CoreOne Admin User Interface

CoreOne Admin User Interface 2.0

There is a new setting on the clients called Validate user password using Application Service. If enabled, the credentials are validated using the CoreOne Application Service which in turn, validates the password policy. In some cases, this behavior is not needed, so you can now disable this behavior which also will increase performance of the issuing of tokens.
Breaking Change: The claim type fulfilled_qors is no longer included in the scope c1s_profile because this scope is used for internal usage and should not include anything not system-relevant. Furthermore this scope should not be used by any customers!

Basic Authentication: Basic Authentication was implemented as getting a JWT token from the configured IdP and sending that token in the HTTP header. For system that relayed on basic authentication using simple username and password, this did not work. The connector has been adapted, so that if no Scim login base URL is configured, the credentials are send in the header. If a Scim login base URL is configured, a JWT token is issued and sent in the header.