|
From: Krzysztof B. <kb...@un...> - 2024-04-30 13:02:54
|
Dead Subscribers,
I'm happy to announce a bit unexpected, 3.16.0 release. While our 4.0.0
major release gets delayed, we wanted to publish couple of recent
improvements still on the 3.x branch, and then focus on fixing the
remaining issues with 4.0.0. Unity 4 is expected soon, however we still
polish the rewritten UI. Our hope is to release it in May.
Release Highlights
The 3.16.0 release is brings several notable improvements:
* It is possible to create dynamic policies, activating 2FA. Exposed
as a new policy in Authentication Flow configuration. Dynamic MVEL
based rule can take decision basing on user’s attributes, 1st factor
used and other information.
* SAML IdP can be configured to return the NotBefore constraint
* SAML authenticator can filter trusted federation IdPs basing on
their attributes set in metadata
* Authentication Context Reference obtained from upstream OAuth and
SAML IdPs is preserved and exposed for use in output profile as well
as available in dynamic MFA activation policy. This allows for
forwarding this information to Unity relying parties as well as
ensuring MFA is not repeated, if was already performed by upstream IdP.
* Several performance optimizations were applied:
o fixed problem with slow loading of Requests view in Console, in
case of many user enquiry responses
o when entering console the root group is not automatically
selected in Groups Browser.
o there are small optimizations in bulk query API, improving some
of the Unity operations spanning whole users directory.
o indexes were added to the tokens DB table
Migration consideration
MySQL users shall ensure that permissions to create procedures are
granted to the Unity DB user. See Update instructions in the manual for
details, if you are on this DB.
Best regards,
Krzysztof
|