ICPWatch
Get alerts
Application canisters

Upgrade Internet Identity Backend Canister to c78d1b99c

#143403 · Adopted and executed · proposed Aug 7, 2026

Yes 99.8%88.2% of voting power has votedNo 0.2%
tally read NNS governance canister, list_proposals
Action
Install Code
Proposer neuron
37
Created
Decided
Aug 10, 2026

Summary

Backend Canister Upgrade

  • SSO organization can now declare session_max_age_seconds in its

ii-openid-configuration document.

  • Cleanup of data migrations.

What's Changed

_Since proposal-backend-143261_

  • chore(be,fe): remove the completed MCP config migration (#4193)
  • chore(be,fe): remove the completed SSO credential backfill (#4192)
  • feat(be): carry the SSO session deadline into the attribute bundle (#4189)
  • feat(be): resolve an SSO domain's session_max_age_seconds (#4188)

Full release notes

Wasm Verification

To build the wasm modules yourself and verify their hashes, run the following commands from the root of the Internet Identity repository:

git pull  # to ensure you have the latest changes.
git checkout c78d1b99c5c161c74d8d8f795ad1072826f90673
./scripts/verify-hash \
    --ii-hash f6c0abacfb183de0f28d6062a5dbd5b085c1b6b64b5c66c0475a25082d991221 \
    --archive-hash 092b97c04546c1c4ff6f76125330adde0ae20010a9c7a5780cd3fa6eb9772800

Backend Argument Verification

Run the following command to verify the backend upgrade argument hash:

didc encode -d ./src/internet_identity/internet_identity.did -t '(opt InternetIdentityInit)' '(
  opt record {
    archive_config = opt record {
      polling_interval_ns = 15_000_000_000 : nat64;
      entries_buffer_limit = 10_000 : nat64;
      module_hash = blob "\09\2b\97\c0\45\46\c1\c4\ff\6f\76\12\53\30\ad\de\0a\e2\00\10\a9\c7\a5\78\0c\d3\fa\6e\b9\77\28\00";
      entries_fetch_limit = 1_000 : nat16;
    };
  },
)' | xxd -r -p | sha256sum

The output should match the argument hash.

Official view: dashboard.internetcomputer.org/proposal/143403