• Resolved high CPU and memory usage during synchronizations with numerous group assignments.

• Resolved high CPU and memory usage during synchronizations with numerous group assignments.

• Added new diff view for Single User Update.
• Improved connection tester visuals.
• Added group exclusion for "Remove group memberships during cleanup".
• Azure connector: Improved sync performance.
• Azure connector: Implemented Server-Side Filtering, see documentation for more details.
• Okta connector: Implemented Server-Side Filtering, see documentation for more details.
• SCIM connector: Added support for nested groups, see documentation for more details.
• Cleanup Inactive Users Connector: Fixed "Remove group memberships during cleanup" doesn't remove groups from the already disabled users.
• Fixed: Cleanup now removes sync status data for non-existent connectors from database.
• Fixed: Patch config button not longer shows up in Edit mode.
• Fixed: Directories are no longer renamed if connectors are still assigned to the directory.

• Added new diff view for Single User Update.
• Improved connection tester visuals.
• Added group exclusion for "Remove group memberships during cleanup".
• Azure connector: Improved sync performance.
• Azure connector: Implemented Server-Side Filtering, see documentation for more details.
• Okta connector: Implemented Server-Side Filtering, see documentation for more details.
• SCIM connector: Added support for nested groups, see documentation for more details.
• Cleanup Inactive Users Connector: Fixed "Remove group memberships during cleanup" doesn't remove groups from the already disabled users.
• Fixed: Cleanup now removes sync status data for non-existent connectors from database.
• Fixed: Patch config button not longer shows up in Edit mode.
• Fixed: Directories are no longer renamed if connectors are still assigned to the directory.

• Added connection testers for Azure AD, Okta, G Suite, Keycloak and OneLogin connectors.
• Improved sync error handling in Azure AD and Okta connectors to avoid irregularly occurring sync failures.
• SCIM: added presets for enterprise attributes.
• SCIM: fixed overwritten groups when patching users.
• SCIM: fixed incorrect Totaltems field in ListResponse.
• SCIM: changed default preset for email attribute.
• Fixed: the Linchpin endpoints are no longer accessed from the frontend when not running on Confluence.

• Added connection testers for Azure AD, Okta, G Suite, Keycloak and OneLogin connectors.
• Improved sync error handling in Azure AD and Okta connectors to avoid irregularly occurring sync failures.
• SCIM: added presets for enterprise attributes.
• SCIM: fixed overwritten groups when patching users.
• SCIM: fixed incorrect Totaltems field in ListResponse.
• SCIM: changed default preset for email attribute.
• Fixed: the Linchpin endpoints are no longer accessed from the frontend when not running on Confluence.

• Azure: fixed a performance issue introduced in User Sync 2.7.1 that resulted in slower sync times and increased CPU and memory usage.

• Azure: fixed a performance issue introduced in User Sync 2.7.1 that resulted in slower sync times and increased CPU and memory usage.

• Added configuration import and export via admin UI.
• Improved sync status message cleanup performance.
• Improved result when user is not found during Single User Update.
• Azure: Added option to select the profile picture size.
• Okta: Fixed required groups tester when there are no required groups in the config yet.

• Added configuration import and export via admin UI.
• Improved sync status message cleanup performance.
• Improved result when user is not found during Single User Update.
• Azure: Added option to select the profile picture size.
• Okta: Fixed required groups tester when there are no required groups in the config yet.

• Fixed validation error that appears while editing required groups.

• Fixed validation error that appears while editing required groups.

• Allow synchronizing profile pictures from Azure or GSuite
• Minor improvements and bugfixes
• Please check our release notes for more details.

• Allow synchronizing profile pictures from Azure or GSuite
• Minor improvements and bugfixes
• Please check our release notes for more details.

• Azure: fixed slow sync performance.
• Fixed issue were null messages were written to the sync messages which results in aborted syncs.

• Azure: fixed slow sync performance.
• Fixed issue were null messages were written to the sync messages which results in aborted syncs.

New in 2.6.1:

• Fixed issue in Okta connector where users did not receive the correct group names.

New in 2.6.0:

• Detect when a Data Center node running a sync is no longer available and mark the sync as dead. This allows restarting the sync on another node.
• Show cluster node in sync status.
• Configuration changes are tracked in the audit log now.
• Reduced amount of requests sent to the backend from the configuration interface. This can improve UI performance when the system is under high load.
• SCIM connector now works with more providers, explicitly JumpCloud.
• Fixed that connectors are automatically renamed to the directory name.
• Allow overriding of the required groups when triggering a Single User Sync.
• Allow using Groovy to decide if a connector group is required or not.

