Hive introduces account linking and enhanced security features

Hive has announced several updates to its platform aimed at improving account management, security, and access control.

A new account linking feature will automatically consolidate identities based on email addresses. This prevents the creation of duplicate profiles when users switch between different login methods, such as Google and GitHub. While automatic linking is now active, a manual account merging process is being developed for users who have already created multiple accounts with the same email.

To enhance organizational security, Hive introduced an invitation-only option for OpenID Connect (OIDC) integrations. This allows administrators to restrict access so that users logging in via OIDC are only granted entry if they have received an explicit invitation, preventing unintended joins in large organizations.

Additionally, Hive is introducing organization-level access tokens to replace registry access tokens. These new tokens offer granular permission scopes, supporting the principle of least privilege by restricting access to specific resources like projects or services. These tokens will also serve as the foundation for a forthcoming GraphQL Management API, enabling programmatic interaction with the Hive Console.