Bugfix for issues with login failures in some Jira versions that were introduced by a bug fix made available in v2.0.18.

Bugfix for issues with login failures in some Jira versions that were introduced by a bug fix made available in v2.0.18.

Publishing the "BeforeUserAuthenticate" event before every login attempt to ensures that all the operations required before a login attempt are performed and this also fixes the issue causing login failures due to a corrupted cache.

Publishing the "BeforeUserAuthenticate" event before every login attempt to ensures that all the operations required before a login attempt are performed and this also fixes the issue causing login failures due to a corrupted cache.

• Added support for comma separated group values received from IDP.
• Added a fix for error faced when Jira's restrict credentials feature is enabled.

• Added support for comma separated group values received from IDP.
• Added a fix for error faced when Jira's restrict credentials feature is enabled.

• Performance improvement
• Pagination to speed up the slow loading of the Audit page
• Improved UI for Audit logs
• Added a fix for Null Pointer Exception being thrown when multiple group attributes are configured in the plugin

• Performance improvement
• Pagination to speed up the slow loading of the Audit page
• Improved UI for Audit logs
• Added a fix for Null Pointer Exception being thrown when multiple group attributes are configured in the plugin

New feature

• Added support for Just in time user profile update on successful header-based authentication

Bugfix

• Bugfix for the NPE exception that occurs when the value of group attribute in a SAML response is empty
• Bugfix for printing an unnecessary NPE exception in the Jira application logs while processing the SAML logout

New feature

• Added support for Just in time user profile update on successful header-based authentication

Bugfix

• Bugfix for the NPE exception that occurs when the value of group attribute in a SAML response is empty
• Bugfix for printing an unnecessary NPE exception in the Jira application logs while processing the SAML logout

• Made the plugin compatible with Jira version 9.0.0
• Updated the setup guide links to our point to our new and revamped Setup Guides

• Made the plugin compatible with Jira version 9.0.0
• Updated the setup guide links to our point to our new and revamped Setup Guides

• Updated support contact information
• Added a fix for bug where NPE is thrown while checking for issuer in the SAML Response.

• Updated support contact information
• Added a fix for bug where NPE is thrown while checking for issuer in the SAML Response.

New Features

• Added user provisioning for Header Based Authentication
• Added improvements to the Troubleshooting and Auditing framework
• Added feature to configure IDP specific SP Entity ID

Bugfixes:

• Fixed an issue where the default redirection rule wasn't being invoked incase of multiple IDPs
• Fixed an issue where the Redirect URL was throwing 404 after user session timeout.
• Fixed an issue where admin privileges are directly assigned after SSO

New Features

• Added user provisioning for Header Based Authentication
• Added improvements to the Troubleshooting and Auditing framework
• Added feature to configure IDP specific SP Entity ID

Bugfixes:

• Fixed an issue where the default redirection rule wasn't being invoked incase of multiple IDPs
• Fixed an issue where the Redirect URL was throwing 404 after user session timeout.
• Fixed an issue where admin privileges are directly assigned after SSO

New Feature | Options:

• Audit logs
• Added an option to disable login using local Jira credentials
• Added dedicated setup video for each configuration

Bugfix:

• Bugfix for an issue with editing redirection rule configuration
• Bugfix for an issue with auto-updating metadata from configured URL

New Feature | Options:

• Audit logs
• Added an option to disable login using local Jira credentials
• Added dedicated setup video for each configuration

Bugfix:

• Bugfix for an issue with editing redirection rule configuration
• Bugfix for an issue with auto-updating metadata from configured URL

New Features

New Features

New Features:

• Added option to create new users in a specific user directory using SSO
• Passive SSO - Added a feature to allow SSO only if IDP sessions already exist
• Added option to Remember IDP for login
• Added option to customize delay time for auto redirect to IDP
• Added option to redirect users to default IDP for authentication if the user does not select any authentication method/IDP in a given timeframe
• Added authenticated Rest API to enable/disable SSO
• Added option show/hide default login form along with SSO Login button

Bugfix:

