.NET SDK

• https://github.com/workos/workos-dotnet/pull/268" rel="noreferrer" target="_blank">#268 feat(generated)!: regenerate from spec (12 changes)

⚠️ Breaking

• organization_membership:
• Changed response of UserManagementOrganizationMembership.list from UserOrganizationMembership to UserOrganizationMembershipList
• pipes:
• SDK surface change: Type changed for "DataIntegrationAccessTokenResponseAccessToken.ExpiresAt" from "string?" to "DateTimeOffset?"
• user_management:
• Changed response of UserManagementInvitations.list from UserInvite to UserInviteList
• widgets:
• SDK surface change: Symbol "WidgetSessionTokenResponse" was removed

Features

• authorization:
• Added model ReplaceGroupRoleAssignmentEntry
• Added model ReplaceGroupRoleAssignments
• Added model DeleteGroupRoleAssignmentsByCriteria
• Added endpoint POST /authorization/groups/{group_id}/role_assignments
• Added endpoint PUT /authorization/groups/{group_id}/role_assignments
• Added endpoint DELETE /authorization/groups/{group_id}/role_assignments
• Added endpoint GET /authorization/groups/{group_id}/role_assignments/{role_assignment_id}
• Added endpoint DELETE /authorization/groups/{group_id}/role_assignments/{role_assignment_id}
• client:
• Added model ClientApiToken
• Added model ClientApiTokenResponse
• Added service Client
• connect:
• Added auth_method to ConnectedAccount
• Added api_key_last_4 to ConnectedAccount
• Added enum ConnectedAccountAuthMethod
• groups:
• Added model CreateGroupRoleAssignment
• Added model GroupRoleAssignment
• Added model GroupRoleAssignmentList
• Added model GroupRoleAssignmentResource
• organization_membership:
• Added model UserOrganizationMembershipList
• Added model UserOrganizationMembershipListListMetadata
• pipes:
• Added model DataIntegrationCredentials
• Added model DataIntegrationConfigurationResponse
• Added model DataIntegrationConfigurationListResponse
• Added model ConfigureDataIntegrationBody
• Added auth_methods to DataIntegrationsListResponseData
• Added auth_method to DataIntegrationsListResponseDataConnectedAccount
• Added api_key_last_4 to DataIntegrationsListResponseDataConnectedAccount
• Added enum DataIntegrationCredentialsCredentialsType
• Added enum DataIntegrationsListResponseDataAuthMethods
• Added enum DataIntegrationsListResponseDataConnectedAccountAuthMethod
• Added service PipesProvider
• user_management:
• Added model UserInviteList
• Added model UserInviteListListMetadata
• Made AuthorizationCodeSessionAuthenticateRequest.client_secret optional
• Made RefreshTokenSessionAuthenticateRequest.client_secret optional
• widgets:
• Added widgets:pipes:manage to WidgetSessionTokenScopes

Bug Fixes

• renovate: explicitly enable minor and patch updates (https://github.com/workos/workos-dotnet/issues/261" rel="noreferrer" target="_blank">#261) (https://github.com/workos/workos-dotnet/commit/a8dd75fb7b90840610bb2ea4dba40fab12e47426" rel="noreferrer" target="_blank">a8dd75f)
• use raw JWKS retriever instead of OIDC discovery retriever (https://github.com/workos/workos-dotnet/issues/267" rel="noreferrer" target="_blank">#267) (https://github.com/workos/workos-dotnet/commit/03c3b3d248dbf5187c99d9b49828782e459efd20" rel="noreferrer" target="_blank">03c3b3d)

• https://github.com/workos/workos-dotnet/pull/263" rel="noreferrer" target="_blank">#263 feat(generated): regenerate from spec (9 changes)

