Single Sign On (SSO) via OAuth and OpenID for Confluence

• Improved backup/restore functionality along with other minor bug fixes.

Compatibility Updates:

• Made the plugin compatible with the latest Confluence version.Note: Compatibility: Confluence Data Center 10.0.2 - 10.2.2

• Added support for Jira Service Management Knowledge Base integration
• Added feature-specific demo videos for easier reference

• Added an option to configure a separate relay state specifically for new and reactivated users.
• Implemented the ability to restrict logins via SSO by validating usernames against configurable regular expression patterns.

• Added support for retrieving a flattened structure of nested groups from Azure AD.

• Fixed the issue with saving the group mapping configuration.

We’ve updated the UI to make it simpler and more user-friendly.

What’s New

• Improved Layout: Settings are now better organized with clear labels for easier access.
• Simpler Navigation: The side navigation bar will no longer change when switching between provider configurations, ensuring smooth navigation.

What’s Unchanged

• The SSO redirection and user experience during sign-in remain the same.

These changes focus on improving clarity and ease of use without affecting existing functionality.

Note: We recommend testing this update on your staging instance before upgrading the production environment.

• Introduced an option to enable or disable the plugin’s Audit Log.
• Addressed security vulnerabilities identified during penetration testing, enhancing overall system security.

• Introduced an option to enable or disable the plugin’s audit log.
• Addressed security vulnerabilities identified during penetration testing, enhancing overall system security.

Made the add-on compatible with the latest version of Confluence v10.

Implemented fixes for security vulnerabilities identified during penetration testing, providing enhanced system security.

Improvements

Refined group mapping flow to reduce unnecessary audit log entries and enhance SSO logging efficiency.

Vulnerability Fixes

Updated external libraries to address security issues and improve overall plugin security.

Auto-Assign Group Membership on SSO.

• Enhanced the Knowledge Base with a dedicated FAQs section.
• Resolved minor UI issues to enhance the overall user experience.

New Feature:

• Added a new feature to hide the default login form.

Improvement:

• Minor UI improvements and bug fixes to enhance the user experience.

Advanced Error Handling with Detailed Messages and Easy-to-Understand Solutions

We have added a knowledge base to have a unified view of all our documentation resources which includes:-

New Feature:

• Provided an option to download the debug log file within the plugin.

Improvements:

• Made the Audit Log page compatible with the dark theme.

The Audit Logs feature provides a streamlined way to monitor login events, with easy filtering options based on user, date, login status (Failed/Success), and login method (SSO or Jira's Default Login).

Improvements

• UI Enhancements: Improved user interface for a more intuitive experience.
• Security Updates: Addressed vulnerabilities in third-party dependencies to enhance system security and stability.

• Introduced an option to enable automatic redirection to the OAuth provider on the admin WebSudo session prompt.

• Implemented fixes for security vulnerabilities identified during penetration testing, providing enhanced system security.

Compatibility Update:

• Made the add-on compatible with Confluence v9.2.0

New Feature: Added an option to redirect users to their respective OAuth providers for authentication based on their groups and directories.

Bug Fix: Fixed an issue where the space admin could not access admin-privileged space settings after SSO.

• Patches were added for vulnerable versions of 3rd-party libraries that are being used in the plugin.
• Minor UI fixes.

Compatibility Update:-

• Made the add-on compatible with Confluence v9.1.0
• Backward compatibility with all the previous versions of Confluence.
• Dark Theme Compatibility.

Security Fix:

• Implemented fixes