• All external JavaScript dependencies are removed, which was causing plugin configuration page load issues in some instance

New Features:

• Added option to create new users in a specific user directory using SSO
• Passive SSO - Added a feature to allow SSO only if IDP sessions already exist
• Added option to Remember IDP for login
• Added option to customize delay time for auto redirect to IDP
• Added option to redirect users to default IDP for authentication if the user does not select any authentication method/IDP in a given timeframe
• Added authenticated Rest API to enable/disable SSO
• Added option show/hide default login form along with SSO Login button

Bugfix:

• All external JavaScript dependencies are removed, which was causing plugin configuration page load issues in some instance

• Bugfix for SSO redirection from Jira's "Loggin and Profiling" page
• Fixed relay state issue in the mobile browser SSO
• Bugfix for failed sso if evaluation license expired

• Bugfix for SSO redirection from Jira's "Loggin and Profiling" page
• Fixed relay state issue in the mobile browser SSO
• Bugfix for failed sso if evaluation license expired

New Features:

• Added option to skip SSO if the request came from a specific device (User-Agent)
• A regular expression can be used to exclude group(s) from the Just-in-Time group provisioning setup
• The public cert will be sent in the signed HTTP Post SAML Authentication Request

Bugfix:

• Bugfix for metadata rollover functionality of the plugin

New Features:

• Added option to skip SSO if the request came from a specific device (User-Agent)
• A regular expression can be used to exclude group(s) from the Just-in-Time group provisioning setup
• The public cert will be sent in the signed HTTP Post SAML Authentication Request

Bugfix:

• Bugfix for metadata rollover functionality of the plugin

New Features:

• Force Authentication - force re-authentication of users even if the user has an SSO session at the IDP
• Additional parameter to define SSO Redirection rule for users i.e. "contains"

Bugfix:

• Bugfix for SSO-Button doesn't appear on the WedSudo authentification pop-up
• Bugfix for SSO button does not appear on delete project WebSudo authentification page
• Bugfix for Group mapping issue with Keycloak roles

New Features:

• Force Authentication - force re-authentication of users even if the user has an SSO session at the IDP
• Additional parameter to define SSO Redirection rule for users i.e. "contains"

Bugfix:

• Bugfix for SSO-Button doesn't appear on the WedSudo authentification pop-up
• Bugfix for SSO button does not appear on delete project WebSudo authentification page
• Bugfix for Group mapping issue with Keycloak roles

• Added a fix for NPE in IDP initiated SSO flow

• Added a fix for NPE in IDP initiated SSO flow

• Added option to configure No SSO URL(s): SSO redirection to IDP for specific URLs used for integration with other applications will be disabled
• Added option to configure multiple IDP Signing Certificate
• Bugfix for SSO redirection not working if JS is disabled in the browser

• Added option to configure No SSO URL(s): SSO redirection to IDP for specific URLs used for integration with other applications will be disabled
• Added option to configure multiple IDP Signing Certificate
• Bugfix for SSO redirection not working if JS is disabled in the browser

Changed the name of SESSIONCOOKIE to mo.jira-sso.SESSIONCOOKIE to prevent conflict with other apps.

Changed the name of SESSIONCOOKIE to mo.jira-sso.SESSIONCOOKIE to prevent conflict with other apps.

UI Improvements:

• Added IDP Id to the overview page which helps in adding the IDP to custom login page and test the IDP before adding it to login page
• Fixed the buttons whose text would disappear on hover

Bug Fixes:

• Fixed the session timeout after test configuration while adding a new IDP

Improvements:

• Enhanced security of the internal APIs used by the app

UI Improvements:

• Added IDP Id to the overview page which helps in adding the IDP to custom login page and test the IDP before adding it to login page
• Fixed the buttons whose text would disappear on hover

Bug Fixes:

• Fixed the session timeout after test configuration while adding a new IDP

Improvements:

• Enhanced security of the internal APIs used by the app

In version 2.0.0, SSO failed if you have SSO disabled for either Jira Software or Jira Service Management in Global SSO Settings menu of the app. Fix for that bug is released in this version.

