diff --git a/.github/workflows/smoke-test-services.yml b/.github/workflows/smoke-test-services.yml
index d9cdad4..dace8e7 100644
--- a/.github/workflows/smoke-test-services.yml
+++ b/.github/workflows/smoke-test-services.yml
@@ -104,6 +104,7 @@ jobs:
           echo "Creating MongoDB backup..."
           docker compose -f docker-compose.full.yml exec -T mongodb mongodump \
             -u "$MONGODB_USERNAME" -p "$MONGODB_PASSWORD" --authenticationDatabase admin \
+            --db "$MONGODB_DATABASE" \
             --archive=/data/db/backup.archive
           docker compose -f docker-compose.full.yml cp mongodb:/data/db/backup.archive ./mongodb-backup.archive
           echo "✅ Backup created"
diff --git a/docs/backup-restore.md b/docs/backup-restore.md
index e36d499..a2bb4d3 100644
--- a/docs/backup-restore.md
+++ b/docs/backup-restore.md
@@ -67,6 +67,7 @@ docker compose exec mongodb mongodump \
   -u "$MONGODB_USERNAME" \
   -p "$MONGODB_PASSWORD" \
   --authenticationDatabase admin \
+  --db "$MONGODB_DATABASE" \
   --archive=/data/db/backup.archive
 
 # Copy backup out of container
diff --git a/on-prem/.env.example b/on-prem/.env.example
index 82419ba..5e2e49b 100644
--- a/on-prem/.env.example
+++ b/on-prem/.env.example
@@ -53,7 +53,7 @@ GITLAB_STATE_SECRET=
 
 # Currents application images
 DC_CURRENTS_IMAGE_REPOSITORY=513558712013.dkr.ecr.us-east-1.amazonaws.com/currents/on-prem/
-DC_CURRENTS_IMAGE_TAG=2026-01-26-001
+DC_CURRENTS_IMAGE_TAG=2026-07-15-001
 
 # Application URLs
 APP_BASE_URL=http://localhost:4000
diff --git a/on-prem/CHANGELOG.md b/on-prem/CHANGELOG.md
index e648076..f0fb246 100644
--- a/on-prem/CHANGELOG.md
+++ b/on-prem/CHANGELOG.md
@@ -6,6 +6,21 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [2026-07-15-001] - 2026-07-15
+
+### Compose File Changes
+- Added SSO volume mount to compose templates (requires `./scripts/generate-compose.sh` if using custom templates)
+
+### New Environment Variables
+- `SSO_SAML_IDP_METADATA_FILE`, `SSO_SAML_ISSUER` — required to enable SAML SSO
+- `SSO_SAML_PROVIDER_ID`, `SSO_SAML_DEFAULT_ROLE`, `SSO_SAML_AUTHN_REQUESTS_SIGNED`, `SSO_SAML_SP_CERT_FILE`, `SSO_SAML_SP_KEY_FILE` — optional SAML SSO configuration
+- `DC_SSO_VOLUME` — SAML SSO files directory (IdP metadata + optional SP PEMs)
+
+### Added
+- SAML SSO support — delegate sign-in to your SAML 2.0 identity provider (Okta, Entra ID, etc.)
+- GitHub Container Registry (GHCR) as an alternative image source for customer accounts without AWS IAM access
+- Version discrepancy check in `check-env.sh` — warns when `DC_CURRENTS_IMAGE_TAG` does not match `on-prem/VERSION`
+
 ## [2026-01-26-001] - 2026-01-26
 
 ### Added
diff --git a/on-prem/VERSION b/on-prem/VERSION
index df3756b..76299ff 100644
--- a/on-prem/VERSION
+++ b/on-prem/VERSION
@@ -1 +1 @@
-2026-01-26-001
+2026-07-15-001
diff --git a/on-prem/docker-compose.cache.yml b/on-prem/docker-compose.cache.yml
index 3d8a28f..096ae1f 100644
--- a/on-prem/docker-compose.cache.yml
+++ b/on-prem/docker-compose.cache.yml
@@ -1,5 +1,5 @@
 # Currents On-Prem Docker Compose
-# Version: 2026-01-26-001
+# Version: 2026-07-15-001
 # Profile: cache - Cache (redis)
 #
 # Generated by: ./scripts/generate-compose.sh
diff --git a/on-prem/docker-compose.database.yml b/on-prem/docker-compose.database.yml
index 0a9b822..7c9367c 100644
--- a/on-prem/docker-compose.database.yml
+++ b/on-prem/docker-compose.database.yml
@@ -1,5 +1,5 @@
 # Currents On-Prem Docker Compose
-# Version: 2026-01-26-001
+# Version: 2026-07-15-001
 # Profile: database - Database services (redis, mongodb, clickhouse)
 #
 # Generated by: ./scripts/generate-compose.sh
diff --git a/on-prem/docker-compose.full.yml b/on-prem/docker-compose.full.yml
index 4f78573..faf8d45 100644
--- a/on-prem/docker-compose.full.yml
+++ b/on-prem/docker-compose.full.yml
@@ -1,5 +1,5 @@
 # Currents On-Prem Docker Compose
-# Version: 2026-01-26-001
+# Version: 2026-07-15-001
 # Profile: full - All services (redis, mongodb, clickhouse, rustfs)
 #
 # Generated by: ./scripts/generate-compose.sh