body {
font-family: Arial, sans-serif;
line-height: 1.6;
margin: 20px;
}
h1, h2, h3 {
color: #2c3e50;
}
h1 {
border-bottom: 2px solid #2980b9;
padding-bottom: 10px;
}
.section {
margin-bottom: 40px;
}
.news-item {
margin-bottom: 20px;
}
.news-item h3 {
margin-top: 0;
}
.announcements ul {
list-style-type: disc;
margin-left: 20px;
}
.date {
color: #7f8c8d;
font-size: 0.9em;
}

OneStream 8.5.1: A release focused on security and authentication modernisation.

16 April 2025

OneStream Software continues its ambitious roadmap with the release of version 8.5.1, an update firmly focused on access security and the modernisation of the authentication infrastructure. While this release does not introduce any major functional disruption, it marks a strategic turning point for IT teams and platform administrators.

End of native LDAP and Active Directory support: making way for Microsoft Entra ID

Following Microsoft's lead, OneStream is ending direct support for LDAP and Active Directory within its platform. From version 8.5.1 onwards, customers are encouraged to migrate to modern authentication solutions such as Microsoft Entra ID (formerly Azure AD) or Okta, in the cloud.

For on-premise organisations, robust alternatives such as ADFS, PingFederate and Keycloak are recommended to implement secure identity federation using the OpenID Connect or SAML 2.0 protocols.

Technical recommendations and best practices

The 8.5.1 update comes with best practices for technical teams:

• Use of Path.Combine in scripts to ensure compatibility between Windows and Unix/Linux.

• Review of integrations: update libraries to version 8.4+ to maintain compatibility.

• Regular password changes for automated integrations.

These recommendations aim to strengthen the robustness of developments, facilitate cloud deployments and ensure script portability across environments.

A transitional yet strategic release

Less focused on “business features” than version 8.5.0 (with its UX enhancements, dynamic menus, new Power BI connectors, etc.), 8.5.1 is nevertheless crucial for IT departments. It lays the groundwork for the complete discontinuation of legacy authentication methods and anticipates the cybersecurity standards required in audits and certifications.

Advice for OneStream customers:
Plan ahead for the transition to Entra ID or an equivalent. This change will directly affect the user experience, login processes, and potentially your scripts or integrations if they still rely on LDAP.

For more technical information, consult the Official Release Notes – OneStream 8.5.1

source: documentation.onestream.com