diff --git a/docs/modules/ROOT/pages/whats-new.adoc b/docs/modules/ROOT/pages/whats-new.adoc
index 67df64182e..221c8a41fd 100644
--- a/docs/modules/ROOT/pages/whats-new.adoc
+++ b/docs/modules/ROOT/pages/whats-new.adoc
@@ -48,6 +48,7 @@ http.csrf((csrf) -> csrf.spa());
 * Removed GET request support from `Saml2AuthenticationTokenConverter`
 * Added JDBC-based `AssertingPartyMetadataRepository`
 * Made so that SLO still returns `<saml2:LogoutResponse>` even when validation fails
+* Removed Open SAML 4 support; applications should migrate to Open SAML 5
 
 == Web