Features

• api_keys:
• Added model ExpireApiKey
• Added model ApiKeyUpdated
• Added model ApiKeyUpdatedData
• Added model ApiKeyUpdatedDataOwner
• Added model UserApiKeyUpdatedDataOwner
• Added model ApiKeyUpdatedDataPreviousAttribute
• Added endpoint POST /api_keys/{id}/expire
• audit_logs:
• Added Snowflake to AuditLogConfigurationLogStreamType
• connect:
• Added name to UserObject
• directory_sync:
• Added model DsyncTokenCreated
• Added model DsyncTokenCreatedData
• Added model DsyncTokenRevoked
• Added model DsyncTokenRevokedData
• user_management:
• Added name to user management models
• webhooks:
• Added api_key.updated to CreateWebhookEndpointEvents
• Added api_key.updated to UpdateWebhookEndpointEvents

v4.0.1...v5.0.0" rel="noreferrer" target="_blank">5.0.0 (2026-05-26)

⚠ BREAKING CHANGES

• application_credentials: Change LastUsedAt type from string to DateTimeOffset (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259)
• organization_membership: Relocate organization membership operations to dedicated service (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259)
• radar: Remove device_fingerprint and bot_score from Radar assessment (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259)
• user_management: Change ScreenHint type from custom enum to RadarStandaloneAssessRequestAction (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259)
• api_keys: Add expires_at field to API key models (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259)

Features

• api_keys: Add expires_at field to API key models (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259) (https://github.com/workos/workos-dotnet/commit/eb608f55a346ec58665480cce25c2d05f8e454a9" rel="noreferrer" target="_blank">eb608f5)
• application_credentials: Change LastUsedAt type from string to DateTimeOffset (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259) (https://github.com/workos/workos-dotnet/commit/eb608f55a346ec58665480cce25c2d05f8e454a9" rel="noreferrer" target="_blank">eb608f5)
• organization_membership: Relocate organization membership operations to dedicated service (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259) (https://github.com/workos/workos-dotnet/commit/eb608f55a346ec58665480cce25c2d05f8e454a9" rel="noreferrer" target="_blank">eb608f5)
• radar: Remove device_fingerprint and bot_score from Radar assessment (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259) (https://github.com/workos/workos-dotnet/commit/eb608f55a346ec58665480cce25c2d05f8e454a9" rel="noreferrer" target="_blank">eb608f5)
• user_management: Change ScreenHint type from custom enum to RadarStandaloneAssessRequestAction (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259) (https://github.com/workos/workos-dotnet/commit/eb608f55a346ec58665480cce25c2d05f8e454a9" rel="noreferrer" target="_blank">eb608f5)
• vault: Add new Vault service for encrypted object and key management (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259) (https://github.com/workos/workos-dotnet/commit/eb608f55a346ec58665480cce25c2d05f8e454a9" rel="noreferrer" target="_blank">eb608f5)
• webhooks: Add pipes connected account events to webhook endpoint events (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259) (https://github.com/workos/workos-dotnet/commit/eb608f55a346ec58665480cce25c2d05f8e454a9" rel="noreferrer" target="_blank">eb608f5)

Bug Fixes

• authorization: Update role assignment listing options with filter parameters (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259) (https://github.com/workos/workos-dotnet/commit/eb608f55a346ec58665480cce25c2d05f8e454a9" rel="noreferrer" target="_blank">eb608f5)
• sso: Update loginHint documentation for custom SAML support (https://github.com/workos/workos-dotnet/issues/259" rel="noreferrer" target="_blank">#259) (https://github.com/workos/workos-dotnet/commit/eb608f55a346ec58665480cce25c2d05f8e454a9" rel="noreferrer" target="_blank">eb608f5)

v4.0.0...v4.0.1" rel="noreferrer" target="_blank">4.0.1 (2026-05-11)

