UAA 2.7.1

Features

• CORS Filter improvements - do not enforce on same origin requests
• Store SAML user information in UAA shadow account
• Store LDAP user information in UAA shadow account
• OpenID Connect token can contain external SAML user groups when using roles scope
• Add ability to map SAML groups to UAA scopes
• Serialize authentication origin details during authorization_code/implicit flow
• Populate id_token with custom user claims
• Update user attributes when SAML/LDAP users authenticate
• Support LDAP referrals and don't throw exception during partial results
• Add API for user verification link generation
• Store all zone subdomains as lowercase, and subdomains are case insensitive
• Add ability to map LDAP attributes to custom claims in id_token

Bug Fixes

• Remove unused invitations response segment
• Autlogin uses context sensitive redirect to avoid domain name change
• Zone resolver should not throw an error if zone is not found

Misc

• Upgrade Flyway plugin in Gradle build
• Clarify external config file usage
• Refactor the UAA zone LDAP provider to be identical configuration as any other zone LDAP IDP