In version 2.0.0, SSO failed if you have SSO disabled for either Jira Software or Jira Service Management in Global SSO Settings menu of the app. Fix for that bug is released in this version.

We have done very significant frontend changes in this version, which we're sure you will appreciate once you upgrade the app.

As a part of UI rework, some settings are moved to new sections. This means the structure of the plugin backup file has changed too.

We've created a handbook which provides reference for all the settings available in the app.

Before You Upgrade:

• Refer to this guide to know which settings are moved where.
• Download the plugin configurations backup file from Backup and Restore Menu

After You Upgrade:

• Test it on your staging environment.
• If you're using plugin configurations backup file in any script, download the new plugin backup file from Backup and Restore menu.

Changelog:

• Reworked User Interface with Quick IDP Setup Wizard [Reference]
• Added Redirection Rules option where you can configure multiple rules for IDP selection for different types of users.[Reference]
• Added a Plugin Tour to assist you in configuring the app

Please read the full release notes here

We have done very significant frontend changes in this version, which we're sure you will appreciate once you upgrade the app.

As a part of UI rework, some settings are moved to new sections. This means the structure of the plugin backup file has changed too.

We've created a handbook which provides reference for all the settings available in the app.

Before You Upgrade:

• Refer to this guide to know which settings are moved where.
• Download the plugin configurations backup file from Backup and Restore Menu

After You Upgrade:

• Test it on your staging environment.
• If you're using plugin configurations backup file in any script, download the new plugin backup file from Backup and Restore menu.

Changelog:

• Reworked User Interface with Quick IDP Setup Wizard [Reference]
• Added Redirection Rules option where you can configure multiple rules for IDP selection for different types of users.[Reference]
• Added a Plugin Tour to assist you in configuring the app

Please read the full release notes here

Bugfix for the false warning message for certificate expiration

Bugfix for the false warning message for certificate expiration

Improved SP certificate expiry email notification scheduler which informs about upcoming SP certificate expiry.

Improved SP certificate expiry email notification scheduler which informs about upcoming SP certificate expiry.

Fixed the bug in version 1.1.50 due to which SSO was failing if the relay state is missing in SAML Response

Fixed the bug in version 1.1.50 due to which SSO was failing if the relay state is missing in SAML Response

Improvments:

• Generate Certificate button in Certificates tab to create new SP certificates

Fixes

• Fixed issue with some sections not showing up in Jira 8.12
• Fixed Admin SSO when Lax samesite attribute is set for cookies.

Improvments:

• Generate Certificate button in Certificates tab to create new SP certificates

Fixes

• Fixed issue with some sections not showing up in Jira 8.12
• Fixed Admin SSO when Lax samesite attribute is set for cookies.

The app's default certificate will expire on October 28, 2020. You can find steps to replace it with a new certificate in the Certificates tab. You can check the steps in the link below too.

https://faq.miniorange.com/knowledgebase/can-update-default-x-509-certificate-miniorange-plugin/

We have also introduced the ability to generate & configure a new X.509 certificate in the app.

The app's default certificate will expire on October 28, 2020. You can find steps to replace it with a new certificate in the Certificates tab. You can check the steps in the link below too.

https://faq.miniorange.com/knowledgebase/can-update-default-x-509-certificate-miniorange-plugin/

We have also introduced the ability to generate & configure a new X.509 certificate in the app.

Added Compatibility for Jira 8.11 by fixing user profile updated and auto-activation of users on SSO.

Added Compatiblity for Jira 8.11 by fixing user profile update and auto-activation of users on SSO.

Added an option to toggle Replayed assertion check

Added an option to toggle Replayed assertion check

Added a configurable option to restrict access to plugin APIs from outside the Jira instance.

Added a configurable option to restrict access to plugin APIs from outside the Jira instance.

Features:

• Deactivated users can be auto-activated on successful SSO.
• Header based authentication - Use the username present in request headers to SSO into Jira.

