Passbolt 5.12.1 makes the Safari browser extension generally available, ending the open beta period. This release also introduces a new PIN code resource type, PingOne as a new SSO provider, OAuth support for SMTP authentication with Microsoft Exchange Online along with improvements to TOTP field detection and the usual round of security and dependency updates. ## Safari Extension Out of Beta The Safari extension is now offered by default to all Safari users, on equal footing with Chrome, Firefox, and Edge. This milestone reflects months of work across both our internal testing and the open beta period, during which organisations enabled the extension on their own instances and gave feedback. Many thanks to everyone who joined the TestFlight program for the open beta. Your feedback shaped this release. ## SCIM: audit fixes and general availability (Passbolt Pro) SCIM provisioning, introduced as beta in Passbolt 5.5.0, is now marked as stable. With SCIM, administrators can create, update, suspend, and delete users directly from their identity provider, without ever touching the Passbolt UI. Microsoft Entra ID and Okta have been tested and validated as supported providers. This milestone follows an external security audit conducted by Cure53, whose findings have been addressed across this and previous releases. The full report will be published shortly and made available to the community. ## PingOne SSO support (Passbolt Pro) This release adds PingOne as a new SSO provider. Organisations using PingOne can now authenticate their users without leaving their existing identity infrastructure. PingOne joins the list of supported SSO providers alongside Azure AD, AD FS, Google, and the generic OpenID Connect connector that supports providers such as Keycloak or other in-house identity systems. ## SMTP OAuth support for Microsoft Exchange Online This release introduces OAuth 2.0 support for SMTP email delivery with Microsoft Exchange Online. Microsoft has announced that basic authentication for SMTP will be disabled by default at the end of 2026 (see Microsoft's updated deprecation timeline). Organisations using Exchange Online can start transitioning to OAuth now, ahead of the deadline. ## Other changes This release adds autofill support for ProxMox, OVH, Supermicro IPMI, and several other websites. We continuously work to improve autofill coverage and the feedback from the community is invaluable. If you encounter a website where autofill does not work as expected, do not hesitate to file a bug report. As usual, the release is also packed with additional improvements and fixes. Check out the detailed logs to learn more. ## Conclusion Many thanks to everyone who provided feedback, reported bugs, and contributed to making passbolt better!