• Resolved a bug where users were mistakenly anonymized during simulation instead of only simulating this action.

• Resolved a bug where users were mistakenly anonymized during simulation instead of only simulating this action.

• Fixed an issue in the AtlasUserResult where the isSuccess() method was missing. The absence of this method could disrupt Groovy Transformations and result in unexpected outcomes.
• Resolved an issue where the $ref keyword in the SCIM response was not correctly implemented. This could lead to unexpected behaviors or errors when interfacing with systems using SCIM protocols.

• Fixed an issue in the AtlasUserResult where the isSuccess() method was missing. The absence of this method could disrupt Groovy Transformations and result in unexpected outcomes.
• Resolved an issue where the $ref keyword in the SCIM response was not correctly implemented. This could lead to unexpected behaviors or errors when interfacing with systems using SCIM protocols.

• Sync Simulation allows you to thoroughly test synchronization actions before applying them, ensuring your synchronization process runs smoothly before applying changes in a real sync. You can now use this feature by running a full simulated sync or a simulated single user update. See documentation for more information.
• The Sync Result Browser provides a sleek and intuitive user interface to browse recent sync results. This feature simplifies user synchronization management and enables you to browse individual sync results and all the changes on each user happened during the sync, giving you finer control over your synchronization data, so you don't have to dive into endless JSON files anymore.
• The SCIM connector has been enhanced to utilize the Groovy cleanup decider properly.
• The Inactive User Connector has been enhanced to support group-based deactivation.

• Sync Simulation allows you to thoroughly test synchronization actions before applying them, ensuring your synchronization process runs smoothly before applying changes in a real sync. You can now use this feature by running a full simulated sync or a simulated single user update. See documentation for more information.
• The Sync Result Browser provides a sleek and intuitive user interface to browse recent sync results. This feature simplifies user synchronization management and enables you to browse individual sync results and all the changes on each user happened during the sync, giving you finer control over your synchronization data, so you don't have to dive into endless JSON files anymore.
• The SCIM connector has been enhanced to utilize the Groovy cleanup decider properly.
• The Inactive User Connector has been enhanced to support group-based deactivation.

• Resolved high CPU and memory usage during synchronizations with numerous group assignments.

• Resolved high CPU and memory usage during synchronizations with numerous group assignments.

• Added new diff view for Single User Update.
• Improved connection tester visuals.
• Added group exclusion for "Remove group memberships during cleanup".
• Azure connector: Improved sync performance.
• Azure connector: Implemented Server-Side Filtering, see documentation for more details.
• Okta connector: Implemented Server-Side Filtering, see documentation for more details.
• SCIM connector: Added support for nested groups, see documentation for more details.
• Cleanup Inactive Users Connector: Fixed "Remove group memberships during cleanup" doesn't remove groups from the already disabled users.
• Fixed: Cleanup now removes sync status data for non-existent connectors from database.
• Fixed: Patch config button not longer shows up in Edit mode.
• Fixed: Directories are no longer renamed if connectors are still assigned to the directory.

• Added new diff view for Single User Update.
• Improved connection tester visuals.
• Added group exclusion for "Remove group memberships during cleanup".
• Azure connector: Improved sync performance.
• Azure connector: Implemented Server-Side Filtering, see documentation for more details.
• Okta connector: Implemented Server-Side Filtering, see documentation for more details.
• SCIM connector: Added support for nested groups, see documentation for more details.
• Cleanup Inactive Users Connector: Fixed "Remove group memberships during cleanup" doesn't remove groups from the already disabled users.
• Fixed: Cleanup now removes sync status data for non-existent connectors from database.
• Fixed: Patch config button not longer shows up in Edit mode.
• Fixed: Directories are no longer renamed if connectors are still assigned to the directory.

• Added connection testers for Azure AD, Okta, G Suite, Keycloak and OneLogin connectors.
• Improved sync error handling in Azure AD and Okta connectors to avoid irregularly occurring sync failures.
• SCIM: added presets for enterprise attributes.
• SCIM: fixed overwritten groups when patching users.
• SCIM: fixed incorrect Totaltems field in ListResponse.
• SCIM: changed default preset for email attribute.
• Fixed: the Linchpin endpoints are no longer accessed from the frontend when not running on Confluence.

• Added connection testers for Azure AD, Okta, G Suite, Keycloak and OneLogin connectors.
• Improved sync error handling in Azure AD and Okta connectors to avoid irregularly occurring sync failures.
• SCIM: added presets for enterprise attributes.
• SCIM: fixed overwritten groups when patching users.
• SCIM: fixed incorrect Totaltems field in ListResponse.
• SCIM: changed default preset for email attribute.
• Fixed: the Linchpin endpoints are no longer accessed from the frontend when not running on Confluence.

• Azure: fixed a performance issue introduced in User Sync 2.7.1 that resulted in slower sync times and increased CPU and memory usage.

• Azure: fixed a performance issue introduced in User Sync 2.7.1 that resulted in slower sync times and increased CPU and memory usage.

