---
title: Release notes Topicus KeyHub 10.0
description: Topicus KeyHub 10 is here! Packed with new, unique Identity Access Management features and improved integration with other systems and tooling.
---

[Blog | Topicus KeyHub ](https://www.topicus-keyhub.com/en/blog)

# [Release notes Topicus KeyHub 10.0](https://www.topicus-keyhub.com/en/blog/release-10-0)

 Written by [Emond Papegaaij](https://www.topicus-keyhub.com/en/blog/author/emond-papegaaij) | 1/05/2017

After two and a half years of development Topicus KeyHub has reached version 10! This new release packs many new features unique in the field of IAM. Topicus KeyHub 10 focuses on integration with other systems and tooling and addresses several issues found in previous releases. It is recommended to update your Topicus KeyHub deployment.

### Webhooks

`TKH-510` `TKH-633` Webhook support probably is the most exciting new feature in this release. Any event that is recorded in the audit log can now be pushed to other systems as well. Possibilities are endless. Think of replicating your audit log on a remote system, showing alerts on monitoring systems or even reconfiguring your VPN on demand when activating groups. As part of this feature, all objects in Topicus KeyHub now have a UUID to identify them globally.

### Store 2FA credentials in your vault

`TKH-526` It is now possible to store TOTP secrets in the vault and share 2FA securely. Topicus KeyHub automatically calculates the 6 digit authentication code, valid only for 30 seconds, when accessing the record. As the secret is safely stored in Topicus KeyHub and cannot be retrieved, this is a very effective way of adding additional protection to your logins. When a user is removed from a group, he or she will be unable to login even when he or she stored the username and password. You cannot store the TOTP code, because it is only valid for 30 seconds.

### Topicus KeyHub command line interface

`TKH-630` `TKH-632` A brand new command line interface (CLI) is introduced in Topicus KeyHub 10. This first release of the CLI allows reading, manipulating and adding records in a vault. Enroll a new VM with a randomly generated password and store it in a vault or let a script authenticate to a server using a password stored in a vault. This is all possible with the CLI. Expect many more new features here in upcoming releases.

### Authenticate with Google or Microsoft Azure AD

`TKH-648` Special support for *G Suite* (formerly known as *Google Apps for work*) and *Microsoft Azure AD* was added to the OIDC directories. This not only greatly simplifies configuration but also lets you restrict accounts to a certain domain.

### Small improvements

The following smaller improvements and bugfixes were made:

- `TKH-595` The bookmarks are now correctly updated after adding or removing a vault.
- `TKH-634` Removed all references to the old project name Heimdall.
- `TKH-638` `TKH-642` Fixed 2 errors with registering on an OIDC directory.
- `TKH-640` Improved handling of requests on blocked resources.
- `TKH-641` The error page is now stateless, reducing the risk of DOS.
- `TKH-643` Fixed some layout issue on mobile devices.
- `TKH-644` Fixed an error with adding multiple groups with the same name to a linked system.
- `TKH-645` Unlocking the vault now checks the password before prompting for 2FA.
- `TKH-646` Fixed the checks when issuing requests which could cause requests to be incorrectly seen as duplicates.
- `TKH-650` Fixed several layout issues in the vault when using long file names.
- `TKH-651` Fixed an error with signing out on some SSO endpoints.
- `TKH-656` Always reauthenticate when changing 2FA settings.
- `TKH-657` The KeyHub console now refuses to render in an iframe.
- `TKH-659` Usernames are now hidden to other users when not needed.
- `TKH-660` Fixed handling of requests on unused SSO endpoints.
- `TKH-661` SSH public key support is now optional for LDAP systems.
- `TKH-665` 2FA is now protected against brute force attacks.

[View full post](https://www.topicus-keyhub.com/en/blog/release-10-0)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Emond Papegaaij"
  },
  "dateModified" : "2025-08-06T09:49:41.832Z",
  "datePublished" : "2017-05-01T22:00:00Z",
  "headline" : "Release notes Topicus KeyHub 10.0",
  "image" : {
    "@type" : "ImageObject",
    "height" : 1268,
    "url" : "https://f.hubspotusercontent40.net/hubfs/3297791/Imported_Blog_Media/clockwork-bg-w-1-Jan-31-2022-08-51-18-92-AM.jpg",
    "width" : 4368
  },
  "mainEntityOfPage" : "https://www.topicus-keyhub.com/en/blog/release-10-0",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Blog"
  }
}
```