Improvement

• Exciting News! In the latest release for our Jira SAML app, we're delighted to announce that you can now get the SCIM (System for Cross-domain Identity Management) app for free! Enhance your identity management capabilities seamlessly with SCIM integration. Download today to enjoy the latest features and unlock the power of SCIM at no additional cost! Visit the "User Sync" Tab in the plugin settings for more information.

New Features

• You now have an option to login users using any custom attribute you might have in your IDP, instead of just the username or email attributes.
• Option to convert group names to lowercase in the On The Fly group mapping feature.

Improvements

• Exciting News! In the latest release for our Jira SAML app, we're delighted to announce that you can now get the SCIM (System for Cross-domain Identity Management) app for free! Enhance your identity management capabilities seamlessly with SCIM integration. Download today to enjoy the latest features and unlock the power of SCIM at no additional cost! Visit the "User Sync" Tab in the plugin settings for more information.

New Features

• You now have an option to login users using any custom attribute you might have in your IDP, instead of just the username or email attributes.
• Option to convert group names to lowercase in the On The Fly group mapping feature.

• Account section introduced to view plugin license details
• Email service for license expiry
• Improvements in the licensing module

• Account section introduced to view plugin license details
• Email service for license expiry
• Improvements in the licensing module

Improvements

• Updated Quicsetup guide for quick setup flow
• Enhance the capability to show only the SSO button for the Websudo login page

Bugfix

• Bug fix for IDP-initiated SAML logout flow
• Bug fix for showing session timeout warning message on inactive tabs despite the user's session being active
• Bug fix for comma-separated group mapping configuration

Improvements

• Updated Quicsetup guide for quick setup flow
• Enhance the capability to show only the SSO button for the Websudo login page

Bugfix

• Bug fix for IDP-initiated SAML logout flow
• Bug fix for showing session timeout warning message on inactive tabs despite the user's session being active
• Bug fix for comma-separated group mapping configuration

Bug fix for a miniOrange license framework issue that blocked access to the plugin configuration

Bug fix for a miniOrange license framework issue that blocked access to the plugin configuration

SSO button fix for admin permissions pop-up which is displayed while editing the project workflow if the user's admin session doesn't exist.

SSO button fix for admin permissions pop-up which is displayed while editing the project workflow if the user's admin session doesn't exist.

The app's default certificate (SP certificate) will expire on July 15, 2023. You can find steps to replace it with a new certificate in the Certificates tab. You can check the steps in the link below too.

https://faq.miniorange.com/knowledgebase/update-saml-certificate-miniorange-plugin/

The app's default certificate (SP certificate) will expire on July 15, 2023. You can find steps to replace it with a new certificate in the Certificates tab. You can check the steps in the link below too.

https://faq.miniorange.com/knowledgebase/update-saml-certificate-miniorange-plugin/

New Feature

• Added a feature to enable a warning a message before a user is logged out

Bug Fix

• Added some certificate compatibility fixes for Java version 11
• Fixed an issue with the Remote Directory Sync feature

New Feature

• Added a feature to enable a warning a message before a user is logged out

Bug Fix

• Added some certificate compatibility fixes for Java version 11
• Fixed an issue with the Remote Directory Sync feature

• Added fix for the Remember my IDP functionality, where the cookie wasn't being set properly.

• Added fix for the Remember my IDP functionality, where the cookie wasn't being set properly.

Bugfix for redirection rule configuration not showing all IDPs

Bugfix for redirection rule configuration not showing all IDPs

Adding a fix for the redirection loop issue introduced in the last release(v2.0.20)

Adding a fix for the redirection loop issue introduced in the last release(v2.0.20)

• We've added a few UI Improvements to the user and group provisioning sections.
• Added a fix for an issue where the error message isn't displayed if a user enters password incorrectly.
• Added a fix for the Remember My IDP feature

• We've added a few UI Improvements to the user and group provisioning sections.
• Added a fix for an issue where the error message isn't displayed if a user enters password incorrectly.
• Added a fix for the Remember My IDP feature

Bugfix for issues with login failures in some Jira versions that were introduced by a bug fix made available in v2.0.18.

Bugfix for issues with login failures in some Jira versions that were introduced by a bug fix made available in v2.0.18.

