This article is a copy of the original Canvas Deploy notes and should be used for viewing translated versions only. To view the original copy in English and participate in release notes discussions for this release, please view the original Canvas Deploy notes.New to deploy notes? Visit Understanding Release Notes for a guide on how to read and use this document.Visit the Canvas Collaborative Roadmap to explore upcoming work and share feedback. Your input helps guide future product development.For Canvas Platform Service changes (API, GraphQL, Canvas Data), please see the appropriate page in the Change Log.Institutions are responsible for conducting thorough evaluations of their custom CSS/JS with each release and deploy to assess potential impacts.Unless otherwise stated, all features in this deploy are available in the Beta environment on 2026-07-30 and the Production environment on 2026-08-12.Updated FeaturesAccount SettingsConfigure Trusted Proxy IPs for MFA Session Binding- AdminFeature Option Name to EnableN/AEnable Feature Option Location & Default StatusN/ASubaccount ConfigurationN/AAccount/Course Setting to EnableNonePermissionsInherent to user RoleAffects User InterfaceYesAffected AreasAccount SettingsConsistent Authentication: Admins on proxied custom domains complete Multi-Factor Authentication once and move through Canvas without repeated verification prompts, across CDN and proxy providers including Cloudflare, CloudFront, Akamai, and Fastly. Accounts that had session fingerprinting disabled as a temporary workaround regain full MFA protection with no loop. Admin ToolsLogin Activity Update- Admins [Added on 2026-08-17]Feature Option Name to EnableN/AEnable Feature Option Location & Default StatusN/ASubaccount ConfigurationN/AAccount/Course Setting to EnableNonePermissionsUsers - manage login detailsAffects User InterfaceYesAffected AreasAdmin Tools Logging tabMore accurate login activity tracking: The Login/Logout Activity view shows the actual sign-in method for new login and logout events, letting admins trust the audit trail instead of second-guessing whether "Unknown" means a legacy login or lost data. Click the Logging tab [1].Select Login/Logout Activity from the log type dropdown [2].Fill out the desired search fields [3].Click the Search Logs button [4].Developer KeysGoogle Apps LTI Requires Opt-In- AdminFeature Option Name to EnableN/AEnable Feature Option Location & Default StatusN/ASubaccount ConfigurationN/AAccount/Course Setting to EnableNonePermissionsDeveloper Keys-manageAffects User InterfaceNoAffected AreasDeveloper KeysImproved Security: Reduces the tool's default security exposure and moves Instructure toward a more mature API management model. New users gain clearer control over which integrations have API access from the start. Developer KeysPaste Scopes- AdminFeature Option Name to EnableN/AEnable Feature Option Location & Default StatusN/ASubaccount ConfigurationN/AAccount/Course Setting to EnableNonePermissionsDeveloper Keys-manageAffects User InterfaceYesAffected AreasAPI Key SettingsSimplified Scoping: Admins paste a list of scopes directly from the tool provider instead of manually finding and selecting each one, cutting the time and troubleshooting needed to scope a developer key correctly. Developer KeysToken Count Relabeled- AdminFeature Option Name to EnableN/AEnable Feature Option Location & Default StatusN/ASubaccount ConfigurationN/AAccount/Course Setting to EnableNonePermissionsDeveloper Keys-manageAffects User InterfaceYesAffected AreasDeveloper KeysImproved Clarity: Lifetime Token Count in Developer Keys, makes clear the number includes all tokens issued, not only currently active ones. The token information for LTI keys is also removed, since it is not relevent for LTI keys. SettingsAcademic Integrity Pledge- Admin, StudentFeature Option Name to EnableN/AEnable Feature Option Location & Default StatusN/ASubaccount ConfigurationN/AAccount/Course Setting to EnableNonePermissionsInherent to user roleAffects User InterfaceYesAffected AreasAccount-level setting, AssignmentsAcademic Integrity: Reinforces honest submission practices by requiring students to actively acknowledge an integrity pledge before submitting an assignment. Admins control when and where the pledge applies, using the default text or their own wording to match institutional policy. Other UpdatesCourse NavigationGrades Page Restriction- Instructors, Students [Added on 2026-08-28]Affects User InterfaceYesAffected AreasGradesAuthenticationAdmins on Custom Domains Skip Repeat MFA Prompts- AdminAffects User InterfaceNoAffected Feature AreasAuthenticationConsistent Authentication: Admins on proxied custom domains complete Multi-Factor Authentication once and move through Canvas without repeated verification prompts, across CDN and proxy providers including Cloudflare, CloudFront, Akamai, and Fastly. Accounts that had session fingerprinting disabled as a temporary workaround regain full MFA protection with no loop.DashboardColor Overlay Default Status Update- All UsersAffects User InterfaceYesAffected AreasDashboard Course CardsImproved Visibility: Course cards display their images and colors clearly by default, with the option to add a color overlay for accounts that prefer it. Accounts with a customized setting keep their current configuration.ReportsLTI Reports Include LTI Version- AdminAffects User InterfaceNoAffected Feature AreasLTI ReportClearer Reporting: The LTI Report's CSV export includes the LTI version number, giving admins version details for each tool without needing to check each one individually.Change LogDateDescription2026-08-28Addition Course Navigation: Grades Page Restriction2026-08-17AdditionAdmin Tools: Login Activity Update2026-08-04Updated
