• We added a consistent footer across all screens with links to How to Get Logs article, FAQ and a button to email our 24x7 support
• Map group names send by the SAML IdP to the pre-existing application groups, to add the user provisioned on successful login added to these automatically
• Where available use whitelist to control the ability for the SAML IdP to redirect to URLs other than the baseURL
• EasySSO for Bitbucket adds a configuration option in EasySSO/NTLM/Advanced Configuration screen to display the HTTP(S) clone URLs before SSH ones in the default "clone" dialog
• Updates to EasySSO SAML with Azure AD documentation
• Listed in Azure AD Enterprise Applications gallery: EasySSO for Jira, EasySSO for Confluence, EasySSO for Bitbucket, EasySSO for Bamboo
• Improved Jira Mobile app compatibility
• HTTP Headers authenticator can be applied to all URLs now
• Extended logging for the SAML Management endpoint
• Fixes for the SAML IdP metadata import from a URL
• Small usability fixes
• Bugfixes

• Added regex parse and replace capability to X.509 authenticator to handle complex conversions. See updated EASYSSO WITH X.509 - CONFIGURATION page for details.
• Restored regex parse and replace capability in SAML. See PARSING USERNAMES FUNCTIONALITY WHEN USING SAML page for details.
• Updated HOW TO CONFIGURE EASYSSO WITH NTLM/KERERBOS instructions
• Updated I HAVE NTLM WORKING, HOW DO I ENABLE KERBEROS SUPPORT? page

• Fixed XSRF vulnerability in admin screens of EasySSO
• Fixed After upgrade to Confluence 7.3 and/or Java 11, EasySSO stops working. It's no longer necessary to do ADDITIONAL CONFIGURATION FOR JAVA 11
• Fixed intermittent failures on upgrade of EasySSO due to incorrect implementation of cluster locking
• Added forgotten password and captcha URLs to the default excludes for SAML
• Included REST URLs previously ignored by NTLM/Kerberos/X.509/HTTP Headers authenticators that a human likely to trigger (e.g. search) to perform SSO if a session previously established has expired.

• Fixed SAML Single Log-out (SLO) doesn't work with Keycloak
• Fixed SAML exclusions do not allow to exclude /plugins/*

Taking EasySSO for Bamboo Sever to the same functional level as EasySSO for Jira Server, EasySSO for Confluence Server, and EasySSO for Bitbucket Server

• added SAML authenticator - for integration with Identity Providers like ADFS, Azure AD, G Suite, PingOne, Keycloak, and SimpleSAML.php
• separated X.509 authenticator into the dedicated UI
• separated HTTP Headers authenticator into the dedicated UI
• revamped UI for NTLM/Kerberos authenticator

• improved security in HTTP Headers authenticator.
• increased maximum waiting time for a response to a SAML request
• fix for possible infinite loop on logout with SAML authenticator
• changes to some internal UI element

• Removed a web resource module from the app which conflicted with version 5.9 of Bamboo.
• Fixed a bug where some URL paths which should be excluded from SSO were not being ignored as intended.
• User session will no longer time out after a long period of inactivity
• We have changed the default user agent filtering to make it easier to set up application links without having to do any special configuration in EasySSO.

• Fixed a bug where uploading a new Jespa trial license on top of an existing expired could be result in EasySSO still reporting that the license was expired.

• Fixed a bug where IP filtering would not properly work when a specific port of an IP address was specified in the request header.

IOPLEX Jespa library 1.2.x introduced some incompatible changes to code and encryption of licenses. This fix addresses this incompatibility and makes EasySSO support both old and new versions of Jespa

This release contains no new features, but it includes some core changes to request filtering.

• We've fixed a problem that could cause the add-on to fail to enable if the jespa.log location was set incorrectly.
• Made some changes to the IP address filter to properly support several fringe use-cases.

