LoginSign Up
← Back to all sparks
T

Twenty

CRM
Velocity5.0

Open-source CRM with a modern interface, self-hostable alternative to Salesforce

twenty.com ↗

Twenty 2.58.1 stops existing accounts from joining a workspace through SSO alone.

crmopen sourcessosecurityrelease cadence
◆Current state
Twenty 2.58.1 and 2.58.2 carry the same change: SSO sign-in now requires an existing Twenty account to already be a member of the workspace. Invitations, invite links and approved domains only apply to new accounts, so an existing account joins once through its invitation and uses SSO after that. The release adds SAML and OIDC integration tests that run without an external identity provider. 2.58.0 shipped to npm on November 12 with only a file-rename note.
◆Where it's heading
Twenty ships minor versions every few days, and most tags carry little detail. The changes that are described tighten access and security, as in this SSO fix, or extend the AI assistant inside the inbox and SDK. Point releases now carry the visible change rather than the minors.
◆Prediction
More point releases on 2.58 are likely; the entries do not show which feature 2.59 will bring.

◆Recent moves

  1. 17h ago

    Twenty 2.58.2 repeats the SSO membership fix

    Tagged at the same moment as 2.58.1 with the same SSO change and tests. A duplicate tag of the fix, not a separate change.

    View source ↗
  2. 17h ago

    Twenty 2.58.1: SSO no longer adds existing accounts to workspaces

    Existing accounts that are not workspace members can no longer join through SSO via invitations or approved domains; they join once by invitation, then SSO works. It closes an access gap and is the first described change in the 2.58 line.

    View source ↗
  3. 1d ago

    Twenty 2.58.0 packages published to npm

    The automated npm publish of 2.58.0 for the client SDK, UI, SDK and app packages. Release plumbing.

    View source ↗
  4. 2d ago

    Twenty SDK 2.58.0 tagged with a file-rename note

    The SDK tag for 2.58.0 mirrors the server note about renaming three files. No SDK change is described.

    View source ↗
  5. 2d ago

    Twenty 2.58.0 tagged with a file-rename note

    The 2.58.0 server tag lists only an internal file rename. As with 2.57.0, the minor's real changes are not in the notes.

    View source ↗
  6. 4d ago

    Twenty SDK 2.57.1 type-checks AI component previews

    AI-generated component previews now run TypeScript checks against the app's real dependencies, and errors go back to the AI so it can fix them before the preview runs. It pairs with the inbox's new assistant identity fields and shows Twenty building its app platform around AI-written code.

    View source ↗