Salesforce is changing how integrations sign in: what to do for your community
Applies to: Classic and Aurora communities that use the built-in Khoros Community Salesforce integration, which covers: case escalation the Case Portal user sync case comments syncing knowledge base articles to Salesforce Knowledge In short Salesforce is retiring the older sign-in methods the current connector uses. Salesforce's notices: SOAP sign-in changes (005132110) and end of OAuth username-password sign-in (005461279). Here's what to do and when: When What Who Before December 1, 2026 Add the Use Any API Auth permission to your integration user Your Salesforce admin Before December 15, 2026 Check your Salesforce login IP settings, and follow our guide if they apply Your Salesforce admin Jan 2027 (release 27.1) Switch to certificate sign-in when it's available for your community. We'll add the steps to this post and let you know. Your community admin and Salesforce admin The December and January Salesforce security changes do not need a new Khoros software release or deployment. Your Salesforce admin may need to update settings in Salesforce. Depending on your configuration, your community admin may also need to update the existing Salesforce connection details. The permanent move to certificate sign-in will come separately. If the Salesforce connection stops working, these community features can be affected: case escalation case comments and attachments the Case Portal user sync knowledge base sync The rest of your community isn't affected. Part 1: Action now, before December 1, 2026 From December 1, the connector's main sign-in only works if your integration user has the Use Any API Auth permission. Your Salesforce admin: In Salesforce Setup, open Permission Sets and click New. Name it, for example "Khoros Community Connection". Under System Permissions, tick Use Any API Auth and save. Click Manage Assignments and add your community's integration user. That's the Salesforce username saved in your community's Salesforce settings. If you can't find it, raise a Khoros Support ticket and mention "Salesforce sign-in". Nothing changes in your community for this step. Part 2: Check before mid-December 2026 From December 15, 2026 (sandboxes) and January 31, 2027 (production), Salesforce adds two rules. 1. Broad login IP ranges. What changes: if your org's Network Access settings, or the integration user's profile Login IP Ranges, allow a very broad range (wider than /8 for IPv4 or /29 for IPv6), the connector's sign-in will also need the user's security token. What to do: ask your Salesforce admin to check these settings. If it applies, either narrow the IP range, or add the security token to the connection: The integration user resets their token in Salesforce: personal settings → Reset My Security Token. Salesforce emails the new token. In your community's Salesforce settings (Classic: Mod Tools → Salesforce → Settings; Aurora: Settings → Features → Salesforce), type the password with the token straight after it, no space, in the Password field (up to 50 characters in total). Save. Saving signs into Salesforce, so if the token is wrong you'll see a sign-in error and nothing is saved. The connector's built-in actions use the same saved password, so there's nothing else to update. If you're unsure, contact Khoros Support, and never share your password or security token in a support ticket. Shared users: resetting a security token can affect any other integration that uses the same Salesforce user. 2. A one-time check for unused SOAP sign-in. What changes: on the same dates, Salesforce runs a one-time check and switches off the older SOAP sign-in in any Salesforce org with no SOAP sign-in activity in the previous six months. It looks at your whole org: one SOAP sign-in anywhere keeps it on, and a live Khoros connection's own sign-ins count. Who should check: if your Khoros connection is rarely used or paused, ask your Salesforce admin to look at your org's login history, and let us know if you still need the connection. Part 3: Coming next, certificate sign-in Salesforce is retiring the password-based sign-ins in stages: February 20, 2027: the password-based OAuth sign-in ends. Two built-in actions use it today: closing the Salesforce case when a reply is accepted as the solution, and knowledge base sync. We're preparing a compatibility update to keep these actions working while communities move to certificate sign-in, and we'll coordinate its rollout with affected communities. Summer 2027: Salesforce removes the older SOAP sign-in completely. What we're doing: we're adding certificate sign-in to the connector for Classic and Aurora, as part of our 27.1 release, planned for early 2027. It's Khoros' supported replacement: the community signs in with a certificate instead of a stored Salesforce password. What stays: your existing setup (board mappings, Case Portal, field mappings, user sync). What changes: only how your community signs in. Works even if your current connection doesn't: you can switch to certificate sign-in even if your current password connection has stopped working. What to expect: Who does the switch: your community admin and your Salesforce admin, together. Allow time for any internal security approvals on the Salesforce side. When: we'll let you know when certificate sign-in is available for your community, with a date to complete the switch. Where: we'll add the step-by-step setup to this post. If your team has its own code that calls Salesforce Some communities have custom code that connects to Salesforce directly. That code isn't covered by our connector update. Your developers or partner should check whether it uses: password-based OAuth sign-in, which ends February 20, 2027 SOAP login, which ends Summer 2027 Not sure? Ask Khoros Support. Need help? Standard connector: raise a Khoros Support ticket and mention "Salesforce sign-in". No Professional Services engagement is needed for it. Custom code may need your developers, your partner, or separate services work. We'll update this post when certificate sign-in is available, and if Salesforce changes its dates.61ViewsSign in to react to this post0Comments
Khoros Communities 26.6 Release Notes
26.6 introduces Contests, a new way to spark participation, peer collaboration and recognition in your community, and delivers our largest accessibility release to date, a major step in our WCAG 2.2 AA work. It also builds on Orchestrator Scheduled Rules with more precise audiences, and brings improvements to federated search, carousels and the social feed. Email delivery gets a round of fixes, and other fixes address scheduled publishing, moderation actions, mention and follower emails, and private image access. Try everything shipped so far on Staging The Aurora features released from 26.2 through 26.5, which were introduced as Early Access, are now available on client Staging environments so you can explore and test them with your own content and configuration. Features available to try on Staging AI Moderation and Appeals, Community Language Model / Answer Assist, Community Orchestrator Customizable Email Templates with Orchestrator integration, Proactive Clarification Questions, Polls, Metric Explorer and Search Analytics, Expert Report, multi-select search filters and Author Search, Zoom event registration Cross-Board Posting, Interactive Social Feed (reactions, save and follow), Admin Review Mode for Answer Assist, Answer Requests opt-out, reaction email notifications Federated Search, Carousels (featured content banners), Orchestrator Scheduled Rules and Run Logs Please note that Production is not changed. Nothing is enabled in production without your testing and an explicit request. To enable a feature in production, tell your Customer Success Manager which features you have tested and want live New Features (Aurora) Contests: recognize and reward your members Contests give your members a fun, structured way to take part, collaborate with their peers and be recognized. Invite members to share their best work, work together in teams, vote for each other and earn rewards such as prizes, badges and ranks. Admins set everything up from a guided wizard, with no developer involvement. Rewards that recognize. For each contest, define reward tiers (for example first place, runners-up and a special mention). Each tier has a name, a description, an optional image and an optional badge, and you decide how many winners each tier has. Rewards are shown clearly on the contest page so members know what they are working toward. Badges are awarded automatically when results are announced. Three types of contest to fit your goals: Submission contest: members submit an entry (a photo, an idea, a story, a how-to) and winners are chosen by community vote or by judges. Best for user-generated content and ideas. Activity Challenge: no entries needed. Members qualify for reward tiers through what they do in your community during a set time window: posts, replies, kudos. Best for lifting everyday participation and welcoming new members. Hackathon: teams build and submit a project, and a judging panel scores it against a rubric. Best for product ideas, builds and showcases. Voting or judges. Choose how winners are decided: Community voting: members vote on entries, a live leaderboard shows how the contest is going, and winners are ranked by votes with clear tie-break rules. Judges: appoint judges who score entries from 0 to 10 in half-point steps. Winners are ranked by judge score. Contest boards. Submission contests and Hackathons collect entries, so they run on a Contest board, a new board style. Create a board with the Contest style under Community structure and choose it as the contest's venue. Entries are posted to the board as part of the contest, and members don't start regular posts there. Activity Challenges can be attached to any board type, so they can count posts and replies on your existing boards. Run it your way. Team entries with open or restricted enrollment, and a discussion thread on each contest. Contest widgets for the home page and boards (active contests, my contests, progress, leaderboard) and dedicated contest pages. Contest emails and notifications for entries, results and winners. Admin dashboards for participation, entries and results, with winner review and correction. Availability. Contests are an Early Access feature, behind a feature flag, and are off by default. Contact your Customer Success Manager to begin; once enabled, contests are fully configurable from the admin panel. While contests are off, members see no contest content in navigation, search, board lists or email-template lists. Coming next: My contests on the member profile, a judging queue for large contests, contest cards in the feed, and micro-games: quick, lightweight games (such as trivia, this-or-that, predictions and word guess) for everyday engagement. Events: easier to run, easier to join A fresh Events experience for webinars, meetups and programmes your members actually show up to. Easy registration: members register in one click, and can cancel just as easily. Seat limits and waitlists: set limits for in-person and virtual attendance. When an event is full, members join a waitlist and are offered a seat when one opens. Repeating events and Series: create daily, weekly or monthly events in one step, and group related events into a Series. Speakers and agenda: add speakers and an agenda to the event page. Attendance tools for organizers: see who is coming, filter the list and export it to CSV. Choose whether attendee names are shown or only counts. Calendar and emails: members can add events to their calendar, or subscribe to the community Events calendar. Registration and waitlist emails use your community email templates. Admin control: Events settings in Admin and new Page Designer widgets, including an Events Calendar. Availability: Events is an Early Access feature, behind a feature flag, and is OFF by default. Nothing changes for your community until it is turned on. Contact your Customer Success Manager to begin. Before you enable it: existing RSVPs are not converted to registrations, so members who already said Yes need to register again to appear in the organizer's Attendance list Accessibility (WCAG 2.2 AA) 26.6 is our largest accessibility release so far, with fixes across keyboard use, screen readers, focus, labels and visual design in the member experience. Our WCAG 2.2 AA work continues in upcoming releases. Keyboard and focus Visible focus indicators restored across Aurora, including in Windows High Contrast (forced-colors) mode. Focus returns to the trigger when dialogs close, Tab stays inside open dialogs, and every dialog has a proper initial-focus target. The rich-text editor toolbar is reachable by Tab; Escape in editor popups no longer closes the whole modal. Fixed the hover-card keyboard trap; hover cards no longer open on focus alone and Escape closes only the card. Pickers and All Filters move focus in when opened and back when closed; focus moves to the first revealed reply. Preview images, badges and tooltips are keyboard-operable. Names, labels and structure One main landmark per page, named navigation landmarks, and headings on pages that lacked one. Accessible names include the visible label (inbox folders, timestamps, logo link, account menu, sort controls). Dialog titles are real headings; radio groups, tag groups and table captions are exposed correctly. Tag links announce each tag once, with post counts; decorative icons are hidden from screen readers. Autocomplete tokens corrected on form fields. Status messages (WCAG 4.1.3) When something changes on the page without moving focus, screen readers now announce it, so people who can't see the screen aren't left guessing. For example: How many results a search or filter found, or that it found none, and when a search fails; How many suggestions are in a picker; The unread reply count on a feed post, a post's moderation status, and reply and view counts. Visual 24px minimum target size for kudos and vote counts. Contrast fixes for badges, closed polls, rank badges and radio focus rings. No horizontal overflow at 320px; date picker and cover image text-spacing fixed. Missing translations filled in across 15 text bundles, so non-English interfaces no longer show English fragments. Enhancements (Aurora) Email New members now receive their registration email in the language they were viewing the community in; the viewed language is saved as their profile language before the email is sent. {subject} resolves to the post title in workflow emails. Community URL globals and the unsubscribe link now work in scheduled-rule and digest emails. The optional message in invitation emails is shown as plain text. Insert Link in the email editor no longer adds http:// in front of rule variables. Email templates that cannot work yet are hidden from the template list. Orchestrator: Scheduled Rules enhancements Scheduled Rules, introduced in 26.5, let community managers run automations daily, weekly or monthly to reach the right members for re-engagement, win-back and recognition campaigns. 