Kantega SSO Enterprise 7.37.x release notes
We are pleased to announce Kantega SSO Enterprise 7.37.0.
- 1 Compatible applications
- 2 Changelog
- 2.1 Changes in 7.37.17
- 2.2 Changes in 7.37.16
- 2.3 Changes in 7.37.15
- 2.4 Changes in 7.37.14
- 2.5 Changes in 7.37.13
- 2.6 Changes in 7.37.12
- 2.7 Changes in 7.37.11
- 2.8 Changes in 7.37.10
- 2.9 Changes in 7.37.9
- 2.10 Changes in 7.37.8
- 2.11 Changes in 7.37.8
- 2.12 Changes in 7.37.7
- 2.13 Changes in 7.37.6
- 2.14 Changes in 7.37.5
- 2.15 Changes in 7.37.4
- 2.16 Changes in 7.37.3
- 2.17 Changes in 7.37.2
- 2.18 Changes in 7.37.1
- 2.19 Changes in 7.37.0
Compatible applications
In general, the latest version of Kantega SSO Enterprise is compatible with the oldest version that has not reached end of life. For this release however, there is a gap in Atlassian’s major architecture rewrite in what they call Platform 7. Its lower compatibility is with versions that have implemented platform 7. This means the following major versions and later are compatible:
Note that 7.37.x is a functional copy of 6.37.x and should only contain minor differences caused by platform 7.
Changelog
Changes in 7.37.17
Mar 27, 2025
Release summary: SAML/OIDC related minor bug fixes
Bug fixes
status:saml/oidc Allow whitespace to hide specific texts on login pages like
status:misc Better handling of internal URLs for Force login
status:saml/oidc Fix default redirect rules override for JSM
status:saml/oidc Fix ability to disable IdP icons
Changes in 7.37.16
Mar 24, 2025
Release summary: Fixed bug on scim user and group sync
Bug fixes
status:SCIM Fixed bug on scim user and group sync occurring on newest Atlassian platforms
Changes in 7.37.15
Mar 13, 2025
Release summary: Fixed bug with websudo button showing up without websudo being enabled
Bug fixes
status:saml/oidc Fixed issue where the “Reauthenticate with SSO” button for websudo was shown without Jira prompting the user for reauthentication.
Changes in 7.37.14
Mar 10, 2025
Release summary: Bug fixes
Bug fixes
status:saml/oidc Newly introduced Bitbucket & Bamboo websudo (secure admin session) did not isolate to the given host product and gave failure on Jira
status:saml/oidc An additional closing bracket ')' snuck into the DOM of the SAML/OIDC login page
Changes in 7.37.13
Mar 7, 2025
Release summary: Google Workspace API connector bug fix
Improvements
Added a utility page under dark-features for viewing and editing groups in specific user directories on the URI /plugins/servlet/no.kantega.kerberosauth.kerberosauth-plugin/showGroupsInDirectories
Bug fixes
status:api connector Google Workspace API connector sync failed after incorrect JSON object key for isArchived and isSuspended on the fix in 7.37.10
Changes in 7.37.12
Mar 6, 2025
Release summary: Bug fixes
Bug fixes
status:Federated sso Fixed the Continue-button on the login screen not working when trying to log in with username/password.
status:kerberos Config upgrade logic introduced in 7.37.4 incorrectly checks for breaking changes comparing incorrect versions.
Changes in 7.37.11
Mar 6, 2025
Release summary: Bug fix of config upgrade logic and dependency update
Improvements
status:misc Update bouncy castle dependency from 1.78 to 1.80 to patch CVE-2024-29857, CVE-2024-30171, CVE-2024-30172.
Bug fixes
status:kerberos Config upgrade logic introduced in 7.37.4 incorrectly checks for breaking changes comparing incorrect versions.
Changes in 7.37.10
Mar 5, 2025
Release summary: Improvements, bug fixes and dependency updates
Improvements
status:saml/oidc Websudo SSO is now available for Bitbucket and Bamboo
status:misc Update dependencies
Bug fixes
status:Api connector Google Workspace API connector did not update archived users as “not active” during sync
status:saml/oidc Make manual redirect more available on login page when users enter username
Changes in 7.37.9
Feb 28, 2025
Release summary: Bug fix for prevent traditional login
Bug fixes
status:MISC Fixed a bug with prevent traditional login introduced with 7.37.8
Changes in 7.37.8
This release has been made private due to a discovered bug with prevent traditional login. Please use 7.37.9 instead.
