Saving a single sign-on connection, turning it on, removing a sign-on domain, making a SCIM token, turning on full exports and asking for an export of everything now ask the owner to confirm it’s them, so a browser left open is not enough. Status lines, activity names, titles and pronouns no longer accept hidden direction controls or line breaks. Sharing to Kemble from another website is refused, and a new share clears the last one’s files. Malformed requests get Kemble’s own plain errors.
Changing single sign-on, SCIM or full exports asks you to confirm it’s you
An owner confirms with a two-step code, a password or a recent sign-in before changing how everyone signs in or exporting private conversations.