26.6 makes them more precise and more dependable: New "Last Visit (days ago)" audience condition: enter a number of days (for example 30) to reach members who last visited more than, or less than, that many days ago. The number is counted from the moment each run starts, so a weekly rule always targets a moving window instead of a fixed calendar date. The existing "Last Visit" date condition remains for fixed dates. Audiences no longer come up empty: on communities where empty searches are turned off, a scheduled rule could find zero members for every audience condition and still report a successful run. Audiences now resolve to the members who match. Safer editing: editing a scheduled rule can no longer silently widen its audience. Clearer audiences and dates: audience notes and dates are shown in community time, and the schedule frequency control no longer overlaps Save and Cancel. Rules triggered by features that aren't enabled in your community are no longer offered. Federated Search For members The source filter a member chooses is now remembered. Previously it was cleared when the page loaded. The first search on a community with federated sources shows a loading state instead of a blank results area. Clicking an external result now gives immediate feedback while its content loads, instead of looking like nothing happened. YouTube and Vimeo results play in the in-community reader. External results are shown only to members who have accepted cookies, and this is now verified on the server from the member's own consent. For admins Role restrictions can now be created and updated on a source. Previously saving one failed with an error. Unsaved edits are no longer lost when two admins change the same source; you can choose to keep your own edits. Rotating a source credential no longer discards the new key. Failed connection checks are now shown instead of hidden, and saving a board reorder can no longer overlap with another save. Carousels New media alignment control for the Split Media variant, and a "Default" gradient swatch with a working custom gradient editor. Slide Count shows the true count and "+" no longer adds two slides on the first click. A single-slide carousel now renders as a static banner; empty slides no longer publish placeholder text. Auto-advance behaves correctly with one slide; Designer carousel keyboard navigation restored. The carousel warning banner meets AA contrast for any theme. AI Settings and Clarification Questions The Clarification settings page can no longer lock you out when the kill switch is off: the re-enable toggle now always appears, and the kill switch defaults to off. AI Settings no longer shows errors on first load, flickering, or raw text keys flashing. Other Enhancements Language rendering was fixed and the language toggle improved. The community guidelines link is now an admin setting. Timezone labels show standard and daylight GMT offsets. Bug Fixes Posts, replies and the social feed Social feed cards: counts no longer split mid-number in the card footer, reactions no longer overlap the reply count, and cards now show 4, 3 or 2 columns depending on screen width. Show More on long posts: a long post that is cut off with "Show More" can now be collapsed again with "Show Less" (previously it could only expand). If loading the full post fails, the post stays collapsed with a message and you can retry. Long AI replies are no longer cut through the middle of their citations. Comments turned off: the "Comments/Replies have been turned off for this post" banner used to show to everyone, including admins who could still reply. Each person now sees only what applies to them, so members see the reply button, or why they can't reply. @mention emails: a member mentioned in a draft blog or knowledge base article used to be emailed when the draft was saved and again when it was published. They are now emailed once, when it is published. Notify Followers on edits: edits to published blog and knowledge base articles notify all followers only when the author ticks "Notify Followers". Other edits follow each member's own subscription settings. Polls on profiles: the Polls tab on a member's profile now lists only their polls; it previously listed all of their topics. Accept as Solution is no longer offered on rejected or in-review replies. A post whose image was rejected or purged can be edited again; previously every save failed. Editing a scheduled knowledge base article without touching its schedule (for example adding a tag) no longer cancels the scheduled publication. Code samples keep their line breaks when a post is reopened from an autosave, and an Name typed inside a code sample stays as text instead of becoming a mention. Images found through Unsplash search in the cover image picker can be added to a post. Signed-out visitors no longer hit an error on pages with featured sections when anonymous access is off. Moderation and administration Moderation actions: Mark as Spam, Mark as Not Spam and Ban Member sometimes did nothing because their confirmation dialogs disappeared. They now work, and actions that aren't available are shown greyed out with the reason instead of being hidden. Unarchiving a topic that was archived while unmoderated no longer fails. Page Designer: Page Templates no longer crashes the whole page when a template's page is missing, and the sidebar no longer steals focus from the canvas. Moderation audit-trail reads are bounded so very large communities do not run out of memory. Admin List Users no longer crashes on a negative role count. Report actions require a verified email. Pages, sorting and time A board sort choice is now kept for the member across servers; previously it could revert to the default. A board or post under a category the member can't read now redirects to the community home instead of showing an error page. Timezone dropdowns show both standard and daylight GMT offsets, and wrong all-year offsets are corrected. Images and files Private and legacy-group images now display correctly for group members, signed-out readers and API sessions. Images whose parent content has been deleted now return "not found" instead of an error. Responsive image sizes are served for private albums when responsive images are enabled. Reliability and security The Aurora app now recovers from Cloudflare challenges automatically. Hardened image handling, file downloads and shared caching, credential logging, and sign-in token handling. Upgraded Aurora's web framework to address reported vulnerabilities. Requests with a missing body, non-owner image requests and similar cases now return the correct response (400, 403, 404) instead of a server error. Classic Enhancements and fixes in this release that apply to Classic communities, including those shared with Aurora. Email New members now receive their registration email in the language they were viewing the community in; the viewed language is saved as their profile language before the email is sent. {subject} resolves to the post title in workflow emails. Community URL globals and the unsubscribe link now work in scheduled-rule and digest emails. The optional message in invitation emails is shown as plain text. A member mentioned in a draft blog or knowledge base article is now emailed once, when it is published, instead of when the draft is saved and again on publication. Edits to published blog and knowledge base articles notify all followers only when the author ticks "Notify Followers". Other edits follow each member's own subscription settings. Scheduled Rules Editing a scheduled rule can no longer silently widen its audience. Rules triggered by features that aren't enabled in your community are no longer offered. Single sign-on Signing out of a community that uses single sign-on with Frontend Logout now reliably ends the identity provider session too, so the next person on a shared device is not silently signed back in as the previous user. Turning on Feature Logging no longer breaks OIDC sign-in: a failed sign-in shows the normal error page, and the diagnostic log is complete and readable. Sign-on secrets and tokens are no longer written to logs, at any log verbosity level. Posts, articles and images Community-hosted videos are no longer removed from a post when it is edited and saved. Images found through Unsplash search can be uploaded again; previously every upload failed. A category or board picture can be set from a web address, and any remaining failure shows a clear message instead of a generic error. The Edit option is available on a published knowledge base article while a scheduled update to it is pending. Editing a scheduled knowledge base article without touching its schedule (for example adding a tag) no longer cancels the scheduled publication. Older inline images in published articles that showed a broken-image placeholder, even though the image was intact, display again once the restore is enabled for your community. Reviewers can see an author's embedded images while a blog post is awaiting review. Inline images in open Group Hub forum posts display for signed-out visitors. Responsive image sizes are served for private albums when responsive images are enabled. Malformed tag page addresses return "not found" instead of a server error. Moderation and administration Unarchiving a topic that was archived while unmoderated no longer fails. Moderation audit-trail reads are bounded so messages with very large histories do not run out of memory. Admin List Users no longer crashes on a negative role count. The page-level Options menu on a forum reply page now reads "Delete Topic", matching what the action does; it was previously labelled "Delete Reply". Private message deletions are recorded correctly in community analytics instead of producing repeated processing errors. Pages, sorting and time A board sort choice is now kept for the member across servers; previously it could revert to the default. Timezone dropdowns show both standard and daylight GMT offsets, and wrong all-year offsets are corrected. Reliability and security Hardened image handling, file downloads and shared caching: image processing fails closed when the image service is degraded, the image-metadata library was upgraded, Unsplash downloads reach only Unsplash's own servers, and shared caches no longer store private file downloads. Requests with a missing body and non-owner image requests now return the correct response (400, 403) instead of a server error. Rollout Schedule Stage Rollout: October 19-20, 2026 Testing window: October 21 through November 1, 2026 Production Rollout: November 3-4, 2026 The rollout will follow the standard maintenance windows.391ViewsSign in to react to this post1CommentKhoros Communities 26.5 Release Notes