New in 2.6.1:

• Fixed issue in Okta connector where users did not receive the correct group names.

New in 2.6.0:

• Detect when a Data Center node running a sync is no longer available and mark the sync as dead. This allows restarting the sync on another node.
• Show cluster node in sync status.
• Configuration changes are tracked in the audit log now.
• Reduced amount of requests sent to the backend from the configuration interface. This can improve UI performance when the system is under high load.
• SCIM connector now works with more providers, explicitly JumpCloud.
• Fixed that connectors are automatically renamed to the directory name.
• Allow overriding of the required groups when triggering a Single User Sync.
• Allow using Groovy to decide if a connector group is required or not.

• Fixed NoSuchMethodError during sync when users had Entity Properties attached.
• Fixed "pick first non-empty attribute" transformer to not return empty strings.

• Fixed NoSuchMethodError during sync when users had Entity Properties attached.
• Fixed "pick first non-empty attribute" transformer to not return empty strings.

• It's now possible to rename directories controlled by User Sync on the connector configuration page.
• Keycloak: it's now possible to sync nested groups.
• OneLogin: fixed issue where users without status field were deactivated during full sync.
• Improved compatibility with Jira 9.

• It's now possible to rename directories controlled by User Sync on the connector configuration page.
• Keycloak: it's now possible to sync nested groups.
• OneLogin: fixed issue where users without status field were deactivated during full sync.
• Improved compatibility with Jira 9.

• This is a maintenance release where we've updated external libraries.

• This is a maintenance release where we've updated external libraries.

• .Fixed NullPointerException at the beginning of an Azure full sync.

• .Fixed NullPointerException at the beginning of an Azure full sync.

• This is a maintenance release where we have updated internal and external dependencies. While we're not aware of any security risk, we've updated the following external dependencies to the latest versions:
  • groovy 3.0.9 → 3.0.10
  • jackson-annotations → 2.13.3
  • jackson-core → 2.13.3
  • jackson-databind → 2.13.3
  • org.apache.poi:poi-ooxml → 5.2.2
  • spring-context 4.1.7.RELEASE -> 5.3.20 (although this is a provided dependency and not shipped with our product we want to make sure to use the latest release without known vulnerabilities)
• Fixed a caching issue in the Just-in-Time connector that could affect the host app performance when using multiple Just-in-Time connectors together with SAML.

• This is a maintenance release where we have updated internal and external dependencies. While we're not aware of any security risk, we've updated the following external dependencies to the latest versions:
  • groovy 3.0.9 → 3.0.10
  • jackson-annotations → 2.13.3
  • jackson-core → 2.13.3
  • jackson-databind → 2.13.3
  • org.apache.poi:poi-ooxml → 5.2.2
  • spring-context 4.1.7.RELEASE -> 5.3.20 (although this is a provided dependency and not shipped with our product we want to make sure to use the latest release without known vulnerabilities)
• Fixed a caching issue in the Just-in-Time connector that could affect the host app performance when using multiple Just-in-Time connectors together with SAML.

• Fixed: exported support information could have contained sensitive information from the configured JVM arguments. The JVM arguments are no longer included in the support information.
• Fixed: syncs were not stopped correctly after errors in attribute transformations.
• Linchpin integration: fixed duplicate entries in "New Attribute" dropdown after adding a new field in Linchpin.
• SCIM: fixed patch operation for complex attributes.
• SCIM: improved compatibility with IBM Security Identity Manager.
• SCIM: fixed issue in REST endpoint that could cause warnings in the application log.

• Fixed: exported support information could have contained sensitive information from the configured JVM arguments. The JVM arguments are no longer included in the support information.
• Fixed: syncs were not stopped correctly after errors in attribute transformations.
• Linchpin integration: fixed duplicate entries in "New Attribute" dropdown after adding a new field in Linchpin.
• SCIM: fixed patch operation for complex attributes.
• SCIM: improved compatibility with IBM Security Identity Manager.
• SCIM: fixed issue in REST endpoint that could cause warnings in the application log.

• Fixed bug in Azure full sync (without required group) where users got disabled during cleanup.

• Fixed bug in Azure full sync (without required group) where users got disabled during cleanup.

New in 2.4.0:

• Fixed filename problems during uploads with the Excel connector.
• Removed the button to "Create new empty directory" from the Cleanup Inactive Users connector.
• Removed logs being flooded by messages from Groovy connectors when the connector list is shown.

New in 2.3.0:

• Allowed overriding the primary attribute in Single User Sync.
• Single User Update can now disable existing users that are not found in the IdP by the connector.
• Fixed IP range checks in SCIM connector.
• Fixed issues with auto fill by some browsers.
• Improved configuration validation.
• Added missing data in the sync information.
• Improved HTTP request logging for syncs.
• Improved Testconnector.