Improvements:

• Default Groups configured in Read-only with local groups directories will be assigned to users on first SSO (no configuration required)

Security Fixes:

• Replayed SAML assertions will be rejected.
• App's internal APIs can no longer be used from the external host

Features:

• Deactivated users can be auto-activated on successful SSO.
• Header based authentication - Use the username present in request headers to SSO into Jira.

Improvements:

• Default Groups configured in Read-only with local groups directories will be assigned to users on first SSO (no configuration required)

Security Fixes:

• Replayed SAML assertions will be rejected.App's internal APIs can no longer be used from the external host

• Fixed Auto-Redirect Delay issue on Admin SSO
• Admin session will be created while accessing admin functionalities only.
• Added descriptive error and success response messages to Enable Backdoor URL API

• Fixed Auto-Redirect Delay issue on Admin SSO
• Admin session will be created while accessing admin functionalities only and not during initial SSO.
• Added descriptive error and success response messages to Enable Backdoor URL API

Fixed relay state issue in IDP initiated login flow

Fixed relay state issue in IDP initiated login flow

Features:

• Feedback form : Admin can submit feedback without deactivating the app, so we can use it to improve the app.
• Added option to restore/backup app configuration through REST API
• Added option to restrict users from changing the Jira password
• Added an option to send AuthContextClassRef parameter in SAML Request.
• LoginEvent will be published after each successful SSO.

• Restricted relay state redirection to different domains.

• White listed plugin endpoints and custom templates in anonymous access option

Features:

• Feedback form : Admin can submit feedback without deactivating the app, so we can use it to improve the app.
• Added option to restore/backup app configuration through REST API
• Added option to restrict users from changing the Jira password
• Added an option to send AuthContextClassRef parameter in SAML Request.
• LoginEvent will be published after each successful SSO.

Bug fixes:

• Restricted relay state redirection to different domains.
• White listed plugin endpoints and custom templates in anonymous access option

• Added Compatibility for Jira version 8.6 and higher
• Bug fix for missing SSO option on customer portal login page

• Added Compatibility for Jira version 8.6 and higher
• Bug fix for missing SSO option on customer portal login page

Features:

• Option to design custom login page template
• Customizable/Removable option of contact information from metadata

Fixes:

• Fixed Import configurations. All the existing app configurations will be overwritten by the imported configurations including existing IDP configurations.
• Fixed default group issue which occurred when default application role for new users is not configured

Features:

• Option to design custom login page template
• Customizable/Removable option of contact information from metadata

Fixes:

• Fixed Import configurations. All the existing app configurations will be overwritten by the imported configurations including existing IDP configurations.
• Fixed default group issue which occurred when default application role for new users is not configured

• Made UI fixes in User Groups tab and SSO Login dropdown
• Made app compatible with Jira 8.4

• Made UI fixes in User Groups tab and SSO Login dropdown
• Made app compatible with Jira 8.4

• Bug Fix: Handled group update failure for Read/Write access type of directory users during SSO
• Bug fix: Group mapping for existing users
• Compatibility with Java 11

• Bug Fix: Handled group update failure for Read/Write access type of directory users during SSO
• Bug fix: Group mapping for existing users
• Compatibility with Java 11

• Fixed issue with default group not being assigned to new users
• Fixed issue with custom attributes not being assigned to existing users
• Fixed issue with ServiceDesk SSO with multiple IDPs

• Fixed issue with default group not being assigned to new users
• Fixed issue with custom attributes not being assigned to existing users
• Fixed issue with ServiceDesk SSO with multiple IDPs

• Updated contact us details

• Updated contact us details

• Bug fix for domain based auto-redirection to IDP.

• Bug fix for domain-based auto-redirection to IDP

Feature:

• Assign new groups from IDP SAML response with/without affecting the user's existing groups. This is useful only when On the Fly Group Mapping is enabled.

Feature:

• Assign new groups from IDP SAML response with/without affecting the user's existing groups. This is useful only when On the Fly Group Mapping is enabled.