Publishing the "BeforeUserAuthenticate" event before every login attempt to ensures that all the operations required before a login attempt are performed and this also fixes the issue causing login failures due to a corrupted cache.

Publishing the "BeforeUserAuthenticate" event before every login attempt to ensures that all the operations required before a login attempt are performed and this also fixes the issue causing login failures due to a corrupted cache.

• Added support for comma separated group values received from IDP.
• Added a fix for error faced when Jira's restrict credentials feature is enabled.

• Added support for comma separated group values received from IDP.
• Added a fix for error faced when Jira's restrict credentials feature is enabled.

• Performance improvement
• Pagination to speed up the slow loading of the Audit page
• Improved UI for Audit logs
• Added a fix for Null Pointer Exception being thrown when multiple group attributes are configured in the plugin

• Performance improvement
• Pagination to speed up the slow loading of the Audit page
• Improved UI for Audit logs
• Added a fix for Null Pointer Exception being thrown when multiple group attributes are configured in the plugin

New feature

• Added support for Just in time user profile update on successful header-based authentication

Bugfix

• Bugfix for the NPE exception that occurs when the value of group attribute in a SAML response is empty
• Bugfix for printing an unnecessary NPE exception in the Jira application logs while processing the SAML logout

New feature

• Added support for Just in time user profile update on successful header-based authentication

Bugfix

• Bugfix for the NPE exception that occurs when the value of group attribute in a SAML response is empty
• Bugfix for printing an unnecessary NPE exception in the Jira application logs while processing the SAML logout

• Made the plugin compatible with Jira version 9.0.0
• Updated the setup guide links to our point to our new and revamped Setup Guides

• Made the plugin compatible with Jira version 9.0.0
• Updated the setup guide links to our point to our new and revamped Setup Guides

• Updated support contact information
• Added a fix for bug where NPE is thrown while checking for issuer in the SAML Response.

• Updated support contact information
• Added a fix for bug where NPE is thrown while checking for issuer in the SAML Response.

New Features

• Added user provisioning for Header Based Authentication
• Added improvements to the Troubleshooting and Auditing framework
• Added feature to configure IDP specific SP Entity ID

Bugfixes:

• Fixed an issue where the default redirection rule wasn't being invoked incase of multiple IDPs
• Fixed an issue where the Redirect URL was throwing 404 after user session timeout.
• Fixed an issue where admin privileges are directly assigned after SSO

New Features

• Added user provisioning for Header Based Authentication
• Added improvements to the Troubleshooting and Auditing framework
• Added feature to configure IDP specific SP Entity ID

Bugfixes:

• Fixed an issue where the default redirection rule wasn't being invoked incase of multiple IDPs
• Fixed an issue where the Redirect URL was throwing 404 after user session timeout.
• Fixed an issue where admin privileges are directly assigned after SSO

New Feature | Options:

• Audit logs
• Added an option to disable login using local Jira credentials
• Added dedicated setup video for each configuration

Bugfix:

• Bugfix for an issue with editing redirection rule configuration
• Bugfix for an issue with auto-updating metadata from configured URL

New Feature | Options:

• Audit logs
• Added an option to disable login using local Jira credentials
• Added dedicated setup video for each configuration

Bugfix:

• Bugfix for an issue with editing redirection rule configuration
• Bugfix for an issue with auto-updating metadata from configured URL

New Features

New Features

New Features:

• Added option to create new users in a specific user directory using SSO
• Passive SSO - Added a feature to allow SSO only if IDP sessions already exist
• Added option to Remember IDP for login
• Added option to customize delay time for auto redirect to IDP
• Added option to redirect users to default IDP for authentication if the user does not select any authentication method/IDP in a given timeframe
• Added authenticated Rest API to enable/disable SSO
• Added option show/hide default login form along with SSO Login button

Bugfix:

• All external JavaScript dependencies are removed, which was causing plugin configuration page load issues in some instance

New Features:

• Added option to create new users in a specific user directory using SSO
• Passive SSO - Added a feature to allow SSO only if IDP sessions already exist
• Added option to Remember IDP for login
• Added option to customize delay time for auto redirect to IDP
• Added option to redirect users to default IDP for authentication if the user does not select any authentication method/IDP in a given timeframe
• Added authenticated Rest API to enable/disable SSO
• Added option show/hide default login form along with SSO Login button