• Added configuration import and export via admin UI.
• Improved sync status message cleanup performance.
• Improved result when user is not found during Single User Update.
• Azure: Added option to select the profile picture size.
• Okta: Fixed required groups tester when there are no required groups in the config yet.

• Added configuration import and export via admin UI.
• Improved sync status message cleanup performance.
• Improved result when user is not found during Single User Update.
• Azure: Added option to select the profile picture size.
• Okta: Fixed required groups tester when there are no required groups in the config yet.

• Fixed validation error that appears while editing required groups.

• Fixed validation error that appears while editing required groups.

• Minor improvements and bugfixes
• Please check our release notes for more details.

• Minor improvements and bugfixes
• Please check our release notes for more details.

• Azure: fixed slow sync performance.
• Fixed issue were null messages were written to the sync messages which results in aborted syncs.

• Azure: fixed slow sync performance.
• Fixed issue were null messages were written to the sync messages which results in aborted syncs.

New in 2.6.1:

• Fixed issue in Okta connector where users did not receive the correct group names.

New in 2.6.0:

• Detect when a Data Center node running a sync is no longer available and mark the sync as dead. This allows restarting the sync on another node.
• Show cluster node in sync status.
• Configuration changes are tracked in the audit log now.
• Reduced amount of requests sent to the backend from the configuration interface. This can improve UI performance when the system is under high load.
• SCIM connector now works with more providers, explicitly JumpCloud.
• Fixed that connectors are automatically renamed to the directory name.
• Allow overriding of the required groups when triggering a Single User Sync.
• Allow using Groovy to decide if a connector group is required or not.

New in 2.6.1:

• Fixed issue in Okta connector where users did not receive the correct group names.

New in 2.6.0:

• Detect when a Data Center node running a sync is no longer available and mark the sync as dead. This allows restarting the sync on another node.
• Show cluster node in sync status.
• Configuration changes are tracked in the audit log now.
• Reduced amount of requests sent to the backend from the configuration interface. This can improve UI performance when the system is under high load.
• SCIM connector now works with more providers, explicitly JumpCloud.
• Fixed that connectors are automatically renamed to the directory name.
• Allow overriding of the required groups when triggering a Single User Sync.
• Allow using Groovy to decide if a connector group is required or not.

• Fixed "pick first non-empty attribute" transformer to not return empty strings.

• Fixed "pick first non-empty attribute" transformer to not return empty strings.

• It's now possible to rename directories controlled by User Sync on the connector configuration page.
• Keycloak: it's now possible to sync nested groups.
• OneLogin: fixed issue where users without status field were deactivated during full sync.

• It's now possible to rename directories controlled by User Sync on the connector configuration page.
• Keycloak: it's now possible to sync nested groups.
• OneLogin: fixed issue where users without status field were deactivated during full sync.

• This is a maintenance release where we've updated external libraries.

• This is a maintenance release where we've updated external libraries.

• .Fixed NullPointerException at the beginning of an Azure full sync.

• .Fixed NullPointerException at the beginning of an Azure full sync.

• This is a maintenance release where we have updated internal and external dependencies. While we're not aware of any security risk, we've updated the following external dependencies to the latest versions:
  • groovy 3.0.9 → 3.0.10
  • jackson-annotations → 2.13.3
  • jackson-core → 2.13.3
  • jackson-databind → 2.13.3
  • org.apache.poi:poi-ooxml → 5.2.2
  • spring-context 4.1.7.RELEASE -> 5.3.20 (although this is a provided dependency and not shipped with our product we want to make sure to use the latest release without known vulnerabilities)
• Fixed a caching issue in the Just-in-Time connector that could affect the host app performance when using multiple Just-in-Time connectors together with SAML.

• This is a maintenance release where we have updated internal and external dependencies. While we're not aware of any security risk, we've updated the following external dependencies to the latest versions:
  • groovy 3.0.9 → 3.0.10
  • jackson-annotations → 2.13.3
  • jackson-core → 2.13.3
  • jackson-databind → 2.13.3
  • org.apache.poi:poi-ooxml → 5.2.2
  • spring-context 4.1.7.RELEASE -> 5.3.20 (although this is a provided dependency and not shipped with our product we want to make sure to use the latest release without known vulnerabilities)
• Fixed a caching issue in the Just-in-Time connector that could affect the host app performance when using multiple Just-in-Time connectors together with SAML.

• Fixed: exported support information could have contained sensitive information from the configured JVM arguments. The JVM arguments are no longer included in the support information.
• Fixed: syncs were not stopped correctly after errors in attribute transformations.
• Linchpin integration: fixed duplicate entries in "New Attribute" dropdown after adding a new field in Linchpin.
• SCIM: fixed patch operation for complex attributes.
• SCIM: improved compatibility with IBM Security Identity Manager.
• SCIM: fixed issue in REST endpoint that could cause warnings in the application log.

