1.6

2025-10-16 Desktop client auto-provisioning

In order to support client auto-provisioning of the desktop client we've introduced support for initializing the client from a provisioning file (#627). If a client is "uninitialized" (has no instance configured) it can read required enrollment config from a file stored in app data directory. The process is explained further in the docs.

This file-based approach allows us to support provisioning on various platforms independent of the specific tooling used by system administrators.

Furthermore since the majority of users are on the Windows platform we also updated our MSI package to support provisioning scenarios in Active Directory and Entra ID environments as described here.

To enable this functionality we also needed to introduce a change to the OpenID directory sync functionality - when using Microsoft provider it is now possible to create users in Defguard during sync, without waiting for the first login.