IdP Access Policies now support Grace Period and Automatic Remediation ✨

Two capabilities previously limited to direct integrations are now available for all orgs on IdP-group policies.

• Grace Period: when a user leaves an eligibility group but retains the granted IdP group, their access stays In Policy for a configurable window — visible in the existing Grace Period tab alongside the eligibility group they left and the IdP group(s) they still hold.
• Automatic Remediation: policies set to AUTOMATIC now remediate IdP group membership directly, running add/remove operations against the IdP integration itself.