26.5 transforms how members discover content and how community managers curate it. Members can now search across external knowledge bases (Confluence, internal wikis, any connected source) and read results without ever leaving the community. Community managers can place editorial content banners on any page to spotlight campaigns, launches, or key articles, schedule Orchestrator rules to run on a recurring cadence, and see exactly how their automations are performing with full execution history. The release also delivers accessibility improvements and a broad batch of reliability fixes across the social feed, email templates, moderation, and the Salesforce connector. New Features (Aurora Early Access) Availability: All Early Access features are behind feature flags and must be manually enabled. Contact your Customer Success Manager to begin. Once enabled, features are fully configurable from the admin panel. Note: Through the end of 2026, we are offering our migration services at no cost for Classic users who move to Aurora AI. Contact your CSM for details Federated Search Members can now search across your connected external knowledge bases directly from the community search bar, and read the results without leaving. Admins connect and configure sources entirely through a self-service admin console, with no developer involvement, no integration projects, and no code. Connect external knowledge sources (Confluence spaces, or any REST API through the Direct API connector) from a five-tab admin console. Scope each source to the entire community or to specific boards, with per-board defaults you can apply in bulk. Stage a new source in Review, check real results in Preview, then go Live. Sources move cleanly between Live, Not Live and Archived. External results appear in their own labelled band on the search page, clearly separated from community content. Members can read a result inline or open it on the source site. Duplicate results pointing at the same external page are collapsed into one. A consent gate withholds external results from members in cookie-banner regions until they accept. Members only see external content they are entitled to; permissions are re-checked per viewer and snippets are sanitised before display. A Health dashboard tracks each source's status, response time, and failure streak, Coming next: Answer Assist will draw on federated sources when generating answers, and video results will play inline within community search results. Enablement: Federated Search is off by default. Contact your CSM to enable it. Carousels: Featured Content Banners Community managers can now place editorial content banners (similar to the featured sections on streaming or e-commerce platforms) on any community page to spotlight campaigns, product launches, events, or key articles, and guide members to what matters most. Add a carousel to any Community Home, Category Home, or Board Home page from Page Designer (Add Section → Carousel). Each carousel is a full-width hero banner section with one or more slides. What goes in a slide: Upload an image (JPEG, PNG, or animated GIF up to 5 MB), paste an image URL, or pick a published blog post; the blog's cover image, title, and URL are pulled in automatically. Add a heading and sub text to overlay on the image. Add up to two CTA buttons with custom labels and destination URLs, linking to a blog post, KB article, event, campaign page, or any external URL. Choose a hero variant: Full Image: edge-to-edge background image with text overlay Split Media: image on one side, text on the other Centered Text: text-focused with image as subtle background Compact: reduced-height banner for tighter page layouts Person Image: designed for expert spotlights or contributor features Peek: adjacent slides are partially visible on both sides, signalling more content to explore Configure behavior: Auto-scroll with a configurable interval (1–30 seconds). Rotation pauses on hover and keyboard focus, and turns off for members who have asked their device to reduce motion. Toggle navigation dots, prev/next arrows, and swipe on mobile independently. At least one navigation method must be enabled. Add a banner badge (e.g. "New", "Featured", "Live Now") for visual emphasis. Customize the overlay style: solid colour or gradient with adjustable opacity and colours. For members: Carousels surface editorially curated content (featured articles, product launches, upcoming events, expert spotlights) right where members browse, making discovery effortless and the homepage intentional rather than purely algorithmic. Slides linking to restricted content are automatically hidden from members without access. Enablement: Carousels are off by default. Contact your CSM to enable them. Note: Horizontal content rail carousels (scrolling card rows), dynamic content sourcing from boards, audience targeting, and carousel analytics are planned for a future release. Aurora Enhancements Orchestrator: Scheduled Rules Orchestrator gains a new trigger type: rules can now run on a recurring schedule (daily, weekly, or monthly) at a chosen time and time zone, instead of only firing in response to a member action. Define who the rule reaches using the condition builder with new audience conditions exclusive to scheduled rules: Rank, Registration Date, Last Visit Date, Kudos Received, Kudos Given, and Roles. Send each matched member a templated email or private message. Scheduled runs appear in Run Logs alongside event-driven runs with the same level of execution detail. Orchestrator: Run Logs Community managers currently have to file a support request or ask an engineer every time they suspect an automation isn't firing. Run Logs gives them direct, self-service visibility into how every Orchestrator rule is performing: what ran, what didn't, and why. Summary view shows daily activity trends and success rates at a glance. Detailed view lists every individual execution with outcome, trigger, action, duration, and error message. Outcomes are clearly distinguished: success, failure, skipped (conditions didn't match), and stopped (blocked by a pre-action check). Filter by date range, outcome, trigger type and action type; search by rule name. Orchestrator: Other Enhancements Search now matches on trigger name as well as rule name. URL validation added to the Send Private Message link field. The Send Email action is now correctly gated to triggers configured with the Immediately cadence. Accessibility (WCAG 2.2 AA) Clearer control names: action menus, kudos buttons and the solved badge now expose proper accessible names; invalid or misleading labels removed. Keyboard and hover UX: focused fields stay visible beneath the sticky navigation bar; hover cards can be dismissed with Escape so keyboard users are never stuck. Status announcements: search result counts, moderation banners and toast messages are correctly announced to assistive technology without triggering as false page headings. Images, embeds and zoom: preview images and video thumbnails carry correct alt handling; embedded iframes are titled; Zoom meeting pages can be enlarged with browser zoom again. Answer Assist & CLM Full citation details (title, snippet and source URL) now shown in Admin Review Mode for answer quality evaluation. AI processing status now correctly shows "AI: Disabled" or "AI: Skipped" instead of a false "Pending" on boards where AI moderation is off. Expert Routing renamed to Answer Requests throughout the UI, across all 28 supported locales. Answer Confidence Threshold simplified to three options: Moderate (Recommended), High and Extreme. Clarification question answers now processed through the same AI moderation pipeline as regular posts. Fixed Answer Assist generating duplicate replies when a post is edited mid-generation. Email Templates Fixed email template links losing their href when a variable includes a UTM suffix. Community URLs are now available in the link popover within the email editor. Fixed digest editor issues: layout rendering, preview display, variable substitution, and save/publish behaviour. Fixed Undo incorrectly clearing original text when reverting a block duplication or close action. A fallback message is now required before a digest template can be saved or published. Fixed the editor showing a success confirmation without actually saving; errors now surface correctly. Notifications & Email Preferences Members can now control rank-change email notifications from their personal notification settings. Post notification controls consolidated to a single Follow / Unfollow action per thread. Bug Fixes Social Feed & Reactions Fixed social feed save error, incorrect view count display, and reaction picker UI being clipped. View counts are now de-duplicated server-side; reopening the same post no longer double-counts. Moderation Fixed moderation badge incorrectly showing "In Review" on publicly visible posts in Selective (post-moderation) boards; the badge now correctly checks whether the post is actually non-public before displaying a moderation state. Fixed moderation badge and banner showing a stale "In Review" state instead of "Not Accepted" after a spam rejection until a full page refresh. Spam and Other reject reasons restored for replies in threaded view. Fixed a rendering crash on the Manage Content Drafts and Spam tabs. Quick Poll content now graded by Akismet for communities using Akismet without AI moderation. Fixed adding a poll image incorrectly stripping the main post's featured image on publish. Cross-Board Posting Fixed the board destination picker returning no results when searching by exact board name. Fixed destination picker label display and expansion behaviour. Fixed signed-out users landing on a broken /create URL instead of being redirected to sign-in. Salesforce Connector Fixed the Salesforce settings page logging a GraphQL resolution error on every load, which could cause node pickers to silently omit nodes. Custom user-sync field mappings are now validated at save time with a clear message describing what's wrong, instead of failing silently. Sensitive member fields such as passwords and stored credentials can no longer be included in a custom sync mapping. Admin-configured field names and query fragments used by the Salesforce connector are now validated and escaped, preventing malformed or crafted values from altering queries sent to Salesforce. Classic The following fixes are specific to Classic in 26.5. Moderation & Spam Improved spam detection by passing new-account reputation signals to the spam-detection provider. Fixed Akismet spam-feedback reports sending the moderator's device information instead of the original author's. Fixed moderation actions taken by an automated system process being recorded under the post author's name. Excluded internal abuse-report notifications from community content and search results. Notifications & Email Fixed subscription emails not being sent for board notifications despite eligible settings. Fixed the Notification Feed count dropping without any change in read status. Fixed topic links in notification emails pointing to the wrong page, especially after a move. Fixed Studio's Send Email to Self failing for the Event Board notification template. Content & Profiles Fixed article contributors being removed by unrelated edits. Fixed root post submissions being rejected as missing a required label on boards using hierarchical labels. Fixed spell-check returning an error for French and Spanish editor text. Fixed profile post counts including archived and deleted content. Fixed the Top Solution Authors widget rendering empty on board pages. Fixed anonymous visitors seeing a generic error instead of a sign-in prompt on profile pages. Search & API Fixed board listings returning nothing when an unsupported board style was present. Fixed the REST API album search filter for the default album style being silently ignored. Fixed custom field values not being returned by the API after they were saved on a topic. Added membership-type and post-time filters to Group Hub and message queries, and fixed a related page crash. Prevented deep pagination requests from generating oversized search queries. Analytics & Reporting Fixed Community Analytics failing to load for a community's root category. Improved analytics reporting for AI moderation decisions and bans. Fixed the Admin Metrics User Reports CSV export failing for very large user populations. Performance & Stability Fixed shared caches staying empty after a deployment triggered a large invalidation burst. Fixed a request-limiting pool that could get stuck rejecting all requests. Added automatic recovery for failed customization-cache updates that could otherwise show raw navigation keys or default branding. Fixed server errors returned for malformed avatar and action URLs requested by web crawlers. Fixed Case Portal failing when its required support board was never created. Security Closed workflow gaps that allowed authors to publish blog and knowledge base articles without required approval. Hardened handling of malformed image URLs that could return a server error. Rollout Schedule Stage Rollout: September 8–9, 2026 Testing window: Sep 8 through Sep 21, 2026 Production Rollout: September 23–24, 2026 The rollout will follow the standard maintenance windows.398ViewsSign in to react to this post0CommentsKhoros Communities 26.4 Release Notes
