The major change for this release is the deprecation of requesting the "edu.uiuc.ncsa.myproxy.getcert" scope when registering OIDC clients at https://cilogon.org/oauth2/register . Existing OIDC clients that were registered with the "edu.uiuc.ncsa.myproxy.getcert" scope will be able to get X.509 certificates until January 2024. For full details about the CILogon X.509 Certificate Retirement Plan, please visit https://ca.cilogon.org/retirement .