- Fixed a high‑severity privilege persistence issue in Okta SCIM‑only integration that could let unassigned users retain roles, requiring an upgrade to 15.4.19+.
- Added a new "teleport roles total" metric, enriched join token.create audit events, and introduced an env var (TELEPORT_DEVICE_AUTO_ENROLL_DISABLED) to disable automatic device enrollment.
- Implemented numerous bug fixes and performance improvements, including fixes for Machine ID wizard, Let’s Encrypt renewal, tsh scan key cancellation, event handler scalability, and several others.