v4.17.3
Fixed 2
- Authorize IDP linking via enrollment guard, not isSessionValid
- Translate authentication and OTP strings
Security 2
- Use authenticated encryption for IDP intent tokens
- Check auth method permission on the user's organization
From ZITADEL
4.17.3 (2026-09-04)
Bug Fixes
- crypto: use authenticated encryption for IDP intent tokens (41b1114)
- login: authorize IDP linking via enrollment guard, not isSessionValid (a53fbc4)
- login: translate authentication and OTP strings (#12668) (739e91e), closes #12481 #12226
- security: check auth method permission on the user's organization (20f0984)