[Unity-idm-discuss] 2.8.0 released

[Krzysztof B. <kb...@un...>]

Dear Subscribers,

On behalf of the Unity Team, I'm happy to announce that release 2.8.0 is 
out.

/When installing this release as an update a migration will be performed 
and some configuration changes ARE necessary (but will to simplify your 
existing configs). Make sure to make backup and read update instructions 
in the documentation.
/

Some most important highlights are:


        Binding agnostic authenticators

With Unity 2.8.0 release authenticators setup was simplified. 
Authenticators are not binding-specific anymore, the concepts of 
credential verificator and retrieval are used only under the hood and so 
administrator need not to even know them. This change requires a 
significant amount of changes in configuration. While this may sound 
disturbing, the good aspect is that those changes will simplify your 
configuration, in some cases significantly. Upgrade documentation 
contains a detailed instruction with examples.


        UpMan

By far the biggest addition to Unity in this release is a new endpoint: 
Unity Project Management, UpMan. This endpoint addresses a frequently 
asked problem of delegation of particular Unity group management to a 
group-administrator, who otherwise has no full Unity admin rights. 
UpMan, besides providing a complex workaround around authorization 
issues, also exposes a user firendly UI, simple and task-focussed. 
Project manager is not bothered with Unity specific terms and difficult 
pipelines; instead simple tasks are just simple.

Currently the v1 of UpMan is naturally limited — we would love to hear 
your thoughts!


        Form enhancements

  * Sticky enquiry: a new type of enquiry is introduced, which is
    intended for repeatable user updates. Sticky forms can be filled
    multiple times, and are not “pushed” to the users at login. Instead
    user may fill it by entering form’s link on its own, or one of the
    following two features can be used:
  * Sticky enquiries can be included on HomeUI
  * Invitations to enquiries are now possible
  * Grid widget & search for remote registration is available
  * It is possible to filter allowed groups when creating an invitation
    to a form.
  * Flexible control of users for whom enquiry is applicable was added.


        Public and native OAuth clients

Support for public and native OAuth clients, including PKCE is added. 
RFC 7636 is supported now, along with the key guidelines for 
authenticating native clients from RFC 8252.


        Other notable changes

  * Support of PNG and GIF images in attributes, thanks to Remek, our
    new contributor
  * Historical passwords (used for checking recent passwords) are
    removed when password hashing policy is changed.
  * After modification of local credential config, authenticators using
    it are automatically refreshed.
  * Larger default and in general configurable limit of maximum
    attribute size.


Big thanks for all who helped with this release. As always more detailed 
changelog is available on the Downloads page: 
http://www.unity-idm.eu/downloads/


Best regards,
Krzysztof

//