2018.38

Change	Expected in Preview Orgs	Rollout to Production Orgs Expected to Start
User Sessions Deleted after Password Reset	September 19, 2018	October 15, 2018
Bugs Fixed in 2018.38	September 19, 2018	September 24, 2018
Previously Released Early Access Features 2018.38 Update	Available Now	Available Now

User Sessions Deleted after Password Reset

We now delete all sessions for a user after a successful password reset as part of the forgot password flow.

Bugs Fixed in 2018.38

• An HTTP 500 error would occur if the JSON body sent to create a user contained a non-string value for the following user profile properties: firstName, lastName, email, login, mobilePhone, and secondEmail. Any non-string values for these properties will now be converted into strings after they are sent. (OKTA-170711)

Previously Released Early Access Features 2018.38 Update

The following features have already been released as Early Access. To enable them, contact Support.

Early Access Features Available Now
Custom URL Domains
Custom Okta-hosted Sign-In Page
Custom Error Page
Linked Objects API
Token Management API
User Consent for OAuth 2.0 and OpenID Connect Flows