• Enhancements in the User Groups tab:
  • Removed Search Filter. The local groups will be loaded dynamically in Default groups and Group mapping section as you start typing the name
  • Users will only be added or removed from the mapped groups and groups added as default groups depending on the options selected in the app.
  • Separate sections for Manual group mapping and On-the-fly group mapping configurations.
• Added a User Directory Information tab which explains the behavior of SSO when external user directories are configured and recommends app configurations for different user directory permissions.

• Enhancements in the User Groups tab:
  • Removed Search Filter. The local groups will be loaded dynamically in Default groups and Group mapping section as you start typing the name
  • Users will only be added or removed from the mapped groups and groups added as default groups depending on the options selected in the app.
  • Separate sections for Manual group mapping and On-the-fly group mapping configurations.
• Added a User Directory Information tab which explains the behavior of SSO when external user directories are configured and recommends app configurations for different user directory permissions.

• Bug fix for saving groups mapping configuration

• Bug fix for saving groups mapping configuration

• Added option to restrict default group assignment
• UI changes in User Group Tab
• Updated tab name Download Plugin Settings => Download APP Settings

• Added option to restrict default group assignment
• UI changes in User Group Tab
• Updated tab name Download Plugin Settings => Download APP Settings

Bug Fixes:

• Fixed NullPointer exception in sending the unsigned request.
• Fixed cast exception in RememberMe-Cookie.
• Minor UI changes

• Made Compatibile with Jira Data Center

• Added Jira 8.x Compatibility

Enhancements:

• Added IDP guides for Auth0, RSA and CA IdentityUpdated all the IDP guides
• Performance improvement in SSO flow.
• UI improvements in Flow Driven Setup

Fixes:

• Fixes in On-the-Fly group mapping flow
• Handled SSO failure when auto redirect it enabled.
• Fixed the issue with sections in SSO Settings tab which occurred when nFeed plugin was also installed.
• Fixed the issue with SSO login button on Jira ServiceDesk.

• Added IDP configuration guides for Ping One and AuthAnvil
• Fixed the mapped groups list to show groups in alphabetical order
• Added link to Frequently Asked Questions and miniOrange forum where users can ask any plugin/SSO related questions.
• Renamed option Enable SSO for ServiceDesk to Enable SSO for ServiceDesk Customer Portal

• Added IDP configuration guides for Ping One and AuthAnvil
• Fixed the mapped groups list to show groups in alphabetical order
• Added link to Frequently Asked Questions and miniOrange forum where users can ask any plugin/SSO related questions.

• On the fly group mapping - Added option to create and map user IDP groups to local groups during user SSO.
• Custom attribute mapping - Added option to map user's additional profile attributes to user's JIRA profile.
• Fix for prevent anonymous access fix to not dashboard URL.
• Improved troubleshooting instructions in Test Configuration.

• Feature:
  • Added an option to assign default group to all users. Default groups can now be assigned to users belonging to the external user directories with "Read Only with Local Groups" or "Read/Write" permission.

• Fixes:

  • Minor fixes in Flow-Driven Plugin Configuration.
  • Minor fixes in group mapping.

Fixed the flow for HTTP-POST SSO/SLO requests.

• Session Timeout Fix: Premature expiration of session is fixed.
• Disable Anonymous access - Redirect to IDP from all pages
• Customizable Backdoor URL - Backdoor URL parameters can be changed to anything.
• Backdoor URL Restriction - Allow users of only certain groups to access backdoor URL.
• API to Enable Backdoor URL - Backdoor can be enabled using API provided in the plugin to access login form.

• Flow-driven plugin configuration.
• Bug fix in the Group Mapping for user belongs to the external user directory connected with SSL.
• Bug fix for Single Logout in Jira Service Desk 3.2 and the previous version.
• Bug fix for customer login (if there are no specific groups for customers) in JIRA Service Desk.
• Fix for UI issue in the Backdoor URL configuration.

