Dear Subscribers,
On behalf of the Unity Team, I'm happy to announce that release 2.8.0 is
out.
/When installing this release as an update a migration will be performed
and some configuration changes ARE necessary (but will to simplify your
existing configs). Make sure to make backup and read update instructions
in the documentation.
/
Some most important highlights are:
Binding agnostic authenticators
With Unity 2.8.0 release authenticators setup was simplified.
Authenticators are not binding-specific anymore, the concepts of
credential verificator and retrieval are used only under the hood and so
administrator need not to even know them. This change requires a
significant amount of changes in configuration. While this may sound
disturbing, the good aspect is that those changes will simplify your
configuration, in some cases significantly. Upgrade documentation
contains a detailed instruction with examples.
UpMan
By far the biggest addition to Unity in this release is a new endpoint:
Unity Project Management, UpMan. This endpoint addresses a frequently
asked problem of delegation of particular Unity group management to a
group-administrator, who otherwise has no full Unity admin rights.
UpMan, besides providing a complex workaround around authorization
issues, also exposes a user firendly UI, simple and task-focussed.
Project manager is not bothered with Unity specific terms and difficult
pipelines; instead simple tasks are just simple.
Currently the v1 of UpMan is naturally limited — we would love to hear
your thoughts!
Form enhancements
* Sticky enquiry: a new type of enquiry is introduced, which is
intended for repeatable user updates. Sticky forms can be filled
multiple times, and are not “pushed” to the users at login. Instead
user may fill it by entering form’s link on its own, or one of the
following two features can be used:
* Sticky enquiries can be included on HomeUI
* Invitations to enquiries are now possible
* Grid widget & search for remote registration is available
* It is possible to filter allowed groups when creating an invitation
to a form.
* Flexible control of users for whom enquiry is applicable was added.
Public and native OAuth clients
Support for public and native OAuth clients, including PKCE is added.
RFC 7636 is supported now, along with the key guidelines for
authenticating native clients from RFC 8252.
Other notable changes
* Support of PNG and GIF images in attributes, thanks to Remek, our
new contributor
* Historical passwords (used for checking recent passwords) are
removed when password hashing policy is changed.
* After modification of local credential config, authenticators using
it are automatically refreshed.
* Larger default and in general configurable limit of maximum
attribute size.
Big thanks for all who helped with this release. As always more detailed
changelog is available on the Downloads page:
http://www.unity-idm.eu/downloads/
Best regards,
Krzysztof
//
|