JOSSO EE 2.5

v.2.5.2

JOSSO EE v2.5.2

Changelog

v.2.5.2 Update #21

  • NEW: Documentation site
  • NEW: Identity mapping option in OIDC Relaying parties
  • UPD: SSH Server access using private/public keys (check documentation)
  • UPD: appliance:view command improvements
  • UPD: removed unused bundles
  • UPD: Removed log4j libraries from JOSSO server and WL agent.
  • UPD: Improved command line user/groups management commands
  • FIX: Oracle jdbc support for latest drivers
  • UPD: improved CLR definitions in Certificate authentication scheme (web console)

v.2.5.2 Update #20

  • UPD: NewRelic plugin updated to 7.4

v.2.5.2 Update #19

  • NEW: REST binding for pre-authentication endpoint with iframe headers.

v.2.5.2 Update #18

  • NEW: Access command line console using SSH keys.

  • NEW: Command to test DB connections used by identity appliances

  • UPD: self-services improvements

  • UPD: identity bus version 1.5.2

v.2.5.2 Update #16

  • NEW: Server SSH access using private keys/certificate

v.2.5.2 Update #12

  • FIX: LDAP Identity store properties field size

  • FIX: SAML 2 Metadata file re-updating the same file name

  • FIX: Support for SAML 2 Metadata files encoded using UTF-8 BOM (byte oreder mark)

  • NEW: DB connection test command: appliance:test-store

v.2.5.2 Update #05

  • NEW: Docker images available at http://hub.docker.com : atricore/josso-eeopen in new window and atricore/josso-wbopen in new window

  • NEW: Weblogic 14 JOSSO agent

  • NEW: "Save and deploy" option from within the Identity appliance modeler. This will deploy the model to the connected server; no need to save and go to the Lifecycle section (useful during development).

  • NEW: Agent configuration export from both command line and web console. In Lifecycle, access the execution environment list and select the Agent configuration option from the environment’s specific menu. In command line, use appliance:export-agent-config command. cmd

  • UPD: Agent activation command support more options:

        -d, --destination
                Activate execution environment at remote destination. (http://<sso-server>:8081)
        --dest-usr
                Activate execution environment at remote destination using provided username
        --dest-pwd
                Activate execution environment at remote destination using provided password
        -t, --target
                Activate execution environment at specified target path
    
  • NEW: SSH Service uses PEM format to store key: $JOSSO2_HOME/server/etc/host.key

  • FIX: Initial node secret generator avoids problematic characters (*, #).

  • FIX: Access to specific SAML2 Metadata files when overriding provider settings in federated connections between Virtual Providers and Services Providers.

  • FIX: Revert federated connection naming for virtual providers/service providers when overriding SP Channel. Use previous naming to avoid issues with existing deployments.

v.2.5.1

Changelog

v.2.5.1 Update #02

  • SERVER FIX: reference to invalid bundle

  • CONSOLE FIX: Issue with Sharepoint that prevents services from being generated (HTTP 404 on services). Open the appliance, make a minor change, save and deploy it to the server.

  • CONSOLE FIX: Modify TMP folder to avoid issues when the console is not being used for several days.

  • CONSOLE UPD: Increase console/server communication timeout, specially useful when large identity appliances are used.

  • CONSOLE UPD: Internet Explorer 8, 9 and 10 support improvements

v.2.5.1 Update #01

  • FIX: Issue when using VPs with no subject authentication policy defined

v.2.5.1 Initial

TIP

Includes all changes and fixes provided by 2.5.0 #09

  • NEW: Role based access control for applications. You can define a list of roles/groups that are required/restricted to access a specific application (SP).

  • NEW: Improved appliance information displayed in library and lifecycle screens to better identify differences between server and console appliance information.

  • NEW: Added server commands: appliance:rename-resource, appliance:rename-exec-env, appliance:modify-branding.

  • UPD: Improved lifecycle actions: When building a running appliance it will be automatically restarted.

  • UPD: Server command appliance: activate command now supports the target options to specify exec.evn. location.

  • UPD: Server command appliance: view displays additional information

  • FIX: JOSSO appliance: rename-provider renames additional properties when renaming JOSSO SP.

  • NEW: Server SSH settings available in console

  • FIX: Server settings management bugfixes

  • FIX: User management issue when updating a user without modifying the user’s password

  • FIX: Console/Server connection issues that required reconnecting to the server

  • FIX: Improved error reporting for server connection failures

  • FIX: Changes to Open ID relaying party are now detected in the modeler when trying to save

  • UPD: You can specify appliance external configuration properties file, including encryption options.

  • FIX: External SAML2 IdP metadata upload issue

  • FIX: Do not use processing UI to POST SAML messages to external IdPs.

v.2.5.0

Changelog

v.2.5.0 Update #09

  • UPD: Improved appliance view command

  • FIX: Appliance revision number track

  • FIX: Server settings errors

  • UPD: Display revision numbers in appliance details (lifecycle)

  • UPD: Error handling when connecting to servers improved

  • FIX: Display error when appliance deployment to server fails

v.2.5.0 Update #06

  • NEW: All cookies are marked as HTTP only

  • NEW: External OIDC identity provider improvements

  • NEW: Azure OIDC identity provider support

  • UPD: Console lifecycle screen improvements

You must update the server to version #04 when using console #04.

v.2.5.0 Update #04

TIP

We have consolidated all previous 2.5.0 versions in this update. The change log includes previous updates.

  • NEW: Azure OIDC identity provider support

  • NEW: Import feature available

  • FIX: Require save confirmation when closing modified models (in some cases)

  • FIX: Unmarshall error for custom extensions in some components

  • NEW: SSH Support for RSA keys

  • FIX : IdP Selector page issue

  • NEW: Support for Atricore Web Console 3.0 (distributed separately)

  • UPD: Add kid attribute to JWT Headers when using RSA signature

  • FIX: SLO issue when triggering SLO from an SP that uses an IDP that overrides the SP channel settings

  • FIX: Virtual Providers do not required an identity source

  • FIX: Error when using constants in attribute mapping. Constant value last character is truncated.

  • FIX: Error after login-logout-login on some JOSSO agents

  • NEW: form_post support in OpenID

  • FIX: Reported port in HTTP Content security headers when using HTTPs for OPenID URLs

  • FIX: When using IDP initiated, and IDP requires signing authn request, signature is now properly validated.

  • UPD: Prefer configured encryption method for assertion when SP supports it.

Last Updated:
Contributors: Sebastian, sgonzalez