Added
• Backup and restore: Export backup saves your Identity Center settings (start URL, SSO region, default console region) to a small file, and Import backup restores them in another browser or on another computer. Accounts and roles aren’t stored in the backup. After importing, click “Sign in & load accounts” to rediscover them so they’re current. The backup contains no credentials.
• Remove an Identity Center: hover over its heading and click ×, then confirm. This removes its sign-in and its profiles. Other Identity Centers, open console tabs and containers aren’t affected.

Improved
• The setup form checks your input before signing in and shows errors right under the field. A mistyped start URL (for example, one ending in /star instead of /start) is caught, and the correct URL is suggested. Malformed region names (for example, us-east1) are also caught.
• If AWS rejects a start URL or region that looks valid, the error message now names the URL, the region and the endpoint involved.

Changed
• Profiles now show the AWS account name, with the account ID and role on a second line — the permission set name is no longer appended to the displayed name.
• The popup is wider and profile names are no longer truncated; long account names wrap instead of being cut off.
• Filtering matches account name, account ID, role, and profile name.

Fixed
• Copying an account name returns the AWS account name rather than the generated profile name. Account names are fetched automatically for profiles created in earlier versions, and where that isn't possible the role suffix is removed from the fallback.

The container name for each profile is unchanged, so existing container tabs and their cookies are preserved. Hovering a profile shows its container name along with the account, role, and session expiry.

Added
• Start URL now accepts any common form — with or without https://, with or without a trailing slash, and a bare host like mycompany.awsapps.com is completed to the full start URL automatically.
• Profiles with an open console session now show when that session expires, read directly from AWS (your permission set's session duration). Hovering a profile shows the account, role, and session expiry.

Changed
• The SSO region field accepts any capitalization.
• Group headers explain, on hover, that their sign-in status is the Identity Center session that controls when a fresh sign-in is needed — distinct from an individual console session's lifetime.

Fixed
• Profile discovery now works in large organizations. Accounts and roles were previously fetched one at a time with no retry, so AWS rate limiting could abort the run and leave no profiles saved — this affected organizations with roughly 100+ accounts.
• Requests now retry automatically with backoff, roles are fetched with controlled concurrency, and accounts that still can't be read no longer discard the rest: successful profiles are saved and the popup reports how many accounts to retry. Re-running setup picks up only what's missing.

Added
• Progress bar during setup, showing accounts listed, roles discovered, and per-account progress. Setup continues in the background if the popup closes, and reopening it shows the current progress.

• Added AWS GovCloud (US) support: sign in to GovCloud Identity Center instances and open GovCloud console sessions alongside commercial accounts (both us-gov-west-1 and us-gov-east-1).
• New host permission for *.amazonaws-us-gov.com to reach the GovCloud sign-in endpoint.
• New extension icon.
• Description and documentation cleanup.