Bug Fixes

• docs: use Name FileNameFactory to avoid PathTooLongException (https://github.com/workos/workos-dotnet/commit/a09ddde1d3508db689c498ae672e2adacabe96a1" rel="noreferrer" target="_blank">a09ddde)
• hardening across webhooks, session, client, vault, passwordless (https://github.com/workos/workos-dotnet/issues/253" rel="noreferrer" target="_blank">#253) (https://github.com/workos/workos-dotnet/commit/6e4570ceecaa07ae6bd85dd21a844abcffb5d911" rel="noreferrer" target="_blank">6e4570c)

v3.1.0...v4.0.0" rel="noreferrer" target="_blank">4.0.0 (2026-05-06)

⚠ BREAKING CHANGES

• user_management: add user API key management and update models
• api_keys: refactor API key models for organization and user ownership
• authorization: replace RoleAssignment with UserRoleAssignment

Features

• api_keys: refactor API key models for organization and user ownership (https://github.com/workos/workos-dotnet/commit/b6f8e6e26927b161c51a3885a4e2ede833cadfe5" rel="noreferrer" target="_blank">b6f8e6e)
• authorization: replace RoleAssignment with UserRoleAssignment (https://github.com/workos/workos-dotnet/commit/b6f8e6e26927b161c51a3885a4e2ede833cadfe5" rel="noreferrer" target="_blank">b6f8e6e)
• docs: add DocFX-based API reference site (https://github.com/workos/workos-dotnet/issues/251" rel="noreferrer" target="_blank">#251) (https://github.com/workos/workos-dotnet/commit/e19ff242a85d929107b47231fce1e5c48e2f4cd1" rel="noreferrer" target="_blank">e19ff24)
• events: add admin_portal event actor source (https://github.com/workos/workos-dotnet/commit/b6f8e6e26927b161c51a3885a4e2ede833cadfe5" rel="noreferrer" target="_blank">b6f8e6e)
• user_management: add user API key management and update models (https://github.com/workos/workos-dotnet/commit/b6f8e6e26927b161c51a3885a4e2ede833cadfe5" rel="noreferrer" target="_blank">b6f8e6e)
• vault: add BYOK key deleted event and consolidate key provider enum (https://github.com/workos/workos-dotnet/commit/b6f8e6e26927b161c51a3885a4e2ede833cadfe5" rel="noreferrer" target="_blank">b6f8e6e)

v3.0.2...v3.1.0" rel="noreferrer" target="_blank">3.1.0 (2026-04-28)

Features

• generated: Add Groups and Waitlist APIs, improve event deserialization (https://github.com/workos/workos-dotnet/issues/245" rel="noreferrer" target="_blank">#245) (https://github.com/workos/workos-dotnet/commit/63e939d243150812f2a94a0602e298ea1e919b31" rel="noreferrer" target="_blank">63e939d)

Bug Fixes

• Honor EnumMember attribute in query-string serialization (https://github.com/workos/workos-dotnet/issues/241" rel="noreferrer" target="_blank">#241) (https://github.com/workos/workos-dotnet/commit/6c2789ae005b9668368b36523f5e30196742e911" rel="noreferrer" target="_blank">6c2789a)
• Update test to match renamed DeleteResourceByExternalId method (https://github.com/workos/workos-dotnet/commit/4ceb3dea35a7886cbcdb48b9dcfb74865b79000e" rel="noreferrer" target="_blank">4ceb3de)

v3.0.1...v3.0.2" rel="noreferrer" target="_blank">3.0.2 (2026-04-24)

Bug Fixes

• Correct request param placement for POST endpoints (https://github.com/workos/workos-dotnet/issues/237" rel="noreferrer" target="_blank">#237) (https://github.com/workos/workos-dotnet/commit/c6e307a3db6e93a77bd29f36ad6fa34f6b9412a3" rel="noreferrer" target="_blank">c6e307a)

v3.0.0...v3.0.1" rel="noreferrer" target="_blank">3.0.1 (2026-04-21)