• Native support for X.509 client certificate authentication
• Support for external authentication (e.g. in front-facing reverse proxies) via header-based integration
• Support for custom authenticator add-ons via attribute-based integration

• EasySSO Configuration UI has been completely redesigned to be less busy: the main screen now contains the minimum required fields, a progress tracker has been introduced, any values that could have reasonable defaults have them now
• Parameter values validation has been added - less chances to make mistakes
• Additional configuration parameters, IP Filtering, User-Agent Filtering and Advanced Filtering have been moved under "Advanced" button
• "Test Connection" button has been added to enable testing the connection to the domain controller
• SetComputerPassword.vbs script is now available for download directly from the UI
• “Troubleshooting” button allows you to download the logs and inspect them to check if anything has gone wrong
• “About” button opens a dialog that allows you to review the status of your licenses, including the IOPLEX Jespa one, as well as the mode in which EasySSO is operating
• Offline installation instructions have been added - for installing without no internet connection

• EasySSO Configuration UI has been completely redesigned to be less busy: the main screen now contains the minimum required fields, a progress tracker has been introduced, any values that could have reasonable defaults have them now

• Parameter values validation has been added - less chances to make mistakes
• Additional configuration parameters, IP Filtering, User-Agent Filtering and Advanced Filtering have been moved under "Advanced" button
• "Test Connection" button has been added to enable testing the connection to the domain controller
• SetComputerPassword.vbs script is now available for download directly from the UI
• “Troubleshooting” button allows you to download the logs and inspect them to check if anything has gone wrong
• “About” button opens a dialog that allows you to review the status of your licenses, including the IOPLEX Jespa one, as well as the mode in which EasySSO is operating
• Offline installation instructions have been added - for installing without no internet connection

• User-Agent Filtering: config screen now supports parsing arbitrary UA strings on demand
• UserAgentUtils library has been updated to version 1.20
• Cookie Opt-Out: Admins can enable SSO opt-out via cookie in Advanced Filtering tab, users can opt-out in their User Profile settings, anonymous users can opt-out if enabled (to support regular non-domain users)
• new IP Filtering tab in EasySSO config
• ability to specify client IP addresses whitelist and blacklist as single IP, IP ranges, in CIDR, and host-based notation
• ability to specify regex-based whitelist and blacklist for client IP addresses
• the old "Included IP Addresses" regex client IP address filter configuration will be migrated to the new "IP Regex Whitelist" automatically
• Support for reverse proxies, local, remote, and multiple chained reverse proxies
• Reduced log chattiness when EasySSO trial license or evaluation license has expired
• Fix for uploading fresh ioplex.zip over already expired trial one
• bug fixes and improvement

• compatibility with Data Center
• new IP Filtering tab
• added ability to specify client IP addresses whitelist and blocklist, supports single IP, ranges, CIDR and host-based notation
• added ability to specify client IP addresses Regex-based whitelist and blocklist
• "Included IP Addresses" field, a client IP address filter based on Regular Expression has been migrated to the new "IP Filtering" tab as "IP Regex Whitelist" and enhanced to support a list of expressions, one per line. The new field is backward compatible with the old field and will make the old pre-existing value to appear in the new field and continue to work after upgrade.
• Support for local reverse proxies in IP filtering
• User-Agent Filtering screen now supports parsing arbitrary UA strings - to simplify writing filtering rules
• Cookie Opt-Out: Admins can enable SSO opt-out via cookie in Advanced Filtering tab, users can opt-out in their User Profile settings
• fix for fresh IOPLEX .zip upload over already expired trial one

• debug logging for Kerberos
• NPE on Kerberos server credentials expiry
• fixes in KDC DNS discovery
• additional escaping for values in the config screen
• TechTime Plugins section in Add-Ons admin screen

• debug logging for Kerberos
• NPE on Kerberos server credentials expiry
• fixes in KDC DNS discovery
• additional escaping for values in the config screen
• TechTime Plugins section in Add-Ons admin screen

• fixed issue with excessive Jespa library re-initialisation on startup when big number of other add-ons is present
• fixed issue with Kerberos pre-auth and timing out of credentials

• Support for Kerberos authentication has been added
• now works on Mac OS X and Linux (if joined to a domain)
• as always works on Windows - but better than ever!

This is a port of EasySSO for Jira and Confluence to Bamboo