26.4 brings the Aurora homepage to life. Members can now react, reply inline, and save content directly from the feed without navigating away, while cross-board posting lets anyone start a discussion from any page in the community. Managers get a safe mode to evaluate Answer Assist quality before enabling it for members. Across Classic and Aurora, the release also delivers security patches, search fixes, and broad editor and stability improvements. New Features Aurora - Early Access Features The features in this section are available in Early Access for Aurora communities. They are behind feature flags and must be manually enabled — contact your Customer Success Manager to begin. Once enabled, all features are fully configurable from the admin panel. Note: Classic users can migrate to Aurora at no cost in 2026. Contact your CSM for detail Cross-Board Posting: Members can now start a post from the homepage or any category or landing page — no more navigating deep into the community structure to find the right board. Start a Discussion CTA — Admins enable a posting button on any page template via the Designer Tool. Button text is configurable (default: "Start a Discussion"). Permission-aware board picker — A searchable flat list showing only boards the user has permission to post on. Private group boards are hidden from non-members. All content types supported — discussions, blog articles, KB articles, ideas, and events. If clicked from within a specific board, that board is pre-selected in the picker. Anonymous users see the button but are redirected to sign-in on click Interactive Social Feed: Aurora's homepage Feed section transforms from a static list of post titles into a living, social feed where members can participate without breaking their browsing flow. Inline comment expansion — Click "See details" on any post to expand and read the latest comments directly in the feed. New/unread comments are surfaced first with clear visual highlighting. Inline replies — Reply to any discussion directly from the homepage feed using the same rich editor and community settings as the full thread view. Full post view — Expand the complete post body within the feed context; navigate to the full thread only when you need deeper engagement. Infinite scroll — The feed auto-loads additional posts as you scroll, with admin-configurable batch sizes and load limits. Admin controls: Enable or disable the interactive feed globally or per board from Admin → Settings → Content Features → Homepage Social Feed. Configure comment display count, infinite scroll batch size, and pilot specific boards before rolling out community-wide. One-click emergency disable option if issues arise Multi-Semantic Reactions: Move beyond a single "Like" and let members express nuanced sentiment. Reaction types include: Need This, Helpful, Insightful, Celebrate, and more — configurable per community. Reaction picker appears inline on posts and comments in the feed and full thread views. Members who react with "I Need This" automatically follow the thread and receive notifications when a solution is posted. Reaction counts display in real time; notification messages explain why members are receiving updates. Save & Follow — Inline Feed Actions: Members can now manage their personal content queue directly from the feed. Save/Bookmark — Save any post to "My Stuff" with a single click. Add private bookmark notes. Follow/Unfollow — Follow threads for notifications; unfollow directly from the feed at any time. Bulk unfollow — Manage followed content at scale. Auto-follow — Members who react with "I Need This" are automatically subscribed to solution notifications. Admin Review Mode for AI Answer Assist: Community managers can now safely test Answer Assist quality on live production data without any impact on member experience. Review Mode toggle — Enable per board in Answer Assist settings. The toggle label dynamically reflects the current state: "Enable Review Mode" when off, "Enable Live Mode" when on. Shadow processing — Answer Assist generates answers normally but routes them to the Answer Queue for admin review instead of posting to members. Zero member impact — No answers posted, no expert notifications triggered, no AA UI rendered for members in review mode. Answer Queue — Review mode entries are labeled "REVIEW MODE" and include the generated answer content and identified expert names. Answer Requests Opt-Out: Experts can now opt out of automatic question routing when they don't want routed questions. (feature flagged with Answer Assist) Likes & Reactions Email Notifications: Notify users by email when their posts receive likes or reactions (feature-flagged with the social feed). Classic Newest Sort for Knowledge Base Tags: Sort knowledge base Tag Results by newest post date. Classic and Aurora Custom Embed Extension Point: Add custom embed integrations to the rich text editor toolbar in a supported, generic way. Classic Security Fixed private message images being viewable without logging in. (Classic and Aurora) Fixed an attachment upload issue that could let a file be served with an unsafe content type. Fixed SAML SSO not enforcing the required-signature setting on assertions. Fixed anonymous API access that could expose private, moderation-held message data. Fixed the kudos revoke API returning a business error instead of an authentication error for unauthenticated requests. Added autocomplete hints to the registration form to prevent incorrect credential autofill. Fixed OAuth callbacks double-encoding the state parameter, which strict clients could reject. Accessibility Fixed flat heading levels on Classic profile and widget pages for screen readers. Exposed the rich text editor body as a labeled multiline textbox for screen readers. Fixed keyboard focus getting stuck in the rich text editor toolbar at high zoom levels. Fixed keyboard tab order so the Labels field is reachable before Post and Cancel on the compose page. Added a visible required-field indicator and aria-required to the compose message Subject field. Exposed the rich text editor list and text-color controls as split buttons to screen readers. Added a visible tooltip when keyboard focus lands on a rich text editor toolbar control. Rendered Help FAQ procedural step labels as proper headings for screen readers. Search Fixed an exact-title search match not appearing in results. Fixed the search auto-suggest dropdown not appearing on some communities. Fixed board search returning stale category results after a board was moved. Fixed product and managed-tag search returning no results for certain multi-part terms. Fixed full-text search not preserving compound terms joined by hyphens or slashes. (Classic and Aurora) Fixed search dropping trailing terms in some multi-term queries. (Classic and Aurora) Improved REST API search response times for large result sets. Analytics Restored Community Analytics traffic tracking (Page Views, Visits, Unique Visitors). (Classic and Aurora) Fixed inflated "Members Online" counts caused by automated traffic. Fixed Community Analytics failing to launch on sites that disable tickets on GET requests. Fixed Topic Posted, Topic Updated, and Topic Deleted analytics events firing twice. Editor & Content Restored fullscreen playback for external videos inserted via Insert Video from the web. Fixed the rich text editor body expanding uncontrollably and blocking posting on some environments. Fixed image captions not displaying for knowledge base authors and readers. Fixed Vimeo embeds showing a [video] placeholder after publishing. Fixed image and custom-width slider issues in the editor. Fixed a moved root Blog post redirecting to a restricted board instead of showing the moved-content placeholder. Fixed the Draft filter on Knowledge Base and Blog dashboards showing published articles. Notifications & Email Fixed missing workflow notification emails for blog articles awaiting review. Fixed subscribers not being notified when a subscribed message was moved to a new topic. Fixed edit notifications not respecting the Notify Followers setting in some cases. Fixed a missing notification-tracking record for a subscribed reply. Fixed inconsistent Notification Feed counts depending on which server served the request. Fixed button alignment not being honored in rendered email HTML. Fixed several bugs in Email Template Management. Made the email Template Card scrollable and preserved its filter selection. Moderation Restored report-board notifications for Content Filter deny events. Fixed private message content-filter notifications not posting to the report board. Fixed a server error after hiding a message from Spam Quarantine. Fixed Moderation Manager reusing a stale Spam reject reason. Restored dismissing the spam and moderation preview modal with Escape or an outside click. API Fixed REST API v2 Search not consistently enforcing result-size limits on expanded data. Fixed REST API v1 metadata pagination duplicating results past a large offset. Fixed the user-creation API response missing the rank field. Fixed the messages API ignoring the "sort by kudos received" option. Fixed predefined labels losing their configured letter case in the API. Fixed anonymous search requests omitting a user's registration date when access was enabled. Fixed missing user profile fields on parent-message-author activity log entries. Fixed the Images API returning a server error when querying a deleted board. Fixed the Images API's upload-time range query omitting valid images. Core Fixes Fixed a server error when following the Article Contributions link after logging in. Fixed abuse reports submitted by anonymous users not being recorded. Fixed Private Messages content being clipped at high browser zoom levels. Fixed server errors on kudos button links on certain pages. Fixed an error when moving an individual Events comment to another Events board. Fixed board sort order not honoring the latest-activity timestamp. Fixed a server error when opening an archived thread with a soft-deleted nested message. Fixed duplicate or inconsistent reply state caused by orphaned data rows. Fixed unanswered-thread auto-escalation stalling behind a single failed topic. Fixed the Top Solution Authors widget rendering empty on the board page. Restored location autocomplete suggestions in event location fields. Fixed the tag cloud size setting not limiting the number of tags shown on posts. Fixed sub-category and date fields not updating correctly. Fixed SSO registration setting visibility and improved its admin configuration. Fixed Product Catalog Sync deleting products that were present in the uploaded file. Fixed a consecutive-login badge not being awarded due to undercounted login streaks. Fixed Q&A structured data pointing the accepted-answer link to the author's profile instead of the answer. Fixed Japanese short-month names rendering incorrectly on some servers. Performance & Stability Fixed a memory leak that could cause periodic Classic server downtime. Fixed a memory leak from deleted boards that caused gradual slowdowns. Fixed a session-handling race condition that caused intermittent server errors. Fixed a backlog of stale video records delaying new video uploads. Fixed a search indexing issue where malformed data could stall indexing. Fixed a homepage error that could occur after moving a threaded reply. Improved tag-cloud widget performance to avoid slow scans. Improved loading performance of the message and topics view. (Classic and Aurora) Improved performance of previous/next image navigation, especially in large galleries. (Classic and Aurora) Fixed a memory leak when processing animated GIF images. (Classic and Aurora) Improved reliability of video integrations when the provider rate-limits requests. (Classic and Aurora) Fixed large GDPR content export downloads timing out. (Classic and Aurora) Aurora Enhancements AI Answer Assist Expert Opt-Out for Answer Requests — Community members identified as experts can now opt out of receiving Answer Request notifications globally or per topic. Admins can remove specific users from the expert pool. The routing algorithm respects opt-out status before selecting experts, gracefully falling back to the next available expert. Simplified Answer Confidence Threshold — Reduced to three plain-language options — Moderate (Recommended), High, and Extreme — with percentage values removed. "Moderate" is now the default for new and unconfigured communities, applied in both the main AI Settings page and the per-board settings modal. Hide Post Relevancy Threshold — The post relevancy threshold input has been removed from the AI Settings UI. It defaults to 50 and can be overridden via config key for communities that need tuning. "Expert Report" Rename — "Experts Leaderboard" is renamed to "Expert Report" throughout the Aurora admin UI. Email Templates Template Version Lifecycle Management — Community managers can now mark templates and individual versions as active or inactive, preventing inactive versions from triggering unintended automation. Clone, rename, and delete versions directly from the template manager. Digest Notification Emails — Digest notification emails are now supported within the Email Templates system with their own default templates and configurable variables. Previously handled outside the template system due to complexity. Reactions Email Template — Communities with the Social Feed enabled now have a dedicated email template for reaction notifications, replacing the legacy Kudos email when Social Feed is active. Includes post byline, title, and styled reaction chips — customizable via a new Reactions content block in the email editor. Communities not using Social Feed see no change to existing Kudos emails. "Post Templates" Rename — "Workflow Templates" has been renamed to "Post Templates" throughout the email templates interface for clarity. AI Moderation Poll AI Moderation — Quick Poll content is now submitted to the AI moderation pipeline. Poll question text, answer options, image alt text, captions, and image URLs are all inspected. Polls are durably requeued for moderation after creation; poll voteability is blocked until creation-time moderation completes. Quick Poll Content Checked by Akismet — For communities using Akismet without AI moderation enabled, Quick Poll content is now submitted to Akismet as part of the poll creation flow. A rejected poll-bearing post keeps the poll non-voteable. Moderation Queue AI Filters — "AI Flagged" and confidence threshold filters in the moderation queue now correctly narrow results. aiVerdict and aiConfidence are now indexed on the message search index. Clarification Questions Clarification Answer Moderation Unified with Standard AI Flow — Clarification question answers are now processed through the same AI moderation pipeline used for regular posts and replies, ensuring consistent pre-moderation, post-moderation, bypass, and moderation-off behavior across all content types. Rejecting