Changes in 7.37.8
Feb 25, 2025
Release summary: Fixes in JSM and in Jira handling root page “/” better on Jira 10+
Bug fixes
status:Kerberos Make Kerberos work in all cases for JSM portal login page
status:misc Handle SSO login for root page
status:misc Better handling prevent traditional login (with username / password) for unlicensed users
Changes in 7.37.7
Feb 14, 2025
Release summary: Added support for Confluence 9.3
Improvements
status:Cloud user provisioning The cloud user provisioning overview now shows if a connected user directory is disabled
status:miscAdded support for Confluence 9.3
Bug fixes
status:misc Fixed bug where some group selectors were unable to load groups
status:Traditional login Fixed assigning groups on traditional login
Changes in 7.37.6
Feb 13, 2025
Release summary: Bug fixes for API tokens
Bug fixes
status:API Token Fixed bug where non-admin users could not create tokens if maximum token lifetime was set to forever
status:API Token Fixed unnecessarily noisy logging in some scenarios
status:Kerberos Fixed Kerberos logging in users trying to log out on Jira 10
Changes in 7.37.5
Jan 29, 2025
Release summary: Fixed SAML/OIDC bug with target after redirect containing the entire URL
Bug fixes
status:SAML/OIDC Fixed SAML/OIDC bug with target after redirect containing the entire URL.
Changes in 7.37.4
Jan 28, 2025
This release removes the login logic from Jira dashboards since the login widget does not exist with the new login interface. This means that Kerberos will no longer trigger when visiting the dashboard unless Force Login is enabled and configured to use /* as a force path.
Release summary: Bug fixes. Improved UX on disable Kerberos.
Improvements
status:Kerberos Reworked “Disable Kerberos” to improve UX and make the feature easier to understand.
Bug fixes
status:SAML/OIDC Fixed issue with Single Logout in Jira.
status:SAML/OIDC Fixed issue with IdP button not being clickable with certain configurations.
status:SAML/OIDC Fixed bug where using SAML/OIDC would remove the title of Jira dashboards.
Changes in 7.37.3
Jan 27, 2025
Release summary: Bug fixes for prevent traditional login and initial SAML signing certificate
Bug fixes
status:SAML/OIDC Fixed prevent traditional login not working well with manual redirect for users permitted to log in with username/password
status:SAML/OIDC Fixed problem when setup of first identity provider where SAML signing certificate was created
Changes in 7.37.2
Jan 22, 2025
Release summary: Added support for generating 4096 bit certificate for SAML Request Signing
Improvements
status:SAML/OIDC Added option to generate certificate for SAML Request Signing with size of 4096 bits
Bug fixes
status:SAML/OIDC Fixed problem with reactivating users who are both deactivated and missing license group
Changes in 7.37.1
Jan 17, 2025
Release summary: Various bug fixes and improvements
Improvements
status:kerberos Improved error handling for LDAP test
status:SAML/OIDC Changed default behaviour to include username/password link
status:SCIM Updated UI for SCIM setup wizard
status:SCIM Added lozenge for showing local groups in group list
status:User management Added the option to copy groups and memberships to read-only directories
status:User management Added an overview to make discovering duplicate groups easier at
/showGroupsInDirectories
Bug fixes
status:SAML/OIDC Fixed instant redirect trigger on JSM despite being disabled
status:SAML/OIDC Fixed redirecting user to the page they attempted to visit before being sent to IdP for Bitbucket
status:User management Fixed issue with viewing groups containing &
status:SAML/OIDC Fixed SSO for Bamboo and JSM
Changes in 7.37.0
Jan 3, 2025
Release summary: Added support for custom API token authorization header
Improvements
status:API Token Added support for custom API token authorization header
Bug fixes
status:API COnnector Entra ID API connector will no longer crash during synchronization when user or group filtering is enabled and a nested group matching the filter contains a group not matched by the filter.