Bug Fixes

• adjust type definitions (https://github.com/workos/workos-dotnet/commit/f119a1d34a84de50e65483c92727461f3e8c65de" rel="noreferrer" target="_blank">f119a1d)

v2.12.0...v3.0.0" rel="noreferrer" target="_blank">3.0.0 (2026-04-20)

⚠ BREAKING CHANGES

• Release next major version of SDK relying on OpenAPI spec (https://github.com/workos/workos-dotnet/issues/229" rel="noreferrer" target="_blank">#229)

Features

• Release next major version of SDK relying on OpenAPI spec (https://github.com/workos/workos-dotnet/issues/229" rel="noreferrer" target="_blank">#229) (https://github.com/workos/workos-dotnet/commit/a904d4881843b19838c1280b846dbbd6f0fc0e6a" rel="noreferrer" target="_blank">a904d48)

Bug Fixes

• Remove extractVersion from matchUpdateTypes rules (https://github.com/workos/workos-dotnet/issues/233" rel="noreferrer" target="_blank">#233) (https://github.com/workos/workos-dotnet/commit/e15ac15eda91ee02e34891459e1a3a1f2d7ac716" rel="noreferrer" target="_blank">e15ac15)

v2.11.0...v2.12.0" rel="noreferrer" target="_blank">2.12.0 (2026-03-30)

Features

• Add Passkey authentication method and expand OAuth providers (https://github.com/workos/workos-dotnet/issues/227" rel="noreferrer" target="_blank">#227) (https://github.com/workos/workos-dotnet/commit/e7e236e01a12d752bb609c41c8d4f39326f19a1b" rel="noreferrer" target="_blank">e7e236e)

v2.10.1...v2.11.0" rel="noreferrer" target="_blank">2.11.0 (2026-03-05)

Features

• Implement user management (https://github.com/workos/workos-dotnet/issues/199" rel="noreferrer" target="_blank">#199) (https://github.com/workos/workos-dotnet/commit/77843d016e2e345fcbc198df66b17abb72c02665" rel="noreferrer" target="_blank">77843d0)

Bug Fixes

• Add release-please for automated releases (https://github.com/workos/workos-dotnet/issues/216" rel="noreferrer" target="_blank">#216) (https://github.com/workos/workos-dotnet/commit/14b7298f6fc4c4780bfff6be7cf3aa62530794fc" rel="noreferrer" target="_blank">14b7298)
• Update Newtonsoft.Json to fix CVE error (https://github.com/workos/workos-dotnet/issues/200" rel="noreferrer" target="_blank">#200) (https://github.com/workos/workos-dotnet/commit/d36e6866633dd5e872b10f002506d1108dff5ba9" rel="noreferrer" target="_blank">d36e686)
• update renovate rules (https://github.com/workos/workos-dotnet/issues/213" rel="noreferrer" target="_blank">#213) (https://github.com/workos/workos-dotnet/commit/30a91d8b41b35ef7183cd1926a483a3a2da85971" rel="noreferrer" target="_blank">30a91d8)

What's Changed

• Version bump v2.10.1 by @kendallstrautman in #198
• Multiple roles support: Add roles property to directory user and SSO profile by @kendallstrautman in #197

Full Changelog: v2.9.0...v2.10.1

⚠️ Misconfigured release version. Use v2.10.1 instead

In this version, the package semver was not updated properly and still references v2.9.0

What's Changed

• Multiple roles support: Add roles property to directory user and SSO profile by @kendallstrautman in #197

Full Changelog: v2.9.0...v2.10.0

What's Changed

• Update DirectoryUser#PrimaryEmail implementation to allow for testing without obsolete fields (https://github.com/workos/workos-dotnet/pull/194" rel="noreferrer" target="_blank">#194)
• Add customAttributes field to SSO Profile (https://github.com/workos/workos-dotnet/pull/192" rel="noreferrer" target="_blank">#192)