a clarification answer hides that answer only; the parent post is unaffected. Others WebP Image Uploads: Upload images in WebP format without the upload being rejected. Bug Fixes Answer Assist Fixed raw HTML markup appearing inside Answer Assist citation snippets shown to members. Fixed extra blank lines appearing in AI-generated answers. Fixed Answer Assist generating duplicate AI replies when a post is edited mid-response. Fixed Answer Assist running on boards not selected in Target Sources, incorrectly surfacing "expert notified" notifications. Fixed filtered-out citations appearing in the citations list. Fixed Answer Assist using citations not present in the current CLM build. Fixed Answer Assist using low-relevance citations in answer generation. Fixed expert suggestions remaining visible after an AI answer succeeded on retry. Fixed missing Answer Assist translations in the enduser app for several locales. Fixed retry failures around Answer Assist reply creation. Fixed ai_auto_reply.metadata_write_enabled defaulting to FALSE; now correctly defaults to TRUE. Fixed Answer Assist not recognizing Khoros Managed Key configuration, resolving "API key is not configured" errors for communities using Khoros-provided keys. Fixed Expert Notification event not firing when an AI answer is generated on a board with a timer delay. Improved reliability of AI answer generation during brief service slowdowns. Clarification Questions Fixed Clarification Questions not generating on boards where only the primary LLM is configured with no fallback. Fixed Clarification answers failing to save when an admin used "Switch Member" to act as another user. Fixed Clarification Review admin pages failing on communities without Lithium Studio enabled. Fixed Clarification classifier mis-parsing LLM output and treating nearly every post as a question. Fixed multiple Clarification defects: board settings accuracy, bulk enable/disable, reminder behaviour, abandonment handling, and lost answer submissions. Fixed Clarification Questions not coordinating with Answer Assist when board answer delay is set to 0. Fixed Clarification Questions surfacing about details already stated in the original post. Fixed Clarification Questions not generating on boards where Answer Assist is disabled but Clarification Questions are independently enabled. Fixed Clarification UI appearing on admin home page; now gated to message pages only. Fixed category-level clarification settings not reflected in board-level display, showing a misleading "disabled" state when settings were inherited from the parent. Fixed CM Guidance Examples allowing duplicate entries with no validation. Fixed clarification state and questions not visible to admins on post detail pages; now accessible directly without navigating to the Clarification Review console. Short clarification answers — yes, no, n/a, or a single number — are now accepted. AI Moderation Fixed moderation status incorrectly showing "AI: Pending" for content on boards where AI moderation is disabled or skipped; now correctly shows "AI: Disabled" or "AI: Skipped". Fixed Spam and Other reject reason options missing from the reject dropdown for replies in threaded view. Hardened AI moderation background sweeper against stuck-row failures. Fixed wrong info message shown when content is rejected as Abuse by a Moderator. Fixed AI moderation global kill switch taking 15–60 seconds to take effect due to missing cache invalidation; now takes effect immediately. Created an extension point for message-attached components to participate in the AI moderation pipeline. Updated AI moderation "under review" banner copy. Fixed AI Settings toggles breaking when configuration failed to load or returned an empty response. Events Fixed registration cancellations in Aurora not syncing to Zoom, leaving registrant counts incorrect. Fixed registrations by partially registered users not being pushed to Zoom. Fixed anonymous users getting an "Error Rendering Component" crash when opening event pages. Fixed Zoom event date and time not being auto-fetched when linking a meeting to a community event. Fixed missing validation for Zoom vs. community event time, type, and meeting ownership mismatches. Email Templates Fixed email template editor showing a success confirmation without actually saving; errors now surface correctly. Fixed not being redirected back to the template list after deleting the last template. Fixed four Digest email editor issues: layout rendering, preview display, variable substitution, and save/publish behaviour. Fixed Undo action incorrectly clearing original text when reverting a block duplication or close action. Fixed unsubscribe URL in email templates not resolving correctly, ensuring opt-out links in community emails function as expected. Fixed the Send Email Orchestrator action firing for triggers not configured to the Immediately cadence. Fixed button alignment issues; added support for placing two buttons on the same line; fixed image alignment discrepancies between edit mode and preview. Orchestrator Fixed rule description having no character limit, causing lag and "Error updating fields" on save. Fixed duplicate condition validation, webhook header banner, THEN blocks warning, cancel confirmation dialog, and HTML rendering in email preview. Polls Fixed adding a poll image to a post incorrectly stripping the main post's featured image on publish. Fixed Polls appearing as questions in the AI Answer Assist log. Designer Fixed icons and user avatars appearing stretched and distorted in Designer → Page Templates device preview mode. SSO & Registration Fixed SSO registration field configuration showing "Private Notes Consent" instead of "Privacy Policy"; field is now hidden when no Privacy Policy is configured. Search Fixed searching for a board by its exact name returning no results. Fixed Manage Content search dropping trailing terms when combining subject text with an author filter. Platform Added quill-resize-image to Aurora allowed dependencies, unblocking image resize capability in the rich text editor. Fixed a page crash on certain pages following a framework upgrade. Fixed navbar theme styling not applying consistently across pages. Fixed the Cancel button showing a raw translation key in a report modal. Fixed the API returning null instead of an empty connection for non-null connection queries. Security Stripped EXIF metadata, including GPS and device information, from image attachments on upload. Fixed an untranslated technical label on the SAML sign-in page. Accessibility Improved keyboard focus visibility on tags in High Contrast mode. Added a visible keyboard-focus indicator in the inline message view (WCAG 2.4.7). Added visible keyboard-focus indicators to the emoji picker toolbar controls. Added a forced-colors (high-contrast) fallback for overlay button styling (WCAG 1.4.11). Added meaningful alt text to the community brand logo based on the community title (WCAG 1.1.1). Added a contextual accessible label to the Solved badge for screen readers. Moderation & Appeals Restored Spam and Other reject reasons for replies in threaded view. Fixed Approve and Reject actions being hidden in the moderation overflow menu. Made the Review Mode toggle state easier to see at a glance. Fixed Review Mode board-override count and selection cascade behavior. Fixed stale reason codes appearing in the abuse-report banner. Fixed the Ban Member action appearing for users who are already banned. Added full citation details to Admin Review Mode. Fixed the appeal decision button being hidden from non-admin message authors. Hid the "Appeal Again" button once a user reaches the appeal limit. Hid an AI-only appeals setting when AI moderation is disabled. Fixed the Appeals tab crashing on refresh and a redirect issue. Fixed the Appeals tab label not being translated in the account menu. Changed the "In Review" Banner so it will not longer display with "selective moderation" and will only show when you have the "Required" moderation style enabled. Search Fixed a crash when paging through more board search results. Fixed searching for a board by its exact name returning no results. Fixed "Newest" search sorting by last-edited date instead of original post date. Fixed a potential crash in search-term handling. Analytics & Metrics Fixed indefinite loading on the Active Users and Members Traffic detail modals. Fixed the DAU/MAU Ratio detail modal flickering against its previous-period value. Renamed Metrics Explorer's "Group Hub" label to "Group". Renamed the Compare modal's "Select All" option to reflect its 10-metric limit. Clarified that the "Survey Helpful Yes Then" metric reports a count. Included categories and group hubs in the Analytics dashboard place-picker search. Fixed the analytics popup not closing after a request-to-join action. Re-enabled Aurora survey analytics events. Added view tracking for the split-view inline reading pane. Fixed missing Aurora node links in the CIC API for non-board nodes. Editor & Content Fixed extra empty paragraphs appearing when pasting plain text into the editor. Fixed Source View corrupting code blocks containing angle brackets or here-doc syntax. Restored the anchor-link icon on Blog and Knowledge Base article headings. Enabled the image-resize plugin in the rich text editor for Aurora. Prevented saving a knowledge base article before attachments finish uploading. Fixed draft Knowledge Base articles losing tags when custom fields were edited. Unified the edit and preview canvas for a more consistent editing experience. Email & Notifications Fixed several issues in the digest email editor. (Classic and Aurora) Required a fallback message before saving or publishing a digest email. (Classic and Aurora) Fixed a broken destination after deleting the last version of an email template. (Classic and Aurora) Routed the unsubscribe link through notification settings and removed the external-URL option. (Classic and Aurora) Migrated digest emails onto the email template system. Preserved entered text when undoing a duplicate or close in the email template editor. Surfaced an error instead of a false success when saving an email template with an empty subject. Fixed the Send Email action firing for triggers not set to the Immediately cadence. Renamed the "Workflow" email-template category to "Post". Fixed the notification bell not updating on Recent Posts. Fixed broken reply links in plain-text subscription emails when the title contains a curly apostrophe. Registration & SSO Fixed Group Hub email invites failing for new SSO users mid-registration. Fixed the Register control intermittently showing the local sign-up form instead of external SSO. Made SSO-managed name fields read-only instead of hidden and excluded them from submission. Fixed the password-reset page failing when anonymous API access is disabled. Gated the SSO Private Notes Consent field on the Direct Message consent setting. Polls Fixed adding a poll image removing the main post's image on publish. Fixed additional poll bugs and removed the sign-in requirement to vote. API Fixed REST v2 API queries selecting the same field at multiple nesting levels. Fixed the API returning null instead of an empty result for non-null connection queries. Fixed the API returning null for a valid user's private statistics. Fixed the user API role-exclusion filter returning users it should exclude. Core Fixes Fixed an error when moving a reply to a different board. Fixed signed-in users getting an error page when browsing tag pages. Fixed signed-out users landing on a broken create-content page across boards. Fixed a page crash affecting some pages after a framework upgrade. Fixed the Page Builder editor crashing when selecting a custom Text/HTML widget. Fixed a crash when an optimistically-rendered reply has no moderation data yet. (Classic and Aurora) Fixed a crash when hovering over an anonymous blog author's profile link. Fixed a server error that broke Featured Content and Related Content widgets. Fixed the Inbox stopping after about 45 conversations. Fixed the "Show More" link on Idea boards not loading additional results. Fixed the @-mention suggestion dropdown closing itself in the reply editor. Fixed the @-mention autosuggest not appearing on Android mobile browsers. Fixed Related Content links not following external redirects when clicked in-app. Fixed hidden-board content still appearing on an author's public profile and activity pages. Fixed the Cancel button showing a raw translation key in a report modal. Fixed a duplicated reaction tooltip and added one-click liking. Fixed navbar theme styling not applying consistently. Fixed several issues in the cross-board posting destination picker. Fixed a cross-board call-to-action, a reaction label, and a bulk-unfollow refresh issue. Fixed the image picker in My Stuff replies and a stale-reply refresh issue. Added inline validation to block duplicate configuration examples. Completed the Occasions-to-Events and TKB-to-Knowledge Base terminology rename. Persisted custom survey question and answer wording through text-override settings. Made survey submission atomic and per-user on the server side. Improved cache reliability under heavy load, reducing intermittent errors. Improved spam processing reliability by preventing a retry backlog buildup. Fixed an Aurora SDK dependency conflict blocking clean installs. Pre-Prod Rollout: August 3-4. Testing window open from August 4 through August 16. Production Rollout: August 18-19.979ViewsSign in to react to this post8Comments
One year in, straight from us.
