.NET SDK

• #268 feat(generated)!: regenerate from spec (12 changes)

⚠️ Breaking

• organization_membership:
• Changed response of UserManagementOrganizationMembership.list from UserOrganizationMembership to UserOrganizationMembershipList
• pipes:
• SDK surface change: Type changed for "DataIntegrationAccessTokenResponseAccessToken.ExpiresAt" from "string?" to "DateTimeOffset?"
• user_management:
• Changed response of UserManagementInvitations.list from UserInvite to UserInviteList
• widgets:
• SDK surface change: Symbol "WidgetSessionTokenResponse" was removed

Features

• authorization:
• Added model ReplaceGroupRoleAssignmentEntry
• Added model ReplaceGroupRoleAssignments
• Added model DeleteGroupRoleAssignmentsByCriteria
• Added endpoint POST /authorization/groups/{group_id}/role_assignments
• Added endpoint PUT /authorization/groups/{group_id}/role_assignments
• Added endpoint DELETE /authorization/groups/{group_id}/role_assignments
• Added endpoint GET /authorization/groups/{group_id}/role_assignments/{role_assignment_id}
• Added endpoint DELETE /authorization/groups/{group_id}/role_assignments/{role_assignment_id}
• client:
• Added model ClientApiToken
• Added model ClientApiTokenResponse
• Added service Client
• connect:
• Added auth_method to ConnectedAccount
• Added api_key_last_4 to ConnectedAccount
• Added enum ConnectedAccountAuthMethod
• groups:
• Added model CreateGroupRoleAssignment
• Added model GroupRoleAssignment
• Added model GroupRoleAssignmentList
• Added model GroupRoleAssignmentResource
• organization_membership:
• Added model UserOrganizationMembershipList
• Added model UserOrganizationMembershipListListMetadata
• pipes:
• Added model DataIntegrationCredentials
• Added model DataIntegrationConfigurationResponse
• Added model DataIntegrationConfigurationListResponse
• Added model ConfigureDataIntegrationBody
• Added auth_methods to DataIntegrationsListResponseData
• Added auth_method to DataIntegrationsListResponseDataConnectedAccount
• Added api_key_last_4 to DataIntegrationsListResponseDataConnectedAccount
• Added enum DataIntegrationCredentialsCredentialsType
• Added enum DataIntegrationsListResponseDataAuthMethods
• Added enum DataIntegrationsListResponseDataConnectedAccountAuthMethod
• Added service PipesProvider
• user_management:
• Added model UserInviteList
• Added model UserInviteListListMetadata
• Made AuthorizationCodeSessionAuthenticateRequest.client_secret optional
• Made RefreshTokenSessionAuthenticateRequest.client_secret optional
• widgets:
• Added widgets:pipes:manage to WidgetSessionTokenScopes

Bug Fixes

• renovate: explicitly enable minor and patch updates (#261) (a8dd75f)
• use raw JWKS retriever instead of OIDC discovery retriever (#267) (03c3b3d)

• #263 feat(generated): regenerate from spec (9 changes)

Features

• api_keys:
• Added model ExpireApiKey
• Added model ApiKeyUpdated
• Added model ApiKeyUpdatedData
• Added model ApiKeyUpdatedDataOwner
• Added model UserApiKeyUpdatedDataOwner
• Added model ApiKeyUpdatedDataPreviousAttribute
• Added endpoint POST /api_keys/{id}/expire
• audit_logs:
• Added Snowflake to AuditLogConfigurationLogStreamType
• connect:
• Added name to UserObject
• directory_sync:
• Added model DsyncTokenCreated
• Added model DsyncTokenCreatedData
• Added model DsyncTokenRevoked
• Added model DsyncTokenRevokedData
• user_management:
• Added name to user management models
• webhooks:
• Added api_key.updated to CreateWebhookEndpointEvents
• Added api_key.updated to UpdateWebhookEndpointEvents

5.0.0 (2026-05-26)

⚠ BREAKING CHANGES

• application_credentials: Change LastUsedAt type from string to DateTimeOffset (#259)
• organization_membership: Relocate organization membership operations to dedicated service (#259)
• radar: Remove device_fingerprint and bot_score from Radar assessment (#259)
• user_management: Change ScreenHint type from custom enum to RadarStandaloneAssessRequestAction (#259)
• api_keys: Add expires_at field to API key models (#259)

Features

• api_keys: Add expires_at field to API key models (#259) (eb608f5)
• application_credentials: Change LastUsedAt type from string to DateTimeOffset (#259) (eb608f5)
• organization_membership: Relocate organization membership operations to dedicated service (#259) (eb608f5)
• radar: Remove device_fingerprint and bot_score from Radar assessment (#259) (eb608f5)
• user_management: Change ScreenHint type from custom enum to RadarStandaloneAssessRequestAction (#259) (eb608f5)
• vault: Add new Vault service for encrypted object and key management (#259) (eb608f5)
• webhooks: Add pipes connected account events to webhook endpoint events (#259) (eb608f5)

Bug Fixes

• authorization: Update role assignment listing options with filter parameters (#259) (eb608f5)
• sso: Update loginHint documentation for custom SAML support (#259) (eb608f5)

4.0.1 (2026-05-11)

Bug Fixes

• docs: use Name FileNameFactory to avoid PathTooLongException (a09ddde)
• hardening across webhooks, session, client, vault, passwordless (#253) (6e4570c)

