CoreOne Admin User Interface

Features

• All data loader drop down fields were adjusted to support the longer names. Previously the names were replaced with ellipsis.

CoreOne Admin User Interface 2.0

Features

• Deleting a Core Identity did not fast-track all the necessary tasks to fully delete a Core Identity. The full deletion was only executed by the recurring task, thus delaying the deletion unnecessarily.

Bug Fixes

• Some search values, such as <script>alert('I'm testing it')</script>, did not return a validation error instead of a empty result when searching for.

• It was possible to add the same linked resource twice, if the resource group was different.

CoreOne Authentication Services

Features

• It’s now possible to decide which claims are issued in which token (id_token or access_token). For that, a new configuration user interface has been created. By default, all claims are assigned to the id_token token, but you can use that new configuration user interface to make any necessary changes.

• The AHV (ZAS) identity validation method now asks the user for explicit consent to store the AHV number.

• The user has now the option to validate and edit his personal data before any validation methods. Additionally, he can validate and edit the data after a failed validation attempt.

• A forgot username process has been implemented. If the user can provide a unique communication channel, the username will be sent to that channel.

• All JavaScript libraries have been updated to the latest possible versions.

Bug Fixes

• In some cases, the ordering of the available Quality of Authentication (QoA) was not calculated correctly.

• It was possible to perform redos attacks to a validation endpoint. The issue has been resolved.

CoreOne Application Services

Bug Fixes

• Shortening the assignment of resources that were assigned to infinity, lead to the creation of new assignments. This issue has been resolved.

CoreOne Application Interfaces

Bug Fixes

• The handling of dates in the CoreOne API has been unified and improved in regard to filters such as ge and le.

CoreOne Self Service Portal

Features

• All JavaScript libraries have been updated to the latest possible versions.

Bug Fixes

• When the user selected the “Close” on the prolong user session popup, the popup simply reappeared. The button has been renamed to “Logout” and, when selected, initiates the logout.

CoreOne System Connectors

Features

• Support for LDAPS has been fully implemented in both the Active Directory and OpenLDAP connectors.

Bug Fixes

• Provisioning of empty values to an OpenLDAP could cause errors which have been resolved.

• Multi value support in the Entra ID connector has been improved.

Tools

Features

• The Version Updates has been fully integrated into the CoreOne Configuration Manager.