It has been a year since IgniteTech acquired Khoros, and I want to talk to you directly. There has been a lot of secondhand talk going around, none of it coming from us, and most of it from people who stand to gain from the telling. Enough of that. If you want to know something about Khoros, come to Khoros. Ask us. We will give it to you straight. Here is where we are. We did not buy Khoros to dress it up and sell it. That is the private equity playbook, and it is not ours. We are privately held, we keep what we acquire, and we run it for the decades, not the quarter. Khoros was losing millions. We made it profitable so it would not go dark. That took painful decisions, and I know some of them affected you. I am not going to gloss over that. It is also why Khoros is still here, on solid ground and able to invest in what comes next. And we have invested. We rebuilt the platform and shipped two AI-native products in under a year. Aurora AI reimagines community for the AI-answer-engine era and closes roughly 30% of community questions that never get a good answer. The brand-new Iris® AI replaces Care and Social Media Management, two products that ran separately for 15 years and never fully integrated. It brings social engagement and brand care into one platform, with publishing, moderating, engaging and analyzing all in one place. No other company offers enterprise community alongside enterprise social and brand care, and large enterprises are switching to us because of it. Everyone else still makes you choose. We have been the gold standard in customer community since Lithium (Khoros’ predecessor) pioneered the category in 2001, and then built the bridge to social when Lithium and Spredfast became one company, because community and social were never meant to live apart. That foundation has powered more than 4,000 community deployments since 2001 and draws 1.8 billion site visits a year. This first year post-acquisition was about putting the house in order. This next stretch is about innovation, building on the platform you count on. We are strengthening the online infrastructure and improving uptime, with faster, sharper incident response when something does go wrong. When we fix something now, we fix the cause, not the symptom. As part of that investment, we are turning on Community Guard for you, free for the next 60 days. It is a new protective layer for an internet that is not just people anymore. Communities like yours get crawled, scraped and hit by bots and automated agents that distort your analytics, consume capacity and put avoidable pressure on the experience. Community Guard catches that traffic before it reaches your community, while keeping the door open for real users and the discovery channels you actually want. The result is a cleaner, steadier community with real protection against bot abuse and traffic spikes. We are turning it on now because it is the right thing to do for our customers. Here is what all of this means: Stronger reliability and faster incident response as we harden the platform. Community Guard will be enabled and free for the next 60 days, screening bots and automated traffic before it reaches your community. Free migration from Community Classic to Aurora AI through the end of 2026. We are as visible as ever in this market, on our own terms. We have redeployed our presence to where our customers actually are, the independent events and conversations that are open to everyone. We were a key sponsor of Toronto Community Week 2025 and London Community Week 2025, and this year we are the headline sponsor of London Community Week 2026, which takes place July 7-9 in London, UK. Come find our product/engineering and commercial teams there as we lay out the real future of Khoros. The full story of the turnaround is at khoros.ai/transformation, and if you want to see Aurora AI, Iris AI or Community Guard in action, let us know and we’ll set it up. Year one was the save. Year two is what we saved it for. Eric Vaughan, Chief Executive Officer P.S. If anything you have heard about Khoros does not match this post, that is exactly my point. For the real story you can make proper investment decisions on, just ask us.485ViewsSign in to react to this post0CommentsKhoros Communities CDN Change Notice
Hello everyone, As part of our ongoing work to improve the performance and stability of Khoros Communities, we'll be migrating our CDN over the next few weeks (exact day/time will be added as Scheduled Maintenance on status.khoros.com). Your community will not be affected The transition is seamless. Your community will remain available throughout the migration process. No action is required on your side. A note on SSL certificates If your community is currently with an AWS-issued certificate, your SSL certificate will change to one issued by Let's Encrypt as part of this migration. This is expected behavior and does not require any configuration changes from your team. Both are publicly trusted CAs, so end users won't see any difference in their user experience. If your community is served through a different provider, the SSL certificate change will not apply to you. Questions? If you have any questions or concerns, please reach out to your customer representative.124ViewsSign in to react to this post0CommentsKhoros Communities 26.3 Release Notes
26.3 helps make your community a place members return to. Managers can create branded email templates tied to Orchestrator for end-to-end outreach, while Polls and Clarification Questions improve engagement and answer quality. AI Moderation is more reliable at scale. The release also adds Metric Explorer, plus search upgrades and Zoom event registration. New Features (Aurora - Early Access) Availability: All features in early access are behind feature flags and must be manually enabled by contacting your Customer Success Manager. They are fully configurable from the admin panel once enabled. You may enable select Early Access products. Note: Classic users can migrate to Aurora at no cost in 2026. Contact your CSM for details. Customizable Email Templates Email communications from your community - registration confirmations, notification digests, workflow alerts - have historically required developer involvement to customize. Branding changes, copy updates, or new email types meant filing tickets and waiting. Community managers had no self-service control over one of the most direct channels for bringing members back. What you can do now: Create and manage branded, customizable email templates directly from the admin panel. With full control over content, layout, and branding, no developer dependencies required. Template creation & management Self-service editor for creating and customizing email templates with branding, custom content, and layout control. Organize templates with categories and search for easy management at scale. Customize emails across community communications - including registration, notifications, and workflow-triggered emails. Orchestrator integration Created templates can be accessed directly in Orchestrator automation rules — when a trigger fires (such as User Registers, Solution Accepted, Topic Posted, or Role Granted), the Orchestrator sends your branded template automatically. Visual compatibility indicators show which templates work with which triggers, with placeholder validation against available data. Enablement: All existing community emails continue to function without any changes. To adopt the new system, the Khoros team runs a migration script that generates your templates. You review and sign off on the migrated templates, and only after your approval does the Khoros team activate the new flow. Contact your CSM to begin the process. Proactive Clarification Questions for Answer Assist Helps members get better, faster answers by guiding them to provide the right context upfront without adding friction to the posting experience. Post-publish flow: Posts publish as per the moderation settings. For question-type posts, the system surfaces AI-generated clarification questions in a slide-in panel (desktop) or bottom sheet (mobile). CM-guided generation: Community managers provide example clarification questions to guide the AI. The system then generates both the questions and suggested answer options dynamically, informed by post content and community knowledge. Configurable and optional: Admins set the maximum number of questions per board (default 3, max 6). All questions are optional. Members can answer any, all, or none, and skip the entire step while posting the question. Polls Enable members to share opinions and surface community sentiment through lightweight, interactive polls - giving community managers structured insight into what members think and need. Creation: Create text or image-based polls directly from the message editor on Forum, Blog, and Group boards. It supports 2–8 options and durations from 1 hour to 1 month. Image polls: Support for image-based options with responsive grid layout, alt text, and lightbox preview, ideal for visual preference assessment on design concepts, product options, or community decisions. One-click voting: Real-time result updates with percentage breakdowns and social proof. Configurable for single-vote or multi-vote, with optional vote-change support. Results visibility controls: Set results to public, participants + creator only, or creator-only with configurable exposure timing (after voting, live, or after poll closes). Admin controls: Board-level enable/disable, configurable limits (duration, options, characters), minimum rank and account age gating for poll creators, and standard moderation pipeline integration. Notifications & analytics: Poll-closed email notifications to creators and voters. Per-poll CSV export and community-wide aggregate statistics available from the admin panel. Voting history visible on member profiles. Metric Explorer A new dedicated analytics experience for deeper, more flexible analysis of community metrics. Metric Explorer lets you select any supported metric and slice it by multiple dimensions such as board, content type, role, or time period with comparative views that show trends side-by-side. Key capabilities include: Slice-and-dice: Break down any metric by dimensions like board, content type, user role, language, and custom date ranges. Comparative analysis: Compare metrics across time periods, boards, or segments to identify trends and performance shifts. Extended date ranges: Metric Explorer supports date ranges beyond 90 days up to one full year with interval-based charting. For example, DAU/MAU now displays as a full time-series chart in Metric Explorer (rather than the single aggregate value shown on the main dashboard). Full metric catalog: A comprehensive guide to all available metrics, their definitions, supported dimensions, and slice-and-dice options will be published alongside this release (see Guides section below). Search Analytics dashboard: New analytics dashboard providing visibility into search performance including search volume, success rates, top search terms, zero-result queries, filter usage, and board-level search metrics with drill-down and time period selection. Expert Report Expert Scoring & Top Experts List: Discover and filter top experts per topic with a ranked list (configurable up to top 10 per topic). Filter by topic category or staff/community role, with CSV export. AI profiles are automatically excluded. Enhancements (Aurora) Search Multi-select filters: Members can now select multiple values in Content Type, Author, and other filter categories to create targeted search queries. Admins can enable this via the Features tab. For multi-tag filtering, admins can choose between AND/OR filtering; for Content Type and Author, OR filtering is applied. Author Search: Search by community member name to surface all posts and replies created by that user, enabling quick content discovery and contributor insights. AI Platform Auto-exclude banned users from expert recommendations: Permanently banned, temporarily suspended, and deactivated users are automatically filtered from the expert recommendation pipeline before expert cards are displayed or notifications are sent. Expert and clarification events for Orchestrator: Expert identification events and clarification question nudge events are now published to the Orchestrator, enabling custom workflows, such as routing expert invitations through branded email templates or automating follow-up when members haven't completed clarification questions. Prioritized Knowledge Base and Blog sources in AI answers: Answer Assist now prioritizes KB articles and blog posts over forum replies when generating cited answers, improving answer authority and accuracy. Configurable citations card title: Community admins can customize the "Citations" heading on AI answer cards to match their brand (e.g., "Sources," "References," "Learn More") from AI Settings. Configurable multi-modal vision models: Admins can configure multi-modal vision models for AI image analysis directly from the AI Settings page, now fully integrated into the AI moderation pipeline. Khoros Managed Key support for AI Moderation: Communities can now enable AI Moderation using Khoros-provided API keys instead of bringing their own LLM service credentials, simplifying onboarding and reducing setup overhead. The AI Settings UI hides model selection and API key fields when Khoros Managed Keys are in use. Analytics Extended date ranges for key dashboard metrics: The main Analytics dashboard now supports date ranges greater than 90 days (up to one year) for New vs. Returning Members and New vs. Returning Anonymous Users previously limited to 90 days. Survey Bulk API: Survey response data is now available in the Bulk Data API v3 for Aurora, enabling historical NPS and ROI measurement with backfill of existing survey data. Events & Authentication Zoom event registration integration: When members RSVP to events in the community, registration data (name, email, title, company, phone) is automatically pushed to Zoom's registrant list via API. Community managers link events to Zoom webinar IDs. Data then flows through to Salesforce via customers' existing Zoom–Salesforce integrations. Setup: An admin must complete the Zoom OAuth authorization in the admin panel to enable the data flow. Mandatory SSO registration completion: SSO registration can now be configured to require completing registration fields and accepting terms and conditions before account activation. Previously, SSO sign-up could bypass these steps. Setup: An admin must enable this setting in the SSO configuration panel. Platform UTF-8 BOM for CSV exports: Analytics CSV exports now include a UTF-8 BOM header, resolving display issues with non-English characters when opening files directly in Microsoft Excel. Pendo integration removal: Removed all Pendo tracking code from Aurora and Classic platforms. In-product admin guides previously powered by Pendo are no longer available. This change has no impact on community member experience or community functionality. Naming updates: "Community Automations" has been renamed to "Orchestrator" throughout the admin interface, and all UI references to the AI answer feature now consistently use "Answer Assist." AI Moderation Improvements (Aurora) This release delivers a significant round of improvements to the AI Moderation and Appeals systems introduced in 26.2 giving admins more control, improving