Full Changelog: v2.8.0...v2.9.0

What's Changed

• Add email standard attribute to DirectoryUser (https://github.com/workos/workos-dotnet/pull/189" rel="noreferrer" target="_blank">#189)
• Mark emails, job_title, and username standard attributes as deprecated. Enable the equivalent auto-mapped custom attributes instead (https://github.com/workos/workos-dotnet/pull/189" rel="noreferrer" target="_blank">#189)

Full Changelog: v2.7.0...v2.8.0

What's Changed

Added

• Added Organization Domain fields (https://github.com/workos/workos-dotnet/pull/186" rel="noreferrer" target="_blank">#186)

Full Changelog: v2.6.0...v2.7.0

Added

• Add GET /organization/:orgId/roles support (https://github.com/workos/workos-dotnet/pull/182" rel="noreferrer" target="_blank">#182)

Full Changelog: v2.5.0...v2.6.0

What's Changed

• Add role to profile by @kendallstrautman in #179

Full Changelog: v2.4.0...v2.5.0

What's Changed

• Added custom exceptions for webhook verification by @gcsuk in #177

New Contributors

• @gcsuk made their first contribution in #177

Full Changelog: v2.3.0...v2.4.0

What's Changed

• Add AppleOAuth constants by @gcarvelli in #167
• Fix CI badge + add NuGet one by @gcarvelli in #172
• v2.3.0 by @gcarvelli in #170
• Added missing values to DirectoryState enum by @WillyPain in #174

New Contributors

• @gcarvelli made their first contribution in #167
• @WillyPain made their first contribution in #174

Full Changelog: v2.2.0...v2.3.0

Deprecated

• Marked the AllowProfilesOutsideOrganization option as deprecated (https://github.com/workos/workos-dotnet/blob/v2.2.0" rel="noreferrer" target="_blank">#168)

What's Changed

• Add DomainData to Organization create and update methods, replacing deprecated domains (https://github.com/workos/workos-dotnet/pull/165" rel="noreferrer" target="_blank">#165)

Added

• Added ActorIds and ActorNames to CreateAuditLogExportOptions #127

Changed

• [Breaking change] Renamed User to DirectoryUser (#132)
• [Breaking change] Renamed ConnectionType to Type (#138)
• [Breaking change] Changed directory states from linked/unlinked to active/inactive (#142)
• [Breaking change] Changed default list pagination order to be DESC (#159)
• [Breaking change] Changed Connection.Type to be a string and add ProviderType (#154)

Removed

• [Breaking change] Removed Connection Status (#137)

Full Changelog: v1.17.4...v2.0.0

Changed

• Added CreatedAtand UpdatedAt to directory user (https://github.com/workos/workos-dotnet/pull/129" rel="noreferrer" target="_blank">#129)
• Added validating enum to ConnectionState (https://github.com/workos/workos-dotnet/pull/128" rel="noreferrer" target="_blank">#128)

What's Changed

• Fix user enums to include "Inactive"

Changed

• Added missing types int and long to FlattenQueryParameters (https://github.com/workos/workos-dotnet/pull/119" rel="noreferrer" target="_blank">#119 )
• ListOrganizationOptions now inherits ListOptions (https://github.com/workos/workos-dotnet/pull/121" rel="noreferrer" target="_blank">#121 )

Added

• Added groups attribute to SSO user profile. This feature is in beta, please reach out to [support@workos.com](mailto:support@workos.com) to access this feature. (https://github.com/workos/workos-dotnet/pull/117" rel="noreferrer" target="_blank">#117)

Added

• Add log_streams Admin Portal intent (https://github.com/workos/workos-dotnet/pull/114)

Changed

• Added missing properties user and issuer to totp entity (https://github.com/workos/workos-dotnet/pull/111" rel="noreferrer" target="_blank">#111 )

Changed

• DeleteConnection now returns a Task (https://github.com/workos/workos-dotnet/pull/110" rel="noreferrer" target="_blank">#110 )