve contrast of IDP processing message ([#12309](https://github.com/zitadel/zitadel/issues/12309)) ([30ad9ab](https://github.com/zitadel/zitadel/commit/30ad9ab8a1afc8fb9af00fd653b96560ff1a1d3d))
* **login:** improve error handling for user registration ([#12338](https://github.com/zitadel/zitadel/issues/12338)) ([fa916e7](https://github.com/zitadel/zitadel/commit/fa916e7659695d0e101d3af9c2b9afb155de7909))
* **login:** migrate legacy Tailwind v4 opacity utilities and fix checkbox contrast color ([#12360](https://github.com/zitadel/zitadel/issues/12360)) ([70850db](https://github.com/zitadel/zitadel/commit/70850db9d53ebdc96cdab40f6c04c654bbd2da78))
* **login:** preserve org domain suffix through account chooser navigation ([#12304](https://github.com/zitadel/zitadel/issues/12304)) ([3311fb9](https://github.com/zitadel/zitadel/commit/3311fb9ccdbcd232a59da148791bc906c04314c6)), closes [#12024](https://github.com/zitadel/zitadel/issues/12024)
* **login:** Prevent IDP auto-creation failure when name fields are missing ([#11070](https://github.com/zitadel/zitadel/issues/11070)) ([ab2e099](https://github.com/zitadel/zitadel/commit/ab2e099514ff63ff39c3c36755301d461d237dd3))
* **login:** redirect to loginname instead of empty accounts page when org scope filters all sessions ([#12346](https://github.com/zitadel/zitadel/issues/12346)) ([f21f95c](https://github.com/zitadel/zitadel/commit/f21f95ce37699c5ed48618ccfa0839dfb09ee954)), closes [#11914](https://github.com/zitadel/zitadel/issues/11914)
* **login:** use correct requestId with oidc_ prefix in Prompt.LOGIN + loginHint flow ([#12376](https://github.com/zitadel/zitadel/issues/12376)) ([57eb145](https://github.com/zitadel/zitadel/commit/57eb1453f26db3efdfcce26f294ad0436363e9db)), closes [#11946](https://github.com/zitadel/zitadel/issues/11946) [#11946](https://github.com/zitadel/zitadel/issues/11946)
* prevent double triggering of verification emails ([#11995](https://github.com/zitadel/zitadel/issues/11995)) ([9ae9bf3](https://github.com/zitadel/zitadel/commit/9ae9bf3bc8bc55b9f47d72c48e51584fc935b814))


###### Features

* allow managing invite code in secret generators ([#12109](https://github.com/zitadel/zitadel/issues/12109)) ([915586a](https://github.com/zitadel/zitadel/commit/915586a40f1174014b116a2a653e4933468a2465))
* **crypto:** FIPS 140-3 compliant build and runtime checks ([#12233](https://github.com/zitadel/zitadel/issues/12233)) ([c03d9f4](https://github.com/zitadel/zitadel/commit/c03d9f4c6ecbd4af39e5c4dbd876244f3740e13a))