moderation reliability, and making the appeals experience smoother for members. Greater Admin Control Global kill switch: A new master toggle on the AI Settings page instantly disables AI moderation across all boards, regardless of board-level settings. Re-enabling restores your existing per-board configuration automatically. Clearer confidence threshold settings: Replaced the confidence threshold slider with a dropdown control at the community level for easier, more precise configuration. Transparent bypass permissions: Added disclaimers to permission descriptions that implicitly bypass AI moderation, so admins can clearly see which roles skip the moderation pipeline. More Reliable Moderation Decisions Board-level settings honored: Resolved multiple issues where AI moderation was triggered on boards with the toggle disabled, posts were incorrectly auto-approved or auto-rejected, and community-level settings unintentionally overrode board-level configuration. Deny-default forums: Fixed AI moderation not triggering for users with role-based visibility permissions on forums using deny-default access. Multi-image posts: Posts with multiple images are now moderated reliably through chunked processing, preventing failures on image-heavy content. Improved Appeals Experience Appeals for human-moderated posts: Members can now appeal posts rejected by human moderators not just AI-moderated rejections. Correct appeal reason display: Moderation audit and member-facing panels now correctly display appeal reason codes and descriptions. User-friendly error messages: Appeal submission errors now show clear, actionable messages instead of generic error text. Admin UX Fixes Community guidelines editor: The guidelines editor now displays a character limit indicator and enforces a maximum length, resolving lag and "Failed to save" errors with very large text. Also fixed text area resize issues and empty submission validation. "Hide from View": Fixed the button showing a success message but not actually removing moderated posts from the list. Manage Content ellipsis menu: Fixed the overflow menu disappearing on hover and remaining in an active state after selecting an option. Bug Fixes Aurora Post approval badges now auto-dismiss after a few seconds instead of persisting indefinitely; badge labels are standardized across Forums, Blogs, and Knowledge Base articles, and misleading "Approved" indicators on already-published content have been suppressed. Fixed navigation links being overwritten instead of appended when more than 10 links were added to the community header. Fixed Group Hub membership UI not properly displaying or managing membership actions. Fixed thread widget crashing when moderators clicked Approve or Reject directly within the thread view. Fixed topic tags briefly appearing and then disappearing after page load. Fixed avatar images displaying at incorrect resolutions due to size variants colliding in the cache. Fixed Contributions widget on user profiles always defaulting to Newest Topics regardless of the configured default. Fixed board sort preference not persisting across page loads for anonymous and SSO-authenticated users. Fixed moderation status banner not rendering on the message page. Fixed user profile page crashing when registration data was missing for certain users. Fixed viewport scroll jumping unexpectedly after saving image ALT text. Fixed infinite reload loop after creating a blog post. Fixed search results infinite scroll stalling after the first 20 results. Fixed brief "No Replies" empty state flash appearing while replies were still loading after the 26.1 upgrade. Fixed search input becoming invisible after browser Back navigation while the dropdown remained visible. Fixed label links on search results pages not responding to clicks when the label filter widget was absent. Fixed survey text override in the admin Q&A modal showing a misleading "admin app does not allow customizations" error. Fixed Answer Assist search failing for communities using Khoros-managed API keys. Fixed Answer Assist not generating responses for posts created by users with bypass-moderation permissions. Fixed Display Name field in Answer Assist settings not updating in the UI after saving. Fixed GraphQL Follows API targetId filter returning follows for all boards instead of only the specified target. Fixed React hydration errors on the Manage Content tabs. Fixed Template Card not supporting scrolling, and filter selections resetting on navigation. Fixed sub-category and date selections reverting to previous values after saving. Fixed canonical URLs on profile and label-filtered forum pages including query parameters, causing search engines to index parameterized variations as separate pages. Fixed appeals UI disappearing from the moderation interface after deployments. Added GraphQL alias count limit to prevent resource amplification attacks via excessive query aliases. Added authorization check to the RSVP delete mutation to prevent unauthorized record deletion. Added missing authorization checks to GraphQL customization mutations. Replaced semantically incorrect aside spacer with a div in the message view card to comply with WCAG 1.3.1. Fixed tag focus indicator contrast ratio to meet WCAG 1.4.11 requirements. Added underline decoration to user profile links in the message view byline to comply with WCAG 1.4.1. Classic Fixed MESSAGE_TYPE field returning null in some GraphQL responses. Fixed rank field missing from REST API v1/v2 responses for newly created users. Fixed tag cloud widget ignoring its configured maximum tag count setting. Fixed private message content filter notifications not posting to the report board. Fixed full-page Products and Places search failing to match partial terms within compound names containing separators. Fixed archive totalCount returning the page-local size instead of the actual total number of archived items. Fixed label validation being skipped when the label.labels parameter was omitted from requests. Fixed REST API search queries triggering live rank recalculation, which sent unintended mass email notifications to users whose ranks changed. Fixed orphaned message-level float records remaining after a thread's global float was removed, leaving threads pinned at the board level. Changed RSVP email calendar invite method from REQUEST to PUBLISH to prevent non-functional Accept/Decline prompts in email clients. Increased board ID maximum length from 40 to 255 characters. Fixed NullPointerException in the video gallery component on pages accessed without a user context. Fixed quilt flattener producing duplicate components when class names changed between versions. Fixed Elasticsearch bookmark race condition during rolling upgrades that triggered unnecessary full index backfills. Fixed Idea Exchange search defaulting to the parent category scope instead of the current board. Fixed Redis connection pool not rebuilding automatically after connection failures. Fixed inbox infinite scroll stalling after 30 conversations. Fixed REST API ban operation failing for admin users who had never logged in through the UI. Fixed attachment Show More button not functioning in draft preview mode. Fixed Elasticsearch full refill operations exiting prematurely after the first chunk. Fixed NullPointerException when viewing abuse reports for deleted private messages. Fixed clipboard image paste creating a placeholder but never uploading the image in the V2 editor. Fixed file descriptor leak when journal entry write operations failed. Fixed list-style-type formatting being stripped from nested lists during content sanitization, which caused extra list items to appear after saving posts with multi-level indentation. Fixed emoji picker panel closing immediately when opened on mobile devices. Fixed Grammarly extension blocking the TinyMCE editor resize controls. Fixed hard-coded English labels in the Private Notes threaded view options menu. Added figure and figcaption elements to the server-side HTML whitelist so image captions are preserved after saving. Fixed GNU tar attachments being silently dropped due to MIME type mismatch. Fixed multiple rapid attachment uploads silently dropping files; pending uploads are now queued and processed sequentially. Added lowercase route alias for the Critical CSS callback endpoint to handle CDN providers that send lowercased URLs. Fixed tags disappearing when editing custom fields on TKB draft articles. Added a maximum retry limit for Akismet spam processing failures to prevent unbounded queue growth during service disruptions. Fixed object tag previews not rendering in the TinyMCE rich text editor. Fixed Members Online count fluctuating erratically across page loads. Fixed PageOutOfRangeException when navigating to certain blog comment permalinks. Fixed scheduled member reports missing columns when exports exceeded 2,000 lines. Fixed Traditional Chinese (zh-TW) and Simplified Chinese (zh-CN) translation files being swapped, causing the wrong script variant to display. Fixed expensive MySQL COUNT query causing CPU spikes on the message view threads table. Fixed orphaned cover images remaining after moving a blog post to a non-blog board. Fixed registration form being misidentified as a login form by password managers, causing autofill of existing credentials instead of new credential generation. Fixed case-sensitive query parameter lookup causing guide URLs to redirect to the wrong KB article. Fixed approved posts reappearing in the moderation queue after being processed. Fixed anonymous user access check blocking authenticated users from looking up their own profile data through the API. Fixed application failures during startup caused by Flow app initialization errors. Fixed persistent stored cross-site scripting (XSS) vulnerability via HTML sanitizer bypass. Fixed server-side request forgery (SSRF) vulnerability in the Classic REST image upload endpoint via the upload_url parameter. Enforced REST v2 Users API access controls so personally identifiable fields are no longer exposed to unauthorized callers. Added per-field access control to prevent anonymous PII exposure in user profile API responses. Fixed personal information exports leaking settings-scoped custom content values that should not have been part of user data. Pre-Prod Rollout: May 12-13. Testing window open from May 14 through May 25. Production Rollout: May 27-28 The rollout will follow the standard maintenance windows.789ViewsSign in to react to this post0CommentsKhoros Communities 26.2 Release Notes [Updated]
The 26.2 release introduces Aurora AI capabilities for content moderation, automated responses, and workflow orchestration. It also addresses critical security vulnerabilities, delivers search and rich text editor improvements, and resolves stability issues across analytics and content archival. New Features (Aurora — Early Access) Availability: All three features below are in early access behind feature flags — nothing activates automatically. Fully configurable from the admin panel. Contact your Customer Success Manager to enable. Classic customers should reach out to their CSM to discuss migration. AI Moderation + Appeals Automates content moderation decisions based on your community guidelines, configured in plain language. Auto-approve and auto-block: Clear-cut content is handled instantly, reducing manual review volume. Gray-area escalation: Ambiguous content is held for human review rather than auto-actioned. Member appeals: Members can submit structured appeals against moderation decisions, preserving trust without adding moderator workload. Community Language Model (CLM) / Answer Assist Provides AI-generated responses to unanswered community posts after a configurable time threshold has been reached. Community-first response window: You define how long to wait before Answer Assist activates, giving members the first opportunity to respond. Source attribution: Every AI-generated answer cites the specific authors and posts it drew from, keeping community experts visible. Community Orchestrator A rules-based automation engine that triggers actions on community events such as new registrations, first posts, and milestone achievements. Automated workflows: Configure welcome sequences, expert notifications, milestone recognition, and onboarding prompts. Event-driven execution: Actions fire automatically when defined conditions are met — set up once, runs continuously. Bugs & Security Fixes Classic Fixed search autocomplete not returning results when queries contain special characters like trademark symbols or apostrophes. Fixed cursor jumping to the top of the article when applying formatting in Firefox. Fixed message position count displaying incorrectly after submitting inline replies. Fixed missing publish events in bulk data exports for republished content. Fixed Members Online count showing inflated numbers by excluding partially registered users. Fixed search results not sorting correctly by view count. Fixed video sitemap XML validation errors affecting video SEO indexing. Fixed usernames with certain Unicode characters causing registration failures and blank display names. Fixed attachments remaining visible in the editor after sending private message replies. Fixed "Show older messages" causing page reload when clicked after switching threads. Fixed rank-up notifications not being delivered via email or private message. Fixed abuse reports failing when member email addresses could not be resolved. Fixed Admin Metrics date filter returning results outside the selected range. Fixed content archival jobs getting permanently blocked when a single job encounters an error. Fixed private messages with certain HTML content showing a misleading "character limit reached" error. Fixed document viewer description to accurately reflect supported preview formats. Fixed search box losing focus while typing, particularly with mobile keyboards or Chinese IME input. Fixed external videos (Brightcove) failing with misleading "private video" error when the video provider returned an empty title. Fixed content archival API returning success but silently failing to archive. Fixed search bar defaulting to user search instead of content search on Hermes-themed communities. Fixed product search API returning duplicate or missing results with cursor pagination. Fixed @mention text inside code samples being dropped when entering edit mode. Fixed notification feed showing empty state during backend timeouts instead of a descriptive error. Fixed images pasted into the editor not uploading. Fixed "PM the Author" button opening an empty window in moderation tools. Fixed Top Solutions Authors leaderboard showing no users for time-range tabs. Fixed Promoted Search results not appearing in autocomplete dropdown after 26.1 upgrade. Fixed session token identifiers being exposed in HTML page source and error pages. Fixed stored cross-site scripting (XSS) vulnerability in user profile social link fields. Fixed unauthenticated access permissions to the individual user API endpoint. Aurora Fixed search autocomplete not returning results for queries containing special characters. Fixed @mention autocomplete not triggering when typing @ on Android mobile devices. Fixed pagination links from Linear display mode failing when viewed in Threaded display mode. Fixed auto-hyperlink conversion inconsistently applied when pasting URLs and pressing Enter quickly. Fixed auto-title feature incorrectly formatting hyperlinks when URL was followed by punctuation. Fixed attachment validation errors not being properly surfaced when the virus scanner rejected files. Fixed Group Hub members with the correct role being denied access to the Manage Members page. Fixed "Newest" sort on search and tag results using edit date instead of original post date. Fixed TKB article publishing history not recording state changes after loading autosaved drafts. Fixed Community Experience Survey CSV exports producing malformed files when responses contain special characters. Fixed JavaScript error when clicking "Add a tag" on boards where a previously muted node was deleted. Fixed Add Co-Author overlay not reopening after being dismissed in Blog boards. Fixed Analytics reports stalling or failing for multi-day date ranges. Fixed custom fields for categories and forums not appearing in the Admin UI settings panel. Fixed deletion of Idea status failing when reply messages had associated status entries. Fixed TAR file attachments being silently removed after publishing. Fixed application crashes caused by certain HTTP header configurations. Fixed internal server requests being incorrectly counted in API billing metrics. Fixed category permissions page failing to load in Admin UI. Fixed Blog, TKB, and Ideas article body expanding to full page width instead of the intended column width. Fixed the Ideas board becoming unresponsive when the Featured Statuses widget was present. Fixed tag search filter returning no results after 26.1 upgrade. Fixed bulk archive search failing to create jobs. Pre-Prod Rollout: March 17-18. Testing window open from March 18 through March 31. Production Rollout: April 1-2 >> April 8-9 [**Updated Release Dates] The rollout will follow the standard maintenance windows2.3KViewsSign in to react to this post23CommentsKhoros Communities 26.1 Release Notes [Prod Release Date Updated]
