Evidence record / openhands
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-24-openhands-enterprise-providers-can-be-staged-and-new-user-registration-controlled
Enterprise providers can be staged and new-user registration controlled. Provider registration is permitted by default; disabling registration gates new-user creation rather than all existing-user linking. New providers now start disabled, while pre-existing rows migrate enabled. Disabling a provider blocks new login/link flows without revoking existing sessions or tokens.
Channel: tagged-release. Half: both. Date: 2026-10-19 (Enterprise 1.72.0); 2026-10-23 (1.78.0).
Operator consequence: Stage provider configuration before enabling it and test registration, existing-user linking and disabled-provider login separately. Handle session/token revocation separately when removing access. This removes the need to expose half-configured providers, but the enabled flag is not an emergency sign-out control.
Receipt
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-openhands-enterprise-providers-can-be-staged-and-new-user-registration-controlled
Source links
Primary links, including exact changelog lines when available.
- commit2026-10-24-openhands-enterprise-providers-can-be-staged-and-new-user-registration-controlledgithub.com/OpenHands/enterprise/commit/f31c63a7bf677150f36f8a94920d2a84504b0a7fcommit2026-10-24-openhands-enterprise-providers-can-be-staged-and-new-user-registration-controlledgithub.com/OpenHands/enterprise/commit/0893792cd133eae70aa79852769e059577b43238tagged commit file2026-10-24-openhands-enterprise-providers-can-be-staged-and-new-user-registration-controlledOpenHands/enterprise / migrations/versions/196_add_auth_provider_enabled.py
Versioned source: run artifact