Release Notes

Release Notes
================

New Features/Improvements

1. Added SCIM 2.0 protocol support which can be used for seamless cloud applications provisioning.
2. Windows/Linux Installer for On-premise IDP.
3. Tested compatibility support for the latest version of PostgresSQL 14.2
4. Search JWT and OAuth integrated applications in the app list by client ID.
5. Added an API endpoint to enable an end-user.
6. SLO support is added for JWT Applications.
7. Added support for multiple redirect URLs in JWT applications.
8. GUID support for OAuth, JWT applications, and User APIs.
9. Added API endpoint for adding new user groups and deleting user groups.
10. Added support for nonce & PKCE request parameters in OAuth domain-mapping flow.
11. Kerberos/SPNEGO support added for Integrated Windows Authentication.
12. Added Domain Mapping Option in add OAUTH IDP.
13. Oracle E-Business Suite SSO native support added.
14. Support for multiple and country-specific HTTP SMS Gateways is added.
15. Support for Multiple Magento User Stores as Authentication Source is added.
16. Added a feature for Administrators to view all active sessions of all end-users and an option to invalidate those sessions
17. Added domain mapping to the authorized endpoint for OAuth2/OpenID Connect apps for choosing Identity Providers based on their configured domains.
18. Mandatory option added for users to validate their phone number or email address while configuring 2FA in Inline User Registration flow.
19. SMS Body for SMS with Link can be customized now.
20. Added Username, Location, and IP address in Push Notifications.
21. Added NameID format option in the SAML Identity Source.
22. Introduced Selectable MFA Methods which are SMS & Phone Callback, Authenticator Apps, Email, Hardware Token, and Security Questions for various login flows.
23. RADIUS group attribute is now configurable based on each RADIUS app.
24. Added a new authorized endpoint for OAuth2/OpenID Connect applications for dynamic Identity Provider discovery.
25. Added support for 2FA (OTP over SMS, EMAIL, SMS, and EMAIL) methods for VPNs where ACCESS_CHALLENGE is not supported.
26. IP Restriction can be enabled for VPNs.
27. Improved UI and UX for 2FA configuration.

Bug Fixes

1. The Desktop application name can be changed now.
2. Users get an error message in Radius Response if their password in Active Directory is expired.
3. The Force Authentication feature of the SAML app now works for Third-Party Identity Providers.
4. Made Custom Application name field editable.
5. Minor bug fixes for BigCommerce provisioning attribute mapping.
6. Fixed claim issue with Apple Login.
7. Fixed the security methods reconfiguration.
8. XSS Vulnerability has been fixed by updating Struts to version 2.5.26.