SAML Jackson v1.3.5

Fixed

• Configured next.js to use the undici library instead of node-fetch to fix the issue where requests above 16kb stall.

Changed

• Updated dependencies

SAML Jackson v1.3.4

Fixed

• Updated node-fetch to fix the issues in next.js where request above 16kb stall.

SAML Jackson v1.3.3

Added

• /.well-known/sp-metadata now shows the XML for SPSSODescriptor
• Added roles and groups to the profile

SAML Jackson v1.3.2

Fixed

• Loading of pre-loaded connections in Windows

Changed

• Updated dependencies

SAML Jackson v1.3.1

Added

• Return types added for ConnectionAPIController methods.
• Support for i18n internationalization: #560 (From @G3root)
• Mark older SDK methods as deprecated in typings.
• Check if oidcPath is set while creating/updating connection and also in authorize request for an OIDC Connection.
• Throw an error if entityID is not passed in IdP metadata.

Changed

• Made the env variables (oidcPath and openid) optional so that a package upgrade can proceed seamlessly.

Fixed

• Reduce docker image size using Next.js output file tracing: #557 (From @G3root)

SAML Jackson v1.3.0

Added

• Support for OpenID Connect Providers in addition to our existing SAML connector. This expands our offering to most Enterprise SSO providers out there.

SAML Jackson v1.2.2

Added

• Support ForceAuthn flag
• Store and show IdP certificate expiry date in the Admin UI
• Validate tenant and product in the OAuth 2.0 token exchange route

Security

• Removed password field from the payload coming from SCIM providers (Okta for example)

Fixed

• Self-signed certificates are now valid for 10 years and expiry date beyond 2049 is supported

Changed

• Updated dependencies

SAML Jackson v1.2.1

Added

• New feature alert - Directory Sync based on the SCIM 2.0 protocol to automate provisioning and de-provisioning of users in your apps.

SAML Jackson v1.1.6

Added

• SAML configuration is now made available at the path .well-known/saml-configuration

SAML Jackson v1.1.5

Fixed

• IdP initiated SAML login
• Validate redirect_uri in code exchange