Page History

...

New and noteworthy

OpenID Connect Client features

SYNCOPE-1270 provides an extension enabling Apache Syncope to act as as OpenID Connect Client.

Once an Apache Syncope deployment - enabled with this extension - is properly configured, and the Syncope Core application is running, the Syncope Admin UI and the Syncope Enduser UI can be enabled to allow OpenID Connect-based SSO. The global result is that Admin UI and / or Enduser UI can be accessed after user authentication against (one of configured) OpenID Connect providers.

Docker Hub

Finally, Apache Syncope Core, Console and Enduser are available as three separated Docker images at Docker Hub, published under the apache organization.

Details are provided in the Getting Started guide. 

Enduser UI: social registration

Once configured the appropriate SAML 2.0 Service Provider features or OpenID Connect Client features for the Enduser UI, it is now possible to take the initial values for some attributes in Syncope from a profile owned by the registering user in one of most popular social networks as Twitter, LinkedIn, Facebook, Google+, ...

More bundled ConnId connectors

New ConnId connectors come bundled with Apache Syncope:

• Azure Active Directory
• SCIM 1.1
• ServiceNow

Miscellaneous

• Reference Password Rule provided relying on the famous "Have I been Pwned?" service
• Manual reconciliation tool for Admin Console: given a User / Group / Any Object and an External Resource, allows to examine the current status, force pushing or pulling values for mapped attributes
• REST now supports application/yaml for exchanging payloads, besides application/json and application/xml

Issues

Bug

• [SYNCOPE-1282] - Search schema error
• [SYNCOPE-1285] - Quartz db init on HA environments occurs on all nodes
• [SYNCOPE-1288] - Propagation tasks list not keeping order while browsing pages
• [SYNCOPE-1290] - Deletion of only schema entry breaks schema UI
• [SYNCOPE-1291] - Cannot login again into Admin Console after Session Expired
• [SYNCOPE-1293] - Default password reset notifications not working
• [SYNCOPE-1294] - Plainschema panel doesn't display the assigned validator class
• [SYNCOPE-1297] - Select all + bulk button redirecting to top of the page on click
• [SYNCOPE-1298] - Quartz jobs with no matching Task or Report not visible from Admin Console
• [SYNCOPE-1301] - Token creation is not threadsafe
• [SYNCOPE-1303] - Content migration from 1.2 problems
• [SYNCOPE-1304] - Order Groups by userOwner throws DataIntegrityViolation exception
• [SYNCOPE-1306] - Date value without a conversion pattern not shown by Admin Console
• [SYNCOPE-1307] - Wrong export order for Realms
• [SYNCOPE-1308] - Exception getting users with orderBy on SyncopeClient API with Postgres 10.3
• [SYNCOPE-1309] - Enduser UI does not remove Access Token on Finish
• [SYNCOPE-1312] - Console CSS is depending from Google fonts
• [SYNCOPE-1314] - Bulk action from reconciliation section ever shows NOT ATTEMPTED after provision
• [SYNCOPE-1315] - Propagation task sorting by Object Type not working as expected
• [SYNCOPE-1317] - RuntimeException when remove all schemas
• [SYNCOPE-1318] - Future task rejected from ScheduledThreadPoolExecutor
• [SYNCOPE-1319] - Pull Task template not assigning roles
• [SYNCOPE-1320] - Push task report generation fails in case of IgnoreProvisionException
• [SYNCOPE-1321] - Search doesn't work for date attributes with conversion pattern with time zone
• [SYNCOPE-1326] - Wizard generates unnecessary attrPatch when the field is empty

...