Mosaic's October Updates: Expanding Identity Possibilities

October's releases expand what's possible with Mosaic, introducing new ways to manage business identities, enable secure access delegation, and streamline security operations. Enhanced B2B Identity capabilities help organizations support complex customer and partner relationships, while improvements to authentication visibility, fraud intelligence, and team collaboration provide greater control over identity and security workflows.

Highlights

Simplify B2B Identity for Business Customers and Partners

Mosaic for B2B Identity now enables organizations to manage consumer identities, business customers, and partners on a single identity platform. By combining organization-specific authentication, flexible identity journeys, and delegated administration, teams can support complex business relationships, accelerate customer onboarding, and reduce the development and operational effort required to manage B2B identity experiences.

Key capabilities include:

• Organization-Specific Authentication: Support SAML or OIDC federation and tailor authentication settings to meet each business customer's or partner's requirements.

• Complex Business Structures: Model parent-child organizations and users who belong to multiple organizations, each with distinct roles and access requirements.

• Delegated Administration: Empower authorized customer administrators to add or remove members, assign permitted roles, and manage child organizations, reducing routine administrative work.

• Reusable Identity Journeys: Build and reuse authentication journeys, sub-journeys, and external integrations across B2C and B2B use cases through Identity Orchestration.

• Organization-Aware Access: Include the selected organization's identifier, roles, and permission claims in identity tokens, enabling applications to make authorization decisions based on the business context of each user.

Together, these capabilities help organizations expand their business relationships while simplifying identity operations and delivering tailored access experiences across customers and partners.

* General availability

Customer Identity Management

Manage SSO Directly Within Mosaic Applications

Single sign-on (SSO) configuration is no longer managed as a separate service. Instead, it's integrated directly into Mosaic applications, making it easier to manage SSO settings alongside other application and client configurations.. New SSO Client Groups replace the previous SSO Groups, allowing teams to centrally configure login experiences, session timeouts, and other SSO settings for groups of clients. Enhanced client management also provides greater visibility into group assignments, with search and filtering capabilities.

Existing SSO Services are automatically converted into standard Mosaic Apps, preserving authentication settings, user data, credentials, and session behavior for a seamless transition.

* General availability

Secure Delegated Access Through OAuth 2.0 Token Exchange

Mosaic has added support to OAuth 2.0 Token Exchange (RFC 8693), allowing trusted clients to exchange existing user access tokens for new tokens targeting different resources. This enables secure, delegated access across backend services, API gateways, and AI agent workflows while preserving the user's identity and applying the appropriate permissions for each target resource.

Organizations can control which clients are authorized to exchange tokens through configurable policies, while actor tracking maintains visibility into which services are acting on a user's behalf, including across multiple exchanges. This helps teams build more secure, auditable service-to-service interactions without requiring users to authenticate again.

* General availability

Gain Greater Visibility into OIDC and SAML Authentication Flows

Troubleshooting authentication journeys has become easier with more detailed activity tracking for OIDC and SAML flows. A standardized event schema and new protocol-specific events provide visibility into key authentication stages, from the initial protocol request through completion, helping teams better understand authentication behavior and investigate issues.

New activity events cover OIDC and SAML flow initiation and completion, OIDC authorization code issuance, and resumed authentication sessions. Client credentials token requests are also captured in admin activity logs, providing additional visibility into application-level authentication activity.

* General availability

Fraud Prevention

Investigate Suspicious IP Activity with Richer Network Intelligence

Additional IP enrichment data in Detection and Response gives fraud teams deeper insight into network activity, helping identify potentially suspicious connections, including traffic originating from residential proxies and similar infrastructure. New insights include when an IP address was last observed, how frequently it appeared over time, and the service associated with it, providing valuable context for fraud investigations and risk assessments.

These details are available through the recommendations API, Investigation panel, and CSV exports. New sorting and filtering options also make it easier to analyze IP activity and identify patterns that warrant further investigation.

* General availability

Cross-Platform Enhancements

Streamline Team Collaboration on Security Insights

Security Insights now make it easier for security teams to collaborate on investigations, coordinate responses, and track progress directly within Mosaic. New collaboration capabilities help teams establish clear ownership, share findings, and stay informed as insights are investigated and resolved.

Key enhancements include:

• Insight Assignment: Assign insights to team members, track ownership, and filter insights by assignment status to better organize investigation workflows.

• Comments and Mentions: Discuss findings directly within each insight and mention colleagues to bring the right people into the conversation.

• Real-Time Notifications: Receive in-app notifications about assignments, status changes, new comments, and mentions, helping teams stay informed throughout the investigation.

• Role-Based Permissions and Auditability: Control who can assign insights, comment, and mention others, while maintaining an activity log of collaboration actions.

* General availability