Bugfix:

• All external JavaScript dependencies are removed, which was causing plugin configuration page load issues in some instance

• Bugfix for SSO redirection from Jira's "Loggin and Profiling" page
• Fixed relay state issue in the mobile browser SSO
• Bugfix for failed sso if evaluation license expired

• Bugfix for SSO redirection from Jira's "Loggin and Profiling" page
• Fixed relay state issue in the mobile browser SSO
• Bugfix for failed sso if evaluation license expired

New Features:

• Added option to skip SSO if the request came from a specific device (User-Agent)
• A regular expression can be used to exclude group(s) from the Just-in-Time group provisioning setup
• The public cert will be sent in the signed HTTP Post SAML Authentication Request

Bugfix:

• Bugfix for metadata rollover functionality of the plugin

New Features:

• Added option to skip SSO if the request came from a specific device (User-Agent)
• A regular expression can be used to exclude group(s) from the Just-in-Time group provisioning setup
• The public cert will be sent in the signed HTTP Post SAML Authentication Request

Bugfix:

• Bugfix for metadata rollover functionality of the plugin

New Features:

• Force Authentication - force re-authentication of users even if the user has an SSO session at the IDP
• Additional parameter to define SSO Redirection rule for users i.e. "contains"

Bugfix:

• Bugfix for SSO-Button doesn't appear on the WedSudo authentification pop-up
• Bugfix for SSO button does not appear on delete project WebSudo authentification page
• Bugfix for Group mapping issue with Keycloak roles

New Features:

• Force Authentication - force re-authentication of users even if the user has an SSO session at the IDP
• Additional parameter to define SSO Redirection rule for users i.e. "contains"

Bugfix:

• Bugfix for SSO-Button doesn't appear on the WedSudo authentification pop-up
• Bugfix for SSO button does not appear on delete project WebSudo authentification page
• Bugfix for Group mapping issue with Keycloak roles

• Added a fix for NPE in IDP initiated SSO flow

• Added a fix for NPE in IDP initiated SSO flow

• Added option to configure No SSO URL(s): SSO redirection to IDP for specific URLs used for integration with other applications will be disabled
• Added option to configure multiple IDP Signing Certificate
• Bugfix for SSO redirection not working if JS is disabled in the browser

• Added option to configure No SSO URL(s): SSO redirection to IDP for specific URLs used for integration with other applications will be disabled
• Added option to configure multiple IDP Signing Certificate
• Bugfix for SSO redirection not working if JS is disabled in the browser

Changed the name of SESSIONCOOKIE to mo.jira-sso.SESSIONCOOKIE to prevent conflict with other apps.

Changed the name of SESSIONCOOKIE to mo.jira-sso.SESSIONCOOKIE to prevent conflict with other apps.

UI Improvements:

• Added IDP Id to the overview page which helps in adding the IDP to custom login page and test the IDP before adding it to login page
• Fixed the buttons whose text would disappear on hover

Bug Fixes:

• Fixed the session timeout after test configuration while adding a new IDP

Improvements:

• Enhanced security of the internal APIs used by the app

UI Improvements:

• Added IDP Id to the overview page which helps in adding the IDP to custom login page and test the IDP before adding it to login page
• Fixed the buttons whose text would disappear on hover

Bug Fixes:

• Fixed the session timeout after test configuration while adding a new IDP

Improvements:

• Enhanced security of the internal APIs used by the app

In version 2.0.0, SSO failed if you have SSO disabled for either Jira Software or Jira Service Management in Global SSO Settings menu of the app. Fix for that bug is released in this version.

In version 2.0.0, SSO failed if you have SSO disabled for either Jira Software or Jira Service Management in Global SSO Settings menu of the app. Fix for that bug is released in this version.

We have done very significant frontend changes in this version, which we're sure you will appreciate once you upgrade the app.

As a part of UI rework, some settings are moved to new sections. This means the structure of the plugin backup file has changed too.

We've created a handbook which provides reference for all the settings available in the app.

