[Unity-idm-discuss] Unity IdM 4.2.0 Released – Java 21, SAML & OAuth Enhancements, Bug Fixes

[Roman K. <ro...@un...>]

Hello Unity-IdM Community,

We’re pleased to announce the general availability of Unity-IdM *version
4.2.0* which brings important enhancements and reliability improvements.

*🚀 What’s new in 4.2.0*


   -

   Minimum required Java version has been raised to *Java 21*. Environments
   currently on older JDKs will need to upgrade.
   -

   Clients holding a locally-issued OAuth token no longer need to also
   supply a client’s credential.
   -

   The SAML module now supports ignoring the AttributeConsumingServiceIndex
   in AuthnRequests.
   -

   Internal cleanup of cyclic dependencies to improve modularity and
   maintainability.

*🐞 Bug-fix highlights*


   -

   Trusted Service Providers marked “Hide from discovery” no longer
   erroneously appear in discovery lists.
   -

   Upman groups with a slash (/) in the name are now handled correctly.
   -

   Fixed a NullPointerException during OAuth “verificator” TRACE logging.
   -

   Authentication error responses now return the correct HTTP status codes
   (e.g., 403) and proper SOAP faults where applicable.

*⚠️ Upgrade considerations*


   -

   Because the minimum Java version is now 21, please validate that your
   runtime and any custom extensions are compatible before upgrading.
   -

   As always, we recommend backing up your database and thoroughly testing
   the new release in a non-production environment before deploying to
   production.


Best regards,
The Unity-IdM Team