4.0.0 (2026-05-06)

⚠ BREAKING CHANGES

• user_management: add user API key management and update models
• api_keys: refactor API key models for organization and user ownership
• authorization: replace RoleAssignment with UserRoleAssignment

Features

• api_keys: refactor API key models for organization and user ownership (b6f8e6e)
• authorization: replace RoleAssignment with UserRoleAssignment (b6f8e6e)
• docs: add DocFX-based API reference site (#251) (e19ff24)
• events: add admin_portal event actor source (b6f8e6e)
• user_management: add user API key management and update models (b6f8e6e)
• vault: add BYOK key deleted event and consolidate key provider enum (b6f8e6e)

3.1.0 (2026-04-28)

Features

• generated: Add Groups and Waitlist APIs, improve event deserialization (#245) (63e939d)

Bug Fixes

• Honor EnumMember attribute in query-string serialization (#241) (6c2789a)
• Update test to match renamed DeleteResourceByExternalId method (4ceb3de)

3.0.2 (2026-04-24)

Bug Fixes

• Correct request param placement for POST endpoints (#237) (c6e307a)

3.0.1 (2026-04-21)

Bug Fixes

• adjust type definitions (f119a1d)

3.0.0 (2026-04-20)

⚠ BREAKING CHANGES

• Release next major version of SDK relying on OpenAPI spec (#229)

Features

• Release next major version of SDK relying on OpenAPI spec (#229) (a904d48)

Bug Fixes

• Remove extractVersion from matchUpdateTypes rules (#233) (e15ac15)

2.12.0 (2026-03-30)

Features

• Add Passkey authentication method and expand OAuth providers (#227) (e7e236e)

2.11.0 (2026-03-05)

Features

• Implement user management (#199) (77843d0)

Bug Fixes

• Add release-please for automated releases (#216) (14b7298)
• Update Newtonsoft.Json to fix CVE error (#200) (d36e686)
• update renovate rules (#213) (30a91d8)

What's Changed

• Version bump v2.10.1 by @kendallstrautman in #198
• Multiple roles support: Add roles property to directory user and SSO profile by @kendallstrautman in #197

Full Changelog: v2.9.0...v2.10.1

⚠️ Misconfigured release version. Use v2.10.1 instead

In this version, the package semver was not updated properly and still references v2.9.0

What's Changed

• Multiple roles support: Add roles property to directory user and SSO profile by @kendallstrautman in #197

Full Changelog: v2.9.0...v2.10.0

What's Changed

• Update DirectoryUser#PrimaryEmail implementation to allow for testing without obsolete fields (#194)
• Add customAttributes field to SSO Profile (#192)

Full Changelog: v2.8.0...v2.9.0

What's Changed

• Add email standard attribute to DirectoryUser (#189)
• Mark emails, job_title, and username standard attributes as deprecated. Enable the equivalent auto-mapped custom attributes instead (#189)

Full Changelog: v2.7.0...v2.8.0

What's Changed

Added

• Added Organization Domain fields (#186)

Full Changelog: v2.6.0...v2.7.0

Added

• Add GET /organization/:orgId/roles support (#182)

Full Changelog: v2.5.0...v2.6.0

What's Changed

• Add role to profile by @kendallstrautman in #179

Full Changelog: v2.4.0...v2.5.0

What's Changed

• Added custom exceptions for webhook verification by @gcsuk in #177

New Contributors

• @gcsuk made their first contribution in #177

Full Changelog: v2.3.0...v2.4.0

What's Changed

• Add AppleOAuth constants by @gcarvelli in #167
• Fix CI badge + add NuGet one by @gcarvelli in #172
• v2.3.0 by @gcarvelli in #170
• Added missing values to DirectoryState enum by @WillyPain in #174

New Contributors

• @gcarvelli made their first contribution in #167
• @WillyPain made their first contribution in #174

Full Changelog: v2.2.0...v2.3.0

Deprecated

• Marked the AllowProfilesOutsideOrganization option as deprecated (#168)

What's Changed

• Add DomainData to Organization create and update methods, replacing deprecated domains (#165)

Added

• Added ActorIds and ActorNames to CreateAuditLogExportOptions #127

Changed

• [Breaking change] Renamed User to DirectoryUser (#132)
• [Breaking change] Renamed ConnectionType to Type (#138)
• [Breaking change] Changed directory states from linked/unlinked to active/inactive (#142)
• [Breaking change] Changed default list pagination order to be DESC (#159)
• [Breaking change] Changed Connection.Type to be a string and add ProviderType (#154)

Removed

• [Breaking change] Removed Connection Status (#137)

Full Changelog: v1.17.4...v2.0.0

Changed

• Added CreatedAtand UpdatedAt to directory user (#129)
• Added validating enum to ConnectionState (#128)

What's Changed

• Fix user enums to include "Inactive"

Changed

• Added missing types int and long to FlattenQueryParameters (#119 )
• ListOrganizationOptions now inherits ListOptions (#121 )

Added

• Added groups attribute to SSO user profile. This feature is in beta, please reach out to [support@workos.com](mailto:support@workos.com) to access this feature. (#117)

Added

• Add log_streams Admin Portal intent (https://github.com/workos/workos-dotnet/pull/114)

Changed

• Added missing properties user and issuer to totp entity (#111 )

Changed

• DeleteConnection now returns a Task (#110 )