---
title: New SAML and OIDC Fields and SAML transforms for Access for SaaS · Changelog
description: Access for SaaS new SAML and OIDC Fields and SAML transforms
chatbotDeprioritize: true
source_url:
  html: https://developers.cloudflare.com/changelog/2025-03-03-saml-oidc-fields-saml-transformations/
  md: https://developers.cloudflare.com/changelog/2025-03-03-saml-oidc-fields-saml-transformations/index.md
---

# Changelog

New updates and improvements at Cloudflare.

[Subscribe to RSS](https://developers.cloudflare.com/changelog/rss/index.xml)\
[View all RSS feeds](https://developers.cloudflare.com/fundamentals/new-features/available-rss-feeds/)

![hero image](https://developers.cloudflare.com/_astro/hero.CVYJHPAd_ZEA2nF.svg)

[← Back to all posts](https://developers.cloudflare.com/changelog/)

## New SAML and OIDC Fields and SAML transforms for Access for SaaS

Mar 03, 2025

[Access](https://developers.cloudflare.com/cloudflare-one/policies/access/)

[Access for SaaS applications](https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/saas-apps/) now include more configuration options to support a wider array of SaaS applications.

**SAML and OIDC Field Additions**

OIDC apps now include:

* Group Filtering via RegEx
* OIDC Claim mapping from an IdP
* OIDC token lifetime control
* Advanced OIDC auth flows including hybrid and implicit flows

![OIDC field additions](https://developers.cloudflare.com/_astro/oidc-claims.2di8l9Lv_ZOEc1S.webp)

SAML apps now include improved SAML attribute mapping from an IdP.

![SAML field additions](https://developers.cloudflare.com/_astro/saml-attribute-statements.CW45j5Qi_ZjcQ8E.webp)

**SAML transformations**

SAML identities sent to Access applications can be fully customized using JSONata expressions. This allows admins to configure the precise identity SAML statement sent to a SaaS application.

![Configured SAML statement sent to application](https://developers.cloudflare.com/_astro/transformation-box.DyKn-DdN_7LzOj.webp)