New in 2.4.0:

• Fixed filename problems during uploads with the Excel connector.
• Removed the button to "Create new empty directory" from the Cleanup Inactive Users connector.
• Removed logs being flooded by messages from Groovy connectors when the connector list is shown.

New in 2.3.0:

• Allowed overriding the primary attribute in Single User Sync.
• Single User Update can now disable existing users that are not found in the IdP by the connector.
• Fixed IP range checks in SCIM connector.
• Fixed issues with auto fill by some browsers.
• Improved configuration validation.
• Added missing data in the sync information.
• Improved HTTP request logging for syncs.
• Improved Testconnector.

• Fixed synchronization issues with OneLogin.
• Fixed issues with configuration frontend when Communardo User Profiles is reinstalled.
• Fixed: inactive users can now be anonymized in cleanup.

• Fixed synchronization issues with OneLogin.
• Fixed issues with configuration frontend when Communardo User Profiles is reinstalled.
• Fixed: inactive users can now be anonymized in cleanup.

• Support for Communardo User Profiles for Jira.
• New connector for Just-in-Time Provisioning.
• Some minor bugfixes.

• Support for Communardo User Profiles for Jira.
• New connector for Just-in-Time Provisioning.
• Some minor bugfixes.

• We integrated our new attribute mapping to provide a new powerful tool to map attributes from your Identity Provider to your Atlassian application.
• The new engine comes with built-in presets for specific transformations. In other words, common annoying problems now have easy solutions.
• And if our built-in transformations are not enough, you can write custom Groovy scripts.
• New SCIM 2.0 Connector allows to use the SCIM 2.0 protocol for user provisioning.

User Sync 2 is a major update. Please read our full release notes for User Sync 2.0.x and User Sync 2.1 before upgrading.

• We integrated our new attribute mapping to provide a new powerful tool to map attributes from your Identity Provider to your Atlassian application.
• The new engine comes with built-in presets for specific transformations. In other words, common annoying problems now have easy solutions.
• And if our built-in transformations are not enough, you can write custom Groovy scripts.
• New SCIM 2.0 Connector allows to use the SCIM 2.0 protocol for user provisioning.

User Sync 2 is a major update. Please read our full release notes for User Sync 2.0.x and User Sync 2.1 before upgrading.

• Improved cleanup performance.
• Fixed an issue where a sync was not marked as DEAD if the cluster node from this sync job is no longer part of the cluster.

• Improved cleanup performance.
• Fixed an issue where a sync was not marked as DEAD if the cluster node from this sync job is no longer part of the cluster.

• Added configuration option in the advanced section of all connectors to define the connect and session timeout.

• Added configuration option in the advanced section of all connectors to define the connect and session timeout.

• Keycloak: improved sync stability for larger instances and increased session timeout.

• Keycloak: improved sync stability for larger instances and increased session timeout.

• Improved logging for erroneous syncs.
• Azure: the manager attribute is now removed properly during sync if the manager is getting unassigned in Azure.

• Improved logging for erroneous syncs.
• Azure: the manager attribute is now removed properly during sync if the manager is getting unassigned in Azure.

• Azure, Okta & G Suite: increased request timeout to avoid sync interruptions.
• Azure: fixed authentication issue with Azure Government Cloud.
• Fixed bug in cron schedule causing syncs running a day too early.
• Fixed index creation at the beginning of the sync in case of duplicate primary attributes.
• Fixed configuration export.
• Added support for organization assignment in Jira Service Management (JSM).

• Azure, Okta & G Suite: increased request timeout to avoid sync interruptions.
• Azure: fixed authentication issue with Azure Government Cloud.
• Fixed bug in cron schedule causing syncs running a day too early.
• Fixed index creation at the beginning of the sync in case of duplicate primary attributes.
• Fixed configuration export.
• Added support for organization assignment in Jira Service Management (JSM).

• Azure: fixed a bug in group synchronisation for specific use cases.

• Azure: fixed a bug in group synchronisation for specific use cases.

• Azure: fixed failing requests with Azure B2C tenants.
• Azure: the sync no longer fails when the group membership of a single user could not be fetched.

• Azure: fixed failing requests with Azure B2C tenants.
• Azure: the sync no longer fails when the group membership of a single user could not be fetched.