Before You Upgrade:

• Refer to this guide to know which settings are moved where.
• Download the plugin configurations backup file from Backup and Restore Menu

After You Upgrade:

• Test it on your staging environment.
• If you're using plugin configurations backup file in any script, download the new plugin backup file from Backup and Restore menu.

Changelog:

• Reworked User Interface with Quick IDP Setup Wizard [Reference]
• Added Redirection Rules option where you can configure multiple rules for IDP selection for different types of users.[Reference]
• Added a Plugin Tour to assist you in configuring the app

Please read the full release notes here

We have done very significant frontend changes in this version, which we're sure you will appreciate once you upgrade the app.

As a part of UI rework, some settings are moved to new sections. This means the structure of the plugin backup file has changed too.

We've created a handbook which provides reference for all the settings available in the app.

Before You Upgrade:

• Refer to this guide to know which settings are moved where.
• Download the plugin configurations backup file from Backup and Restore Menu

After You Upgrade:

• Test it on your staging environment.
• If you're using plugin configurations backup file in any script, download the new plugin backup file from Backup and Restore menu.

Changelog:

• Reworked User Interface with Quick IDP Setup Wizard [Reference]
• Added Redirection Rules option where you can configure multiple rules for IDP selection for different types of users.[Reference]
• Added a Plugin Tour to assist you in configuring the app

Please read the full release notes here

Bugfix for the false warning message for certificate expiration

Bugfix for the false warning message for certificate expiration

Improved SP certificate expiry email notification scheduler which informs about upcoming SP certificate expiry.

Improved SP certificate expiry email notification scheduler which informs about upcoming SP certificate expiry.

Fixed the bug in version 1.1.50 due to which SSO was failing if the relay state is missing in SAML Response

Fixed the bug in version 1.1.50 due to which SSO was failing if the relay state is missing in SAML Response

Improvments:

• Generate Certificate button in Certificates tab to create new SP certificates

Fixes

• Fixed issue with some sections not showing up in Jira 8.12
• Fixed Admin SSO when Lax samesite attribute is set for cookies.

Improvments:

• Generate Certificate button in Certificates tab to create new SP certificates

Fixes

• Fixed issue with some sections not showing up in Jira 8.12
• Fixed Admin SSO when Lax samesite attribute is set for cookies.

The app's default certificate will expire on October 28, 2020. You can find steps to replace it with a new certificate in the Certificates tab. You can check the steps in the link below too.

https://faq.miniorange.com/knowledgebase/can-update-default-x-509-certificate-miniorange-plugin/

We have also introduced the ability to generate & configure a new X.509 certificate in the app.

The app's default certificate will expire on October 28, 2020. You can find steps to replace it with a new certificate in the Certificates tab. You can check the steps in the link below too.

https://faq.miniorange.com/knowledgebase/can-update-default-x-509-certificate-miniorange-plugin/

We have also introduced the ability to generate & configure a new X.509 certificate in the app.

Added Compatibility for Jira 8.11 by fixing user profile updated and auto-activation of users on SSO.

Added Compatiblity for Jira 8.11 by fixing user profile update and auto-activation of users on SSO.

Added an option to toggle Replayed assertion check

Added an option to toggle Replayed assertion check

Added a configurable option to restrict access to plugin APIs from outside the Jira instance.

Added a configurable option to restrict access to plugin APIs from outside the Jira instance.

Features:

• Deactivated users can be auto-activated on successful SSO.
• Header based authentication - Use the username present in request headers to SSO into Jira.

Improvements:

• Default Groups configured in Read-only with local groups directories will be assigned to users on first SSO (no configuration required)

Security Fixes:

• Replayed SAML assertions will be rejected.
• App's internal APIs can no longer be used from the external host

Features:

• Deactivated users can be auto-activated on successful SSO.
• Header based authentication - Use the username present in request headers to SSO into Jira.

