# KCM Version 2.9.4

## Features

* **PRIV-149**: Support for Domain parameter in Vault integration for Windows logins\
  See: <https://docs.keeper.io/keeper-connection-manager/vault-integration/dynamic-tokens#windows-username-domain-parsing>
* **PRIV-74**: Added small margin to SSH connection windows
* **PRIV-165**: Accept a one-time token for UI-based KSM configuration
* **PRIV-108**: Added support for multiple KSM applications (at the Connection Group Level)
* **PRIV-157**: Added support for custom LDAP Root Certificate
* **PRIV-160**: Added support for signed SAML requests

## Bug Fixes

* **PRIV-161**: Kubernetes support missing from guacd Docker image
* **PRIV-168**: Add "X-Content-Type-Options" header to SSL termination Docker image
* **PRIV-173**: Update kcm-setup.run to support Amazon Linux 2
* **PRIV-174**: Private key authentication fails for VNC with SFTP file transfer option
* **PRIV-175**: Default CSP ruleset for NGINX image is broken on Safari browsers