• Azure: it’s no longer possible to use the “common” endpoint when using client credentials flow. Added hints that help migrating to the new flow.
• Azure: improved logging.
• Fixed some minor user interface bugs in Jira 8.12

• Azure: it’s no longer possible to use the “common” endpoint when using client credentials flow. Added hints that help migrating to the new flow.
• Azure: improved logging.
• Fixed some minor user interface bugs in Jira 8.12

• Because of a change in the data storage, after upgrading to SAML Single Sign-On 3.6.3 or User Sync 1.5.2, existing connectors show "Never synchronized", and the message "There are Sync-Results from an older app-version that are not visible." is shown below the connector list. See this page for more information.
• Onelogin: fixed sync of active state
• Excel connector: export from read-only LDAP directories is now possible

• Because of a change in the data storage, after upgrading to SAML Single Sign-On 3.6.3 or User Sync 1.5.2, existing connectors show "Never synchronized", and the message "There are Sync-Results from an older app-version that are not visible." is shown below the connector list. See this page for more information.
• Onelogin: fixed sync of active state
• Excel connector: export from read-only LDAP directories is now possible

• Azure AD: fixed a bug in manager synchronization.

• Azure AD: fixed a bug in manager synchronization.

• Azure AD: the connector is now using a different authorization method. Please read these instructions how to migrate to the new authentication.
• Azure AD: it's now possible to synchronize managers.
• Okta: significant sync speed improvements when only a subset of Okta users is required to be synced into the Atlassian application. This is only applies when the subset of users is selected via the required groups.
• Okta: Users with expired passwords are no longer deactivated during the sync.
• Okta: Single User Update during single sign-on is skipped when rate limit (threshold) is reached.

• Azure AD: the connector is now using a different authorization method. Please read these instructions how to migrate to the new authentication.

• Azure AD: it's now possible to synchronize managers.
• Okta: significant sync speed improvements when only a subset of Okta users is required to be synced into the Atlassian application. This is only applies when the subset of users is selected via the required groups.
• Okta: Users with expired passwords are no longer deactivated during the sync.
• Okta: Single User Update during single sign-on is skipped when rate limit (threshold) is reached.

• Azure AD connector: several general performance and stability improvements.
• Azure AD connector: added support for national cloud deployments. It's now possible to set the base URL in the advanced settings.
• Excel connector: fixed issue with shifted columns when importing Excel files.

• Azure AD connector: several general performance and stability improvements.
• Azure AD connector: added support for national cloud deployments. It's now possible to set the base URL in the advanced settings.
• Excel connector: fixed issue with shifted columns when importing Excel files.

Azure AD: Fixed filtering by required groups for nested groups.

Azure AD: Fixed filtering by required groups for nested groups.

• Azure AD - new Advanced setting: select the type of groups that should be synchronized.

• Fixed: it's now possible again to define a custom connector attribute.

• Azure AD - new Advanced setting: select the type of groups that should be synchronized.
• Fixed: it's now possible again to define a custom connector attribute.

• Fixed possible user mapping errors during user renaming.
• Fixed bug with empty externalId in directory.

• Fixed possible user mapping errors during user renaming.
• Fixed bug with empty externalId in directory.

• Fixed sync errors with withspaces in group names and capitalization.
• Fixed handling of multi value attributes.
• Fixed UI incompatibility with Internet Explorer 11.
• Disable users connector: fixed bug where users were disabled before reaching inactivity limit.

• Fixed sync errors with whitespaces in group names and capitalization.
• Fixed handling of multi value attributes.
• Fixed UI incompatibility with Internet Explorer 11.
• Disable users connector: fixed bug where users were disabled before reaching inactivity limit.

• Added new connector for OneLogin.
• G Suite connector now supports synchronization of multiple domain. To enable this please empty the domain settings in the connector configuration.
• Fixed a bug where a connector could not edited when copy behaviour MOVE is selected.
• Several smaller bug fixes and improvements.

• Added new connector for OneLogin.
• G Suite connector now supports synchronization of multiple domain. To enable this please empty the domain settings in the connector configuration.
• Fixed a bug where a connector could not edited when copy behaviour MOVE is selected.
• Several smaller bug fixes and improvements.

• Added Keycloak connector.
• Fixed some smaller bugs.

• Added Keycloak connector.
• Fixed some smaller bugs.

• Improved support information. It's now easier to export the configuration.
• Fixed bug in regular expression tester.
• Several minor bugfixes and improvements.

• Improved support information. It's now easier to export the configuration.
• Fixed bug in regular expression tester.
• Several minor bugfixes and improvements.

• Better error logging.
• Fixed a bug when combining attributes.
• Disable users connector: fixed a bug where newly created users were disabled.

• Better error logging.
• Fixed a bug when combining attributes.
• Disable users connector: fixed a bug where newly created users were disabled.