New features
Added support to skip the second factor if first factor is considered strong enough.
Updated introspect endpoint to return also the persona selected if this is configured
Added two PUT endpoints for computed claims OIDC/SAML and updated the POST for computed claims to throw an error if the same entry is already present
Added support to start a workflow process with an additional parameter, returnUrl.
Allow introspecting Access access tokens
Added support to link/unlink/login with an Apple account
The text for TwoFA voice and snackbar can be configured now via translations.
Improved accessibility for accordions that are used in help-menu page
Disabled spell-checker for all fields in order not to share any data
Bug Fixes
- Fixed the introspect token endpoint (400 Bad Request) which causes SCIM traffic to fail
- Fixed social account linking if remote IdP claims mapping was enabled
- Fixed an issue with dropping emails when service can’t connect to the mailserver by re-queueing and retrying specified amount of times and if that fails then sending the message to parking queue.
- Fixed issues with step up authentication for SAML
- Fixed an issue which resulted in duplicates complex objects when patched complex values that have no value property
- Fixed OIDC end session when id_token_hint is expired
- Added
SamlAuthRequestParserfor SAML to extract the issuer - Added missing information in events
- Added missing state transition events
- Enabled functionality of an already logged-in user to switch between personas without having to log-out and log back in.
- Boolean attributes are now supported in introspect/id_token
- Fixed social unlinking issue
- Fixed deleting address from a profile