The Khoros Communities 26.1 release delivers critical security patches including RCE vulnerability remediation, extensive accessibility improvements for mobile screen readers, and stability fixes across moderation workflows, content management, and API functionality. Classic Fixed badges being awarded before posts were approved on pre-moderated boards. Fixed anchor links within posts failing to scroll to their target sections. Fixed quoting posts with code samples throwing errors for users with Simple HTML permissions. Fixed top contributors widget displaying users in incorrect order. Fixed Table of Contents button not appearing in blog article editor when enabled. Fixed search autocomplete retaining incorrect selection when cursor moved away quickly. Fixed Accept Solution option missing from Group posts. Fixed solutions leaderboard showing fewer users than configured when role filters were applied. Fixed external video embeds from Brightcove and other providers failing to render. Fixed Vimeo embeds with longer video IDs disappearing after publishing. Fixed "Show older messages" in Private Messages causing page refresh on repeated clicks. Fixed ban edit popup displaying empty for deleted users. Fixed product and tag autocomplete failing with special characters like "/" and "_". Fixed GroupHub subscription status displaying incorrectly after page reload. Fixed admin metrics date range filter returning results outside specified dates. Fixed orphaned HTML appearing in posts when mentioned users were deleted. Added support for .f3z file attachments. Fixed Hi-Labels validation incorrectly triggering when editing attachments or comments. Fixed role filter in Community Analytics throwing errors. Fixed TKB and Blog workflow notification emails not being sent when spam filtering was triggered. Fixed archive search filter counts showing zero despite archived content existing. Fixed user search filter state lost after browser back navigation. Fixed Safari on macOS intermittent failures with sort filters and post actions. Fixed email validation not being enforced during registration, allowing accounts without email addresses. Fixed notifications not being delivered for posts on pre-moderated forums after approval. Fixed Private Messages failing to load for users with certain message history patterns. Changed PDF attachments to use native browser viewer instead of third-party preview. Implemented clipboard content sanitization in rich text editor to prevent XSS attacks. Added accessibility improvements including: visible focus indicators on message links; tooltip text visibility at 200% zoom; proper ARIA attributes for image and video upload modals; keyboard controls for Brightcove video timeline; and corrected form field descriptions for screen readers. Aurora Fixed required custom fields not displaying in Add User form, preventing member creation. Fixed group names exceeding 40 characters failing silently instead of showing error messages. Fixed event calendar invite links navigating to incorrect page format. Fixed lock icon not displaying on ideas with commenting disabled. Fixed content formatting errors for users with Simple HTML permissions when applying alignment to lists. Fixed user timezone reverting to default after SSO login. Fixed unsupported tag warning not appearing when moving posts with newly added tags. Fixed moderators not receiving email notifications for content on moderated boards. Fixed moderator Reject menu immediately closing on Windows with display scaling above 100%. Fixed custom endpoints returning 404 errors after deployments. Fixed "Show more" button in Ideas widget failing to load additional results. Fixed Q&A structured data not rendering for search engine crawlers, affecting SEO. Fixed anchor links failing to scroll when target section was below the link. Fixed lock indicator not displaying on threads with zero comments. Fixed Knowledge Base and Ideas pages not respecting 100% page width setting. Fixed images uploaded to landing page widgets displaying as broken. Fixed Private Messages inbox failing to load for certain users. Fixed SSO logout not ending session at Identity Provider, causing automatic re-login. Fixed "Show More" button replacing visible replies instead of adding more at certain depth levels. Fixed all file attachments returning 404 errors in certain timezone configurations. Fixed user search returning empty results for certain username formats. Fixed custom pages returning 404 errors after component deployments. Fixed SDK Preview mode causing infinite page refresh loop. Fixed GraphQL Admin operations failing in custom endpoints for authenticated users. Fixed plugin build failures due to ESLint resolver incompatibility. Updated event calendar invites to use community mailer address instead of organizer email to protect privacy. Updated Next.js to address critical remote code execution vulnerabilities. Implemented validation for image URL uploads to prevent server-side request forgery attacks. Added react-markdown as allowed dependency for custom component development. Added comprehensive accessibility improvements including: swipe accessibility for tag menus, username filters, and author comboboxes on mobile; proper expanded/collapsed state announcements for all menus and navigation elements; descriptive button labels for message actions, replies, and status controls; proper tab selection announcements; content reflow after device orientation change; and hamburger menu labels reflecting current state. **UPDATE: We identified an issue affecting search functionality in this release. A fix has been applied to all stage environments. The production upgrade has been moved from February 13 to February 19, 2026 to allow us more time to thoroughly validate the fix and ensure the stability of the search functionality before promoting to production. Pre-Prod Rollout: January 28-29. Testing window open from Jan 29 through Feb 19. Production Rollout: February 13-14 February 19-20 **UPDATED DATE** The rollout will follow the standard maintenance windows3KViewsSign in to react to this post20CommentsKhoros Communities 25.12 Release Notes
The Khoros Communities 25.12 release delivers extensive accessibility improvements across both Classic and Aurora platforms, critical security fixes, significant search and analytics enhancements, and numerous stability improvements for content management, rich text editing, and API functionality. Classic Applied input sanitization for survey form submissions to ensure data integrity and security. Fixed slide-out navigation menu accessibility violations including improper button element nesting and focus management issues affecting screen readers. Fixed spoiler tags scrolling to page top instead of expanding content on first visit due to script loading latency. Fixed Q&A structured data linking accepted answer URLs to author profiles instead of actual solution posts, improving SEO accuracy. Fixed LiQL query operator "!=" to correctly apply multiple exclusion conditions, allowing users to exclude multiple nodes in a single query. Fixed code snippet syntax highlighting disappearing when editing posts containing li-code elements. Fixed post counter incorrectly decreasing when deleting product idea status updates. Enhanced V2 API error messages to specify which field and content caused validation failures, providing actionable feedback to API consumers. Fixed post approval failures in moderation manager showing false success messages when approving spam in archived threads. Fixed kudos leaderboard displaying empty slots when deleted users were included in rankings. Fixed API errors when querying subscriptions for label objects. Enabled text key scoping for TKB template selection page to support template-specific customization. Fixed API errors when retrieving posts containing malformed CSS classes in HTML content. Optimized settings editor to reduce search reindex latency from 20-90 seconds to under 3 seconds when updating large custom settings. Added comprehensive accessibility improvements including: proper combobox roles for all search and autocomplete fields; ARIA expanded/collapsed states for image upload controls; corrected button roles for file upload and avatar controls; keyboard focus management in settings tabs; screen reader announcements for file upload status messages; and notification settings sections defined as proper headings for navigation. Aurora Fixed critical authorization vulnerability in GraphQL endpoints to properly enforce permission checks for privileged operations. Implemented multi-select functionality for idea status filter in ideas widget, providing filtering parity with Classic Community. Implemented SEO improvements for tag pages including lowercase URLs, updated robots meta tags, and dynamic meta descriptions. Enabled notifications and email alerts for followed tags, resolving "No activity yet" displays despite active content. Fixed image lightbox not opening when clicking images in post replies. Fixed spotlight search bar disappearing for anonymous users when typing specific search terms. Fixed date calculations showing incorrect year values in user profiles due to improper rounding of negative numbers. Updated tooltip text from deprecated "Kudos received" to "Likes received" throughout Aurora. Fixed cookie banner reappearing on page refresh despite user accepting or declining consent. Fixed pixelated thumbnail image display across community pages on high-DPI displays. Fixed date preference not applying to profile page elements when set to absolute format. Fixed internal links not opening in new window when using Cmd-click on Mac or Ctrl-click on Windows. Fixed ZIP file attachment failures on Windows systems due to MIME type mismatch. Fixed GraphQL ancestorId constraint returning zero results for boards queries. Fixed timestamp mouseover displaying incorrect timezone after user login/logout cycles. Fixed idea status updates displaying status ID instead of custom status name in user profiles. Enabled bold formatting for hyperlinked text in rich text editor regardless of formatting order. Fixed roles filter in analytics to display all community roles instead of only 25. Fixed LithiumVisitor cookie being reset on every asset request, causing inflated visitor counts in analytics. Fixed graphqlAdmin permission elevation for addUsersToRole mutation in endpoints. Removed "Category:" prefix from browser tab titles on category homepages used as localized entry points. Fixed search filters being cleared when performing consecutive searches. Fixed quote button being hidden by browser context menu on touch devices by repositioning below selected text. Fixed card view image quality on high-DPR displays by increasing thumbnail dimensions. Removed inappropriate content filters from OAuth SSO token validation and abuse content moderation workflows. Fixed place filter in ideas analytics report to correctly scope data to selected category. Fixed missing user names in reply notification emails. Fixed featured badge display to show highest earned badge level instead of first earned. Fixed featured content widget briefly displaying restricted content to anonymous users during page load. Fixed image upload order and caption issues when uploading multiple images simultaneously. Fixed publication scheduler being obscured by footer UI elements. Fixed oversized image warning notification persisting across page navigation. Fixed "Show More" button resetting page scroll position to top on large threads. Fixed duplicate author attribution display in TKB contributor lists. Fixed locked indicator not displaying on threads with zero comments. Fixed date display formatting issue causing text wrapping in published article tables. Fixed analytics report table displaying incorrect numbers for values above 10 million. Fixed inconsistent auto-hyperlink conversion when pasting URLs and quickly pressing Enter. Fixed text pasting issue when replacing highlighted text from Notepad or VSCode. Whitelisted @fluentui/react package for custom component development. Added permission check to prevent image paste operations when user lacks image posting permissions. Fixed missing UI error message when group names exceed 40 character limit. Fixed images uploaded in HTML widgets displaying as broken due to malformed URLs. Fixed closed private messages in inbox failing to load when messages referenced deleted users. Fixed Annual Total Visits mismatch and incorrect contract period display in Community Analytics billing dashboard. Fixed missing GroupHub "Invite Sent" events in Firehose when invitations were sent via email. Fixed blank member registration graph in analytics caused by Elasticsearch circuit breaker exceptions. Fixed day-of-week misalignment in analytics "Match day of the week" year-over-year comparisons. Added comprehensive accessibility improvements including: text color control swipe accessibility on mobile; alt text for like icons and profile images; descriptive labels for form fields in private messaging; proper combobox announcements for all autocomplete fields; ARIA states for menu selections, sort controls, and expandable elements; improved button labels for skin tone picker, logo links, and context-specific actions; corrected button roles for rich text editor toolbar controls; and screen reader support for tooltips on mobile devices. Pre-Prod Rollout: December 15-16. Testing window open from December 16 through January 4. Production Rollout: January 6-7 The rollout will follow the standard maintenance windows4.7KViewsSign in to react to this post21Comments
61Views
0Comments
