JOSSO EE 2.5
TIP
Downloads portal: https://josso-resources.atricore.com
v.2.5.2
JOSSO EE v2.5.2
Changelog
v.2.5.2 Update #21
- NEW: Documentation site
- NEW: Identity mapping option in OIDC Relaying parties
- UPD: SSH Server access using private/public keys (check documentation)
- UPD: appliance:view command improvements
- UPD: removed unused bundles
- UPD: Removed log4j libraries from JOSSO server and WL agent.
- UPD: Improved command line user/groups management commands
- FIX: Oracle jdbc support for latest drivers
- UPD: improved CLR definitions in Certificate authentication scheme (web console)
v.2.5.2 Update #20
- UPD: NewRelic plugin updated to 7.4
v.2.5.2 Update #19
- NEW: REST binding for pre-authentication endpoint with iframe headers.
v.2.5.2 Update #18
NEW: Access command line console using SSH keys.
NEW: Command to test DB connections used by identity appliances
UPD: self-services improvements
UPD: identity bus version 1.5.2
v.2.5.2 Update #16
- NEW: Server SSH access using private keys/certificate
v.2.5.2 Update #12
FIX: LDAP Identity store properties field size
FIX: SAML 2 Metadata file re-updating the same file name
FIX: Support for SAML 2 Metadata files encoded using UTF-8 BOM (byte oreder mark)
NEW: DB connection test command: appliance:test-store
v.2.5.2 Update #05
NEW: Docker images available at http://hub.docker.com : atricore/josso-ee and atricore/josso-wb
NEW: Weblogic 14 JOSSO agent
NEW: "Save and deploy" option from within the Identity appliance modeler. This will deploy the model to the connected server; no need to save and go to the Lifecycle section (useful during development).
NEW: Agent configuration export from both command line and web console. In Lifecycle, access the execution environment list and select the Agent configuration option from the environment’s specific menu. In command line, use appliance:export-agent-config command.
UPD: Agent activation command support more options:
-d, --destination Activate execution environment at remote destination. (http://<sso-server>:8081) --dest-usr Activate execution environment at remote destination using provided username --dest-pwd Activate execution environment at remote destination using provided password -t, --target Activate execution environment at specified target path
NEW: SSH Service uses PEM format to store key: $JOSSO2_HOME/server/etc/host.key
FIX: Initial node secret generator avoids problematic characters (*, #).
FIX: Access to specific SAML2 Metadata files when overriding provider settings in federated connections between Virtual Providers and Services Providers.
FIX: Revert federated connection naming for virtual providers/service providers when overriding SP Channel. Use previous naming to avoid issues with existing deployments.
v.2.5.1
Changelog
v.2.5.1 Update #02
SERVER FIX: reference to invalid bundle
CONSOLE FIX: Issue with Sharepoint that prevents services from being generated (HTTP 404 on services). Open the appliance, make a minor change, save and deploy it to the server.
CONSOLE FIX: Modify TMP folder to avoid issues when the console is not being used for several days.
CONSOLE UPD: Increase console/server communication timeout, specially useful when large identity appliances are used.
CONSOLE UPD: Internet Explorer 8, 9 and 10 support improvements
v.2.5.1 Update #01
- FIX: Issue when using VPs with no subject authentication policy defined
v.2.5.1 Initial
TIP
Includes all changes and fixes provided by 2.5.0 #09
NEW: Role based access control for applications. You can define a list of roles/groups that are required/restricted to access a specific application (SP).
NEW: Improved appliance information displayed in library and lifecycle screens to better identify differences between server and console appliance information.
NEW: Added server commands: appliance:rename-resource, appliance:rename-exec-env, appliance:modify-branding.
UPD: Improved lifecycle actions: When building a running appliance it will be automatically restarted.
UPD: Server command appliance: activate command now supports the target options to specify exec.evn. location.
UPD: Server command appliance: view displays additional information
FIX: JOSSO appliance: rename-provider renames additional properties when renaming JOSSO SP.
NEW: Server SSH settings available in console
FIX: Server settings management bugfixes
FIX: User management issue when updating a user without modifying the user’s password
FIX: Console/Server connection issues that required reconnecting to the server
FIX: Improved error reporting for server connection failures
FIX: Changes to Open ID relaying party are now detected in the modeler when trying to save
UPD: You can specify appliance external configuration properties file, including encryption options.
FIX: External SAML2 IdP metadata upload issue
FIX: Do not use processing UI to POST SAML messages to external IdPs.
v.2.5.0
Changelog
v.2.5.0 Update #09
UPD: Improved appliance view command
FIX: Appliance revision number track
FIX: Server settings errors
UPD: Display revision numbers in appliance details (lifecycle)
UPD: Error handling when connecting to servers improved
FIX: Display error when appliance deployment to server fails
v.2.5.0 Update #06
NEW: All cookies are marked as HTTP only
NEW: External OIDC identity provider improvements
NEW: Azure OIDC identity provider support
UPD: Console lifecycle screen improvements
You must update the server to version #04 when using console #04.
v.2.5.0 Update #04
TIP
We have consolidated all previous 2.5.0 versions in this update. The change log includes previous updates.
NEW: Azure OIDC identity provider support
NEW: Import feature available
FIX: Require save confirmation when closing modified models (in some cases)
FIX: Unmarshall error for custom extensions in some components
NEW: SSH Support for RSA keys
FIX : IdP Selector page issue
NEW: Support for Atricore Web Console 3.0 (distributed separately)
UPD: Add kid attribute to JWT Headers when using RSA signature
FIX: SLO issue when triggering SLO from an SP that uses an IDP that overrides the SP channel settings
FIX: Virtual Providers do not required an identity source
FIX: Error when using constants in attribute mapping. Constant value last character is truncated.
FIX: Error after login-logout-login on some JOSSO agents
NEW: form_post support in OpenID
FIX: Reported port in HTTP Content security headers when using HTTPs for OPenID URLs
FIX: When using IDP initiated, and IDP requires signing authn request, signature is now properly validated.
UPD: Prefer configured encryption method for assertion when SP supports it.