Roadmap

1.1.0 (Ad libitum)

Release date: Q3 2012

Issues

1. Realm-based authorization (GoogleCode issue 272, Mail thread 1, Mail thread 2)
2. Avoid duplication in console's authorization management
3. Policy-compliant random password generation
4. Password change on an external resource only
5. Remove MD5 as a supported password cipher algorithm (SYNCOPE-51)
6. Add more password encryption options (SYNCOPE-100)
7. Manage creator, lastmodifier and approvers information about each SyncopeUser bean (SYNCOPE-15)
8. Support binary schema for user, role and membership attributes
9. Prevent task execution request for running tasks
10. Documentation: Derived and Virtual attribute use cases
11. Documentation: Sequence tables documentation and their initialization for import
12. Documentation: Workflow - concepts, how to customize and how to trace
13. Documentation: Self-registration

1.2.0 (Intermezzo)

Release date: Q4 2012

Issues

1. Delegation (GoogleCode issue 102)
2. Modify propagation mechanism in order to avoid to propagate useless update operations in case of no changes happened. By adding this feature we should resolve problems related to circular synchronization calls.
3. Assign membership and role schemas to either all memberships / roles or only some memberships / roles
4. Don't expose some REST list methods for anonymous (currently needed for self-registration)
5. Add UserRequestController.execute() that will execute the provided UserRequest and remove it on success
6. Allow user, role and membership properties (like as id and name, for example) to be used in derived schema definition
7. Password reset
8. Password required for resource subscription (GoogleCode issue 264, Mail thread)

1.3.0 (Jazz)

Release date: Q1 2013

Issues

1. Support more than one local connector bundles directory and zero or more ConnId's connector servers (GoogleCode issue 168)
2. Scripted SQL connector bundle (GoogleCode issue 277)
3. Investigate support for OpenICF connector bundles
4. Dynamic role memberships (GoogleCode issue 219)
5. Add the option to execute propagations in parallel. Consider that we must continue to propagate towards primary resources sequentially, in respect of the specified priority. May be propagations towards non-primary resources can be executed sequentially in respect of the priorities specified and in parallel in case of resources with the same priority.
6. Add support to execute propagations asynchronously (request handle, local update and return, resource provisioning performed in background - giving the possibility to manage background activities, provisioning result notification).
7. Role/membership attributes synchronization (SYNCOPE-26)

1.4.0 (Preludio)

Release date: Q2 2013

Issues

1. Add ability to search for Roles via the REST API (SYNCOPE-44)
2. GUI installer (GoogleCode issue 99)
3. Provide Task entities a name and an optional description
4. Make configurable whether UserRequest objects (create / update / delete) need to be approved or not and under which conditions (including membership of certain role(s))
5. Console: Provide asynchronous refresh of tasks and reports list so that the updated execution status is shown
6. Console: Refresh button in console task and report modal windows (GoogleCode issue 248)
7. Console: Cancel button for console modal windows

2.0.0 (Virtuoso)

Release date: Q3 2013

Issues

1. Easier and cleaner way to override REST methods (for WAR overlays)
2. Rich client library, hiding REST call details (GoogleCode issue 104)
3. Enlist RESTful methods (GoogleCode issue 250)
4. Support SCIM REST API
5. Use logback-audit for auditing
6. Virtual attribute cache (GoogleCode issue 276)
7. Better way to override console components (for WAR overlays)
8. General console code reorganization
9. Documentation: REST interface (GoogleCode issue 250)

2.1.0 (Rapsodia)

Release date: Q4 2013

Issues

1. Upgrade tools (GoogleCode issue 98)
2. Command-line tool to manipulate configuration (GoogleCode issue 28)
3. Add support for "bulk" operations via the REST API. For example, creating/deleting/reading a set of users/roles/resources with one operation.
   Since bulk operations apply for huge number of entries, take care in dividing responsibilities between REST controllers and REST client code

3.0.0 (Maggiore)

Release date: Q1 2014

Issues

1. Authentication chain (GoogleCode issue 274)
2. Pluggable authentication modules (GoogleCode issue 274)
3. PDC-based authentication (GoogleCode issue 96)
4. Passthrough authentication (GoogleCode issue 273)
5. Investigate using Apache Shiro to provide Syncope AM features
6. One-time password
7. Add functionality to map a role to a "resource", which is a String or URI. There may also be a permission associated with this mapping such as "read", "write" or "execute", etc. In this way we can use Syncope to see whether the authenticated user has the correct permissions to access a local resource.

4.0.0 (Notturno)

Release date: Q4 2014

Issues

1. Allow more notification mechanisms besides e-mail
2. Introduce notification chains
3. Role propagation / synchronization (GoogleCode issue 22)
4. Role workflow (GoogleCode issue 23)
5. JMX support (GoogleCode issue 95)
6. End-user JSR-286 portlet (GoogleCode issue 103)
7. Android / iPhone end-user app (GoogleCode issue 107)
8. Interceptors, i.e. custom extension points to catch events (user creation, provisioning to resource, ...). An idea could be to implement this with AOP. Audit implementation could be refactored as specific interceptor.