CoreOne Authentication Services

Bug fixes

• Authentication for the introspect endpoint is now possible with an api_resource and the appropriate secret

• The external logon provider role sync did not take all configuration into account while syncing the roles. This issue has been resolved.

• In certain situations where the user must change password at next logon flag was set on a user, it lead to a password change loop within the authentication process. This issue has been resolved.

Features

• Support for SAML Scoping as described in the SAML Core specification chapter 3.4.1.2 has been added. Specifically the ability to set an advisory list of identity provided that should be used for the authentication.

CoreOne Application Interface

Bug fixes

• Resetting or setting the password of a user was no longer possible for identities, where the identity type did not have the feature Is Logon Provider Active activated. This dependency was introduced in an earlier version and was not correct. This issue has been resolved.

CoreOne System Connectors

Bug fixes

• Clearing the manager / managerUuid field over the OpenLDAP Connector was not possible. This issue has been fixed.

CoreOne Workflow Services

Bug fixes

• Breaking Change: The activity Find object id in target system threw an error, when no object was found. With the new version of the activity, you have a separate No Match path in the designer.

• The introduction of the credential manager lead to empty secrets being stored in existing workflow definitions. The issue has been resolved, no further action is required.