• Fixed: exported support information could have contained sensitive information from the configured JVM arguments. The JVM arguments are no longer included in the support information.
• Fixed: syncs were not stopped correctly after errors in attribute transformations.
• Linchpin integration: fixed duplicate entries in "New Attribute" dropdown after adding a new field in Linchpin.
• SCIM: fixed patch operation for complex attributes.
• SCIM: improved compatibility with IBM Security Identity Manager.
• SCIM: fixed issue in REST endpoint that could cause warnings in the application log.

New in 2.4.0:

• Support for Bamboo Data Center.
• Fixed filename problems during uploads with the Excel connector.
• Removed the button to "Create new empty directory" from the Cleanup Inactive Users connector.
• Removed logs being flooded by messages from Groovy connectors when the connector list is shown.

New in 2.3.0:

• Fixed frontend issue where the execution time of the next sync was not shown correctly.
• Allowed overriding the primary attribute in Single User Sync.
• Single User Update can now disable existing users that are not found in the IdP by the connector.
• Fixed IP range checks in SCIM connector.
• Fixed issues with auto fill by some browsers.
• Improved configuration validation.
• Added missing data in the sync information.
• Improved HTTP request logging for syncs.
• Improved Testconnector.

New in 2.4.0:

• Support for Bamboo Data Center.
• Fixed filename problems during uploads with the Excel connector.
• Removed the button to "Create new empty directory" from the Cleanup Inactive Users connector.
• Removed logs being flooded by messages from Groovy connectors when the connector list is shown.

New in 2.3.0:

• Fixed frontend issue where the execution time of the next sync was not shown correctly.
• Allowed overriding the primary attribute in Single User Sync.
• Single User Update can now disable existing users that are not found in the IdP by the connector.
• Fixed IP range checks in SCIM connector.
• Fixed issues with auto fill by some browsers.
• Improved configuration validation.
• Added missing data in the sync information.
• Improved HTTP request logging for syncs.
• Improved Testconnector.

• Fixed synchronization issues with OneLogin.
• Fixed issues with configuration frontend when Communardo User Profiles is reinstalled.
• Fixed: inactive users can now be anonymized in cleanup.

• New connector for Just-in-Time Provisioning.
• Some minor bugfixes.

• We integrated our new attribute mapping to provide a new powerful tool to map attributes from your Identity Provider to your Atlassian application.
• The new engine comes with built-in presets for specific transformations. In other words, common annoying problems now have easy solutions.
• And if our built-in transformations are not enough, you can write custom Groovy scripts.
• New SCIM 2.0 Connector allows to use the SCIM 2.0 protocol for user provisioning.

User Sync 2 is a major update. Please read our full release notes for User Sync 2.0.x and User Sync 2.1 before upgrading.

• Improved cleanup performance.
• Fixed an issue where a sync was not marked as DEAD if the cluster node from this sync job is no longer part of the cluster.

• Added configuration option in the advanced section of all connectors to define the connect and session timeout.

• Keycloak: improved sync stability for larger instances and increased session timeout.

• Improved logging for erroneous syncs.
• Azure: the manager attribute is now removed properly during sync if the manager is getting unassigned in Azure.

• Azure, Okta & G Suite: increased request timeout to avoid sync interruptions.
• Azure: fixed authentication issue with Azure Government Cloud.
• Fixed bug in cron schedule causing syncs running a day too early.
• Fixed index creation at the beginning of the sync in case of duplicate primary attributes.
• Fixed configuration export.

• Azure: fixed a bug in group synchronisation for specific use cases.

• Azure: fixed failing requests with Azure B2C tenants.
• Azure: the sync no longer fails when the group membership of a single user could not be fetched.

• Azure: it’s no longer possible to use the “common” endpoint when using client credentials flow. Added hints that help migrating to the new flow.
• Azure: improved logging.

• Because of a change in the data storage, after upgrading to SAML Single Sign-On 3.6.3 or User Sync 1.5.2, existing connectors show "Never synchronized", and the message "There are Sync-Results from an older app-version that are not visible." is shown below the connector list. See this page for more information.
• Onelogin: fixed sync of active state
• Excel connector: export from read-only LDAP directories is now possible

• Azure AD: fixed a bug in manager synchronization.

• Azure AD: the connector is now using a different authorization method. Please read these instructions how to migrate to the new authentication.

• Azure AD: it's now possible to synchronize managers.
• Okta: significant sync speed improvements when only a subset of Okta users is required to be synced into the Atlassian application. This is only applies when the subset of users is selected via the required groups.
• Okta: Users with expired passwords are no longer deactivated during the sync.
• Okta: Single User Update during single sign-on is skipped when rate limit (threshold) is reached.

• Azure AD connector: several general performance and stability improvements.
• Azure AD connector: added support for national cloud deployments. It's now possible to set the base URL in the advanced settings.
• Excel connector: fixed issue with shifted columns when importing Excel files.

Azure AD: Fixed filtering by required groups for nested groups.