Kantega SSO Enterprise 6.2.x release notes
It is our great pleasure to announce Kantega SSO Enterprise 6.2.
Read the update notes for important information about this release if you’re updating from 5.x or 4.x, and see the full changelog below.
Compatible applications
In general, the latest version of Kantega SSO Enterprise is compatible with the oldest version that has not been ended of life. See Atlassian’s End-of-life (EOL) policy to get an overview of versions and EOL dates.
Application | Compatible from Server version | Compatible from Data Center version |
---|---|---|
Bamboo | 7.2.1 | 8.0.1 |
Bitbucket | 7.6.0 | 7.6.0 |
Confluence | 7.9.0 | 7.9.0 |
Jira | 8.12.0 | 8.12.0 |
Changelog
Changes in 6.2.3
Nov 28, 2022 21:30 CET
Bug fix: SAML certificate expired warning crashes the config status endpoint
Bug fixes
config update Calls to the
/rest/ksso/internal/config/1.0/status
REST endpoint, which is invoked whenever a configuration update is needed, will crash with a FileNotFoundException when on an instance where SAML is not configured in Kantega SSO Enterprise, since the Kantega SSO SAML warning made an incorrect assumption about a certificate file being present in the file system.
Changes in 6.2.2
Nov 24, 2022 14:30 CET
Special release for Jira. Retry bugfix release for Jira server due to Atlassian Marketplace API failure
Bug fixes
See bug fix description in 6.2.1 above. We had to release another patch since the Atlassian Marketplace API is unstable and failed after successfully releasing the DC version of 6.2.1 to Jira. Unfortunately there is no way to upload the server version of the same app version after the fact, so we had to rebuild the code with an incremented version in attempt to also publish the Server version.
Changes in 6.2.1
Nov 24, 2022 14:00 CET
Bug fix: SAML certificate expired warning crashes non-saml configs
Bug fixes
global config Visiting any admin page will crash with a FileNotFoundException when on an instance where SAML is not configured in Kantega SSO Enterprise, since the Kantega SSO SAML warning made an incorrect assumption about a certificate file being present in the file system.
Changes in 6.2.0
Nov 23, 2022 9:00 CET
JIT user provisioning improvements and new SAML certificate expired warning
Features
saml Kantega SSO Enterprise will now give a visible warning when the SAML request signing certificate is about to expire. This will allow you to renew the certificate well before expiry, and avoid SAML being broken at any point.
Improvements
saml Include the target URL in the HTTP session for Identity Providers that are unable to send the correct target URL back with the relay state
saml/oidc Just-in-time (JIT) provisioning now allows you to update names and emails separately, while previouly both could only be updated at the same time.
Bug fixes
SAML/OIDC During JIT provisioning, when reactivating a deactivated user, the name and email were updated even if the settings said that name and email are not supposed to be updated from the claims.
SAML/OIDC Test result page had a weakness with default values of email and name attribute
The MSTeams security filter unintentionally blocked JSM knowledgebase lookup.