This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+8 more
Affected surfaces
Summary
AI summaryEnterprise single sign‑on (OIDC) with force‑SSO, an Installation page for usertour.js, and stability improvements.
Full changelog
This release brings enterprise single sign-on: any BUSINESS or ENTERPRISE project can now let its team sign in through its own OIDC identity provider — Okta, Microsoft Entra, Auth0, OneLogin, Authentik, or Google Workspace — configured entirely from Settings, with an optional force-SSO mode that routes everyone through the IdP. Alongside it, a new Installation page helps you wire up usertour.js and confirms it's working, plus a round of stability and crash-reporting improvements.
What's Changed
🔐 Project-level single sign-on (OIDC)
Each project can connect its own OIDC identity provider from Settings → SSO — paste in the issuer, client ID, and secret, copy the generated callback URL into your IdP, and pick the default role for new members.
- Works with any standard OIDC provider — Okta, Microsoft Entra, Auth0, OneLogin, Authentik, Google Workspace — through issuer discovery, with optional explicit endpoint overrides.
- Force SSO: require everyone in a project to sign in through the IdP; password and social logins are routed to the SSO entry instead.
- Invite-first provisioning by default: a user must hold a pending invite to join through SSO, with optional auto-provisioning (just-in-time account creation) when you'd rather let the IdP vouch for new members. An existing account is never silently linked into a project it isn't already a member of.
- Branded sign-in: upload a project logo in Settings and it appears on the SSO sign-in page.
- Graceful edges: pending invites can be accepted through SSO, callback failures show friendly messages, and members aren't locked out if the project's SSO entitlement lapses.
🧩 SDK installation page
A new Settings → Installation page gives you the install snippet for the selected environment and a live check that polls until it detects your first identified user, so you know the SDK is wired up before you start building.
🛡️ Stability & error reporting
- Automatic recovery from stale assets after a deploy — a missing code chunk now triggers a clean reload instead of a broken screen.
- Browser auto-translation no longer crashes the app, and unexpected errors are now reported to PostHog so they surface earlier.
🐛 Fixes
- Bulk selection in the users / companies tables tracks the right rows — after deleting a couple of entries the selection no longer jumps to unrelated rows (it's now keyed by entity ID rather than row position).
- Double-escaped text in translated strings is fixed — apostrophes and quotes no longer render as HTML entities.
- Builder polish: the exit-button icon points outward, and the bubble notch matches the bubble's background color.
- Dark mode and additional languages are still being completed — this release defaults the workspace to light / English until that coverage lands.
Full Changelog: https://github.com/usertour/usertour/compare/v0.8.5...v0.8.6
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About usertour
Usertour is an open-source user onboarding platform. It allows you to create in-app product tours, checklists, and surveys in minutes—effortlessly and with full control.The open-source alternative to Userflow and Appcues
Related context
Related tools
Beta — feedback welcome: [email protected]