Improvements:

• Default Groups configured in Read-only with local groups directories will be assigned to users on first SSO (no configuration required)

Security Fixes:

• Replayed SAML assertions will be rejected.App's internal APIs can no longer be used from the external host

• Fixed Auto-Redirect Delay issue on Admin SSO
• Admin session will be created while accessing admin functionalities only.
• Added descriptive error and success response messages to Enable Backdoor URL API

• Fixed Auto-Redirect Delay issue on Admin SSO
• Admin session will be created while accessing admin functionalities only and not during initial SSO.
• Added descriptive error and success response messages to Enable Backdoor URL API

Fixed relay state issue in IDP initiated login flow

Fixed relay state issue in IDP initiated login flow

Features:

• Feedback form : Admin can submit feedback without deactivating the app, so we can use it to improve the app.
• Added option to restore/backup app configuration through REST API
• Added option to restrict users from changing the Jira password
• Added an option to send AuthContextClassRef parameter in SAML Request.
• LoginEvent will be published after each successful SSO.

• Restricted relay state redirection to different domains.

• White listed plugin endpoints and custom templates in anonymous access option

Features:

• Feedback form : Admin can submit feedback without deactivating the app, so we can use it to improve the app.
• Added option to restore/backup app configuration through REST API
• Added option to restrict users from changing the Jira password
• Added an option to send AuthContextClassRef parameter in SAML Request.
• LoginEvent will be published after each successful SSO.

Bug fixes:

• Restricted relay state redirection to different domains.
• White listed plugin endpoints and custom templates in anonymous access option

• Added Compatibility for Jira version 8.6 and higher
• Bug fix for missing SSO option on customer portal login page

• Added Compatibility for Jira version 8.6 and higher
• Bug fix for missing SSO option on customer portal login page

Features:

• Option to design custom login page template
• Customizable/Removable option of contact information from metadata

Fixes:

• Fixed Import configurations. All the existing app configurations will be overwritten by the imported configurations including existing IDP configurations.
• Fixed default group issue which occurred when default application role for new users is not configured

Features:

• Option to design custom login page template
• Customizable/Removable option of contact information from metadata

Fixes:

• Fixed Import configurations. All the existing app configurations will be overwritten by the imported configurations including existing IDP configurations.
• Fixed default group issue which occurred when default application role for new users is not configured

• Made UI fixes in User Groups tab and SSO Login dropdown
• Made app compatible with Jira 8.4

• Made UI fixes in User Groups tab and SSO Login dropdown
• Made app compatible with Jira 8.4

• Bug Fix: Handled group update failure for Read/Write access type of directory users during SSO
• Bug fix: Group mapping for existing users
• Compatibility with Java 11

• Bug Fix: Handled group update failure for Read/Write access type of directory users during SSO
• Bug fix: Group mapping for existing users
• Compatibility with Java 11

• Fixed issue with default group not being assigned to new users
• Fixed issue with custom attributes not being assigned to existing users
• Fixed issue with ServiceDesk SSO with multiple IDPs

• Fixed issue with default group not being assigned to new users
• Fixed issue with custom attributes not being assigned to existing users
• Fixed issue with ServiceDesk SSO with multiple IDPs

• Updated contact us details

• Updated contact us details

• Bug fix for domain based auto-redirection to IDP.

• Bug fix for domain-based auto-redirection to IDP

Feature:

• Assign new groups from IDP SAML response with/without affecting the user's existing groups. This is useful only when On the Fly Group Mapping is enabled.

Feature:

• Assign new groups from IDP SAML response with/without affecting the user's existing groups. This is useful only when On the Fly Group Mapping is enabled.

• Enhancements in the User Groups tab:
  • Removed Search Filter. The local groups will be loaded dynamically in Default groups and Group mapping section as you start typing the name
  • Users will only be added or removed from the mapped groups and groups added as default groups depending on the options selected in the app.
  • Separate sections for Manual group mapping and On-the-fly group mapping configurations.
• Added a User Directory Information tab which explains the behavior of SSO when external user directories are configured and recommends app configurations for different user directory permissions.

• Enhancements in the User Groups tab:
  • Removed Search Filter. The local groups will be loaded dynamically in Default groups and Group mapping section as you start typing the name
  • Users will only be added or removed from the mapped groups and groups added as default groups depending on the options selected in the app.
  • Separate sections for Manual group mapping and On-the-fly group mapping configurations.
• Added a User Directory Information tab which explains the behavior of SSO when external user directories are configured and recommends app configurations for different user directory permissions.

• Bug fix for saving groups mapping configuration

• Bug fix for saving groups mapping configuration