R96

New features

• Added support to skip the second factor if first factor is considered strong enough.

• Updated introspect endpoint to return also the persona selected if this is configured

• Added two PUT endpoints for computed claims OIDC/SAML and updated the POST for computed claims to throw an error if the same entry is already present

• Added support to start a workflow process with an additional parameter, returnUrl.

• Allow introspecting Access access tokens

• Added support to link/unlink/login with an Apple account

• The text for TwoFA voice and snackbar can be configured now via translations.

• Improved accessibility for accordions that are used in help-menu page

• Disabled spell-checker for all fields in order not to share any data

Bug Fixes

• Fixed the introspect token endpoint (400 Bad Request) which causes SCIM traffic to fail

• Fixed social account linking if remote IdP claims mapping was enabled

• Fixed an issue with dropping emails when service can’t connect to the mailserver by re-queueing and retrying specified amount of times and if that fails then sending the message to parking queue.

• Fixed issues with step up authentication for SAML

• Fixed an issue which resulted in duplicates complex objects when patched complex values that have no value property

• Fixed OIDC end session when id_token_hint is expired

• Added SamlAuthRequestParser for SAML to extract the issuer

• Added missing information in events

• Added missing state transition events

• Enabled functionality of an already logged-in user to switch between personas without having to log-out and log back in.

• Boolean attributes are now supported in introspect/id_token

• Fixed social unlinking issue

• Fixed deleting address from a profile