The latest release brings enterprise identity to the heart of the platform with Single Sign-On via OpenID Connect (OIDC) and SAML 2.0, a unified user model across local, LDAP, and SSO accounts, and new account security capabilities. This makes enterprise-scale THOR operations easier to integrate, govern, and secure.

Management Center 4.2 at a Glance

• Single Sign-On (SSO) with OpenID Connect (OIDC) and SAML 2.0, allowing users to log in through an existing identity provider
• Unified user management with LDAP and SSO users appearing alongside local users and roles mapped from directory groups
• API keys for LDAP and SSO users, enabling automation across every identity source
• TOTP-based two-factor authentication for LDAP users
• Stronger account security with configurable password policies and automatic deactivation of inactive local accounts
• Further platform hardening with no breaking changes for existing installations

THOR is Nextron’s flagship compromise assessment, incident response, and threat hunting solution. Management Center enables organizations to deploy, orchestrate, and operate THOR across thousands of endpoints from a single platform.

With version 4.2, we’re focusing on identity, access, and account security, helping Management Center fit seamlessly into your existing enterprise identity infrastructure.

One Login Across the Enterprise

Managing separate credentials for every security tool doesn’t scale, and it shouldn’t have to.

Management Center 4.2 introduces Single Sign-On with OpenID Connect and SAML 2.0. Your team can log in through the identity provider they already use every day. The example below shows an integration with Microsoft Entra ID.

Roles and permissions are mapped from directory groups and re-resolved on every login, helping ensure that access reflects the current state of your organization.

Everything can be configured and tested directly in the administration interface without touching a configuration file. Sensitive values such as client secrets and private keys are write-only and never returned by the API, while every configuration change is recorded in the audit log.

The full technical details and configuration options are available in the Management Center documentation.

SSO configuration

Configure OpenID Connect or SAML 2.0 directly in Management Center and map identity provider groups to Management Center roles.

One User Model, Every Identity Source

Whether an account comes from the local database, an LDAP directory, or an identity provider, administrators can now manage it through a common user model.

With version 4.2, LDAP and SSO users appear alongside local users in Management Center, providing a consistent view of users, roles, permissions, preferences, and API access.

Fields managed by the directory or identity provider remain read-only, keeping responsibilities clearly separated.

TOTP-based two-factor authentication is now available to LDAP users as well. SSO users continue to use the authentication policies and additional factors provided by their identity provider.

Automation for Every Account Type

Automation shouldn’t be a privilege of local accounts.

Version 4.2 extends API keys to LDAP and SSO users, bringing scripted workflows and integrations to every supported identity source.

LDAP API keys follow the user’s current directory-derived access, while API keys for SSO users can be enabled through the SSO configuration. This extends enterprise-managed identities beyond interactive login to automated workflows and API-based integrations.

Raising the Bar on Account Security

Strong authentication is only one part of securing access. Account policies and lifecycle management matter too.

Management Center 4.2 introduces a new configurable password policy for locally managed accounts. Administrators can define password length and character requirements, including a policy mode aligned with NIST SP 800-63B password requirements.

In addition, inactive local users can now be deactivated automatically after a configurable number of days.

LDAP and SSO accounts remain governed by their directory or identity provider, keeping account lifecycle management with the authoritative identity system.

Configurable password policy

Configure password requirements and account defaults centrally for locally managed users.

Strengthening Platform Security

Protecting customer environments starts with protecting the platform itself.

Management Center 4.2 includes additional platform security hardening, including stricter browser protections and tightened cookie handling.

Together with the new identity and account security capabilities, these improvements continue our commitment to delivering enterprise software that customers can confidently deploy in security-critical environments.

The complete list of changes is available in the Management Center 4.2 changelog.

A Seamless Upgrade

Management Center 4.2 introduces no breaking changes for existing installations.

Existing deployments can be upgraded in place, and existing configuration, including LDAP settings, is migrated automatically.

As always, we recommend reviewing the changelog and upgrade notes before updating.

Management Center 4.2 Changelog & Upgrade Notes

Looking Ahead

Management Center 4.2 is available today and represents another important step in the evolution of the Nextron platform.

With enterprise SSO, unified identity management, API access across identity sources, and stronger account security controls, Management Center integrates more deeply into the identity and access infrastructure organizations already rely on.

And there’s more to come as we continue to expand the platform.

Further Information

For the complete list of changes and detailed guidance on configuring SSO, user management, and role mapping, refer to our documentation:

• Management Center 4.2 Changelog & Upgrade Notes
• SSO Configuration Guide (OIDC & SAML 2.0)
• User Management & Role Mapping

Existing Customers

If you’d like to discuss upgrading to Management Center 4.2, learn more about the new SSO capabilities, or have questions about integrating your identity provider, please contact your Nextron representative or reach out to our support team at support@nextron-systems.com.

New to Nextron?

Seeing THOR in action is the best way to appreciate what it can uncover.

Nextron offers guided Proof of Value (PoV) engagements that allow organizations to evaluate THOR and Management Center using their own infrastructure and real-world environment.

Whether you’re looking to validate your current security posture, strengthen your incident response capabilities, or evaluate the Nextron platform, our team can help you see how THOR performs in your environment.