Article

Gluesync 2.2.7: advanced enterprise security with OIDC & RBAC, enhanced UI and token management

2026-05-26 · /gluesync/gluesync-2-2-7-oidc-rbac-security-ui-update/

Following our recent architectural refinements throughout May, we are proud to announce the official release of Gluesync 2.2.7. This update shifts our platform’s focus toward enterprise-grade security, refined access governance and a frictionless user experience, ensuring that our data orchestration layer remains as secure as it is performant.

Enterprise-grade security: OIDC and RBAC integration

The cornerstone of Gluesync 2.2.7 is the introduction of native Role-Based Access Control (RBAC) alongside OpenID Connect (OIDC) integration.

Enterprises can now seamlessly connect Gluesync to their corporate Identity Providers (IdPs), allowing IT administrators to automatically map external corporate roles to internal Gluesync permissions. This automation simplifies user onboarding and reinforces compliance across distributed data infrastructure teams.

UI evolution and role enforcement

Our gradual transition to a modern, React-based UI (initiated with the redesigned login screen in 2.2.6.0), reaches a new milestone in this release. We have rewritten core interface components, including the topbar, sidebar, and settings panel, from the ground up for lightweight, lightning-fast rendering.

Furthermore, the UI layer now fully enforces our newly introduced security roles. For instance, users with a “VIEWER” role interact with a read-only control plane, preventing unauthorized modifications to active pipelines while maintaining absolute operational visibility.

Optimized session and token governance

To support these strict security requirements, Gluesync 2.2.7 introduces highly customizable session management configurations. This gives infrastructure teams granular control over session token lifetimes and expiration policies. To maintain ecosystem alignment, we have fully updated both the Automator and Bootstrapper modules to support this advanced token mechanism.

Targeted agent enhancements

Beyond core security upgrades, this release delivers stability and performance fixes across our extensive connector library, featuring dedicated optimizations for:

  • Google BigQuery (enhanced pipeline reliability and bug fixes)
  • PostgreSQL (improved stability under complex sync workloads)
  • Oracle LogMiner (fixes and enhancements carried through the entire 2.2.6.x patch cycle)

Consolidating the progress of the 2.2.6 series

The 2.2.7 release capitalizes on an aggressive cycle of micro-updates and performance patches deployed throughout May across the 2.2.6.x spectrum. These enhancements include:

  • high-throughput data management: we have refined bulk write management across all enabled agents and optimized CSV uploads by enforcing quoting on all non-numeric fields. In the Core Hub, we successfully resolved a serialization edge case for BigDecimal values in CSV payloads and fixed an issue causing data loss during unexpected notification write bursts.
  • Database guardrails and structural changes: a mandatory resync check is now enforced whenever entity column configurations are modified, preventing schema mismatches. Additionally, staging table name lengths have been reduced to guarantee cross-platform database compatibility.
  • Smart UI automation: recent enhancements introduced optimized algorithms for automatic data-type matching during target table creation, alongside UI safety fixes like removing the maintenance button for pipelines still in draft status.
  • Agent catalog hardening: continuous engineering efforts have hardened the throughput and resiliency of several vital agents, including MS SQL Server (both CDC and Change Tracking) oracle LogMiner, IBM i Series, CockroachDB and Informix (which now features dedicated support for bulk loads).

For the complete technical changelog and to review step-by-step upgrade instructions, please consult the official Gluesync Documentation Hub.

Back to blog