Admin & Management

• Read-only admins: Teams can now assign an Administrator (Read-Only) role. This lets managers, auditors, or support leads review users, devices, and settings without the risk of accidental changes.
• Read-only API tokens: API tokens can now be issued in read-only mode, so they can authenticate normally but cannot make mutating API calls. This is useful for dashboards, scripts, and third-party integrations that only need to read data.
• More flexible API token expiry: The New API token dialog now includes shorter expiry presets like 1 day, 3 days, 1 week, and 2 weeks, plus a custom date option. This makes it easier to issue short-lived tokens that match a specific task and reduce exposure if a token is shared or compromised.
• Machine hostname in the dashboard: Device details now show the OS-reported hostname, and the computers list can display it as a column. This makes it easier to match Jump devices with MDM, asset inventory, and scripts.
• Clearer Connect Settings: Connect Settings now show clearer labels, platform chips, and beta indicators, with an option to show or hide beta settings. This makes device configuration easier to understand before rolling changes out.
• Copy Connect configurations between teams: Connect configurations can now be copied from one team to another from the dashboard. The copied configuration is created in the destination team as a new unassigned config, which makes it easier to standardize Connect Settings across teams without recreating them manually. (Note: subsequent updates to the copied Connect Setting will have to be done in each team individually)
• Browser-ready device links: Device URLs now include browser-based connect and screen-share links. This makes it easier to launch or share a web session without requiring the native app.

Security & Access

• Better SAML sign-in handling: IDP-initiated SSO now redirects into the standard login flow automatically, and users who choose the wrong SSO provider see a clearer error. This reduces failed sign-ins and support overhead.
• Safer SCIM group sync: SCIM group replace operations now validate members before destructive changes are applied, and SCIM email matching is case-insensitive. This helps prevent accidental access loss when your identity provider sends partial or differently-cased data.
• Better password setup and reset: Registration, reset, and change-password flows now use a server-side strength check with a visible strength meter and show/hide password controls. This keeps password policy consistent and gives users clearer feedback before submitting.

Billing & Web Client

• Billing exports: Billing admins can now export billable users with names and a generated timestamp, which will help admins track billable users especially in a Grouped billing scenario.
• Saved web session preferences: Browser remote desktop settings like framerate, bandwidth, audio mute, clipboard sync, stats, and virtual monitor count are now restored automatically. This reduces repeated setup when connecting to multiple machines.