• Fixed Single Sign-on issues with Jira Service Desk where the user would get stuck in a Redirect loop or get logged out.
• Fixed Session timeout flow for Jira Service Desk

• Azure AD Metadata Import fix
• Refresh Metadata Fix: IDP configurations won't be reverted after IDP metadata is refreshed.
• Secure cookies: Made all the cookies created by plugin secure and http-only
• XML Canonicalization SAML Vulnerability fix

• Support to request a particular Name ID format from an IDP if the IDP supports it.
• Fixed the error logs issue - "An exception occurred while initializing IDP Configurations"

• Restored checkbox to enable error message template
• Fixed relay state sent when auto redirect delay is activated during service desk SSO

• Added group based SSO for JIRA ServiceDesk to let only agents use Single Sign-On
• UI changes for Sign In Settings tab and Configure IDP tab
• Update user groups only for groups against which value is filled

• Added an option to enable/disable Jira and Jira ServiceDesk SSO login separately.
• Added compatibility for German and other non-english characters in SAML Response.
• Account tab is removed.
• Changes in tab names:
  • Configure IDP -> SP Info
  • Configure SP -> Configure IDP
  • Attribute Mapping -> User Profile
  • Group Mapping -> User Groups
  • Import/Export -> Download Settings
• Added a troubleshooting tab which has information about how to download logs for the plugin, plugin configuration, SAML Request and SAML Response.

• JIRA ServiceDesk login flow fix for multiple IDPs
• Admin authentication flow fix

Fixed the bug where email address attribute was used as the username for SSO.

We have made significant changes to the plugin framework. Even though the changes have been extensively tested we suggest you make sure to test the plugin in your own environment after the upgrade.

• Multiple IDP support
• Login using email for Google and other IDPs (in Attribute Mapping)
• Restrict user creation (in Group Mapping)

• Downloadable plugin configurations which can be transferred from test to production using Import/Export feature and can be sent in support query
• Jira Service Desk support widget added
• IDP specific metadata options and instructions for Okta, AD FS, Azure AD, Onelogin and G Suite.
• Service Provider certificate details such as serial number, validity etc. in human-readable format and copy button for the certificate.
• Added admin session protection for plugin configurations.

Please consider refreshing browser cache once the plugin is updated.

• Bug fix for supporting encryption with Okta
• UI improvements

Fixes in version 1.1.9

• Added feature to set username as per another attribute using regular expression
• Fixed group mapping issues for OneLogin in case user belongs to multiple groups

• Updated add-on compatibility to support versions above 6.3.15
• Added metadata refresh time
• Added custom logout URL
• Added custom logout page template
• Added custom error page template
• Added option to accept SAMLResponse despite time error
• Added option to introduce delay in auto-redirect
• Added expiry notification for certificate
• Enhanced attribute mapping for username
• Enhanced default groups option to accept multiple values
• Fixed group mapping for existing users
• Fixed 500 error on error message from IDP
• UI fixes and improved hints

• Fix on user login without SSO
• Fix to set session timeout to default on disabling RememberMe option

• Added option to set custom SP certificate
• Added option to upload IDP metadata
• Added option to set relay state
• Manage admin session redirects and login separately
• Added option to set session timeout
• Added option to enable remember me for users
• Added Shibboleth IDP guides
• UI change for menu
• Fixed 404 issue while configuration
• Fixed 404 issue while SSO for Jira 7.2.x & 7.3.x
• Fix in UI while saving data

• Added setup guides to help setup the plugin with IDP

• Fixed 404 issue while configuring plugin
• Removed login and registration through miniOrange
• Added update user profile attributes on SSO
• Added option to disable update of attributes on single sign on
• UI changes in the plugin; copy to clipboard for plugin SSO URLs
• Fix in request unsigned for POST
• Licensing check fix

Added Option to Sign SAML Request

• Fixed the dependency causing 404 error on configuration.
• Fixed the exception occurred while checking evaluation license.

• Added backdoor URL for administrators also
• Fixed issue where login page reloads when plugin is configured
• Fixed SSO flow to save login count and timestamp
• Licensing Plans tab removed and Support Plans tab added
• Improvement in licensing check

• Trial Period for Premium plugin
• Converting plugin to Paid-via-Atlassian
• Added feature to view SAML Request and Response for debugging
• Better troubleshooting using Test Configuration
• Change in pricing