In this article
About this release
On August 17, 2026, we released version 4.2.12 of Segura® Platform. This release includes 19 changes across 10 modules.
- Release date: 2026-08-17
- Patch: segura | v4.2.12-1
For information on how to update Segura® Platform, see Update Segura®.
Release highlight
Generic REST ITSM connection: ticket validation without a dedicated connector
Version 4.2.12 introduces a generic REST ITSM connection, which validates privileged access tickets against any ITSM that exposes a REST or OData API.
Previously, validating a ticket required a connector built for a specific ITSM. An administrator can now point the platform at the ITSM already in use, map its fields in the interface, and put access requests under ticket-based approval without dedicated development.
What's new
- Endpoint, authentication, and field mapping configured entirely through the interface.
- Support for OAuth 2.0, API key, session token, and composite token authentication.
- Validation of both the ticket and its approval state, including a second request when the approval state is not returned in the ticket root.
- Configurable behavior on validation failure: block the access, which is the default, or allow it flagged as not validated.
- Mandatory and configurable timeout and retry with backoff.
- Diagnostic logs available to administrators in the interface.
Customer impact
Organizations running an ITSM without a native connector can now enforce ticket-based approval on privileged access without waiting for a dedicated integration.
Because the connection is configured and maintained in the interface, adapting to a change in the ITSM is a configuration task rather than a development request. On validation failure, the default behavior blocks the access, so an unavailable ITSM does not silently widen the access surface.
See the documentation: Configure a generic REST ITSM connection.
Changelog
API
Changed
| Item |
Description |
| SSGR-11725 |
Added the Super Admin option to API authorizations, on the Access & Permissions tab, which lets an authorization access every credential and device in the environment without Access Policies or individually registered items. See the documentation: How to manage authorizations in A2A. |
Fixed
| Item |
Description |
| SSGR-11466 |
Fixed an issue where the on-demand LDAP group synchronization requested through the API returned success but the group was not synchronized. |
Authentication
Changed
| Item |
Description |
| SSGR-10205 |
Improved the groups attribute in the SCIM API. Now, groups are returned correctly, and the attribute can no longer be updated via the User resource. See the documentation:
- POST | Users.
- PATCH | Users. |
Fixed
| Item |
Description |
| SSGR-11490 |
Fixed an issue where the maximum session idle limit was not being applied correctly. The limit is now properly enforced, capping sessions at an absolute maximum of 12 hours. |
DevOps Secret Manager
Fixed
| Item |
Description |
| SSGR-11329 |
Fixed an issue where the registration screen for a new application did not load. |
| SSGR-11571 |
Fixed an issue where the time-to-live (TTL) of an ephemeral credential did not follow the provisioning profile. |
Discovery
Fixed
| Item |
Description |
| SSGR-10858 |
Fixed an issue where it was not possible to create a unique glossary when editing a discovery. Now, You can create a unique glossary while editing an existing discovery. |
EPM Backend
Fixed
| Item |
Description |
| SSGR-11541 |
Fixed an issue where applications with long version strings or missing versions were being incorrectly registered during each application scan, generating duplicates and degrading system performance. Both cases are now handled correctly, and applications are registered only once. |
EPM Linux
Fixed
| Item |
Description |
| SSGR-8928 |
Fixed an issue where EPM Linux events were not being logged in the Events, Sudo usage, and Executions reports. |
Framework
Added
| Item |
Description |
| SSGR-3859 |
Added a generic REST ITSM connection that validates access tickets against any ITSM exposing a REST or OData API. See the documentation: Configure a generic REST ITSM connection |
Fixed
| Item |
Description |
| SSGR-11459 |
Fixed an issue where pending email notifications in the outbox were duplicated on each processing cycle instead of being reprocessed. |
| SSGR-11613 |
Fixed an issue where users imported through Active Directory group synchronization were created without the roles and user group defined in the synchronization group. |
Orbit
Fixed
| Item |
Description |
| SSGR-8494 |
Fixed an issue where Zabbix Agent settings applied through the command line were not preserved after configuration changes were saved in Orbit. |
| SSGR-11663 |
Fixed an issue where orbit cluster configure command applied the low latency profile by default, shortening the cluster timeouts and causing nodes to be evicted in environments with an arbitrator. |
PAM Core
Fixed
| Item |
Description |
| SSGR-8750 |
Fixed an issue where the confirmation message displayed after enabling SSH Keys credentials in bulk always appeared in Portuguese, regardless of the configured language. |
| SSGR-11558 |
Fixed an issue where RDP Proxy sessions failed to start for devices registered with a DNS hostname instead of an IP address. |
Proxy
Fixed
| Item |
Description |
| SSGR-11372 |
Fixed an issue where pasting multi-line text into the nano editor over the web proxy did not preserve line breaks. |
| SSGR-11444 |
Fixed an issue where RDP Proxy sessions requested the multi-factor token again on devices already marked as trusted. |
| SSGR-11645 |
Fixed an issue where the Session logs report did not record user input from SSH and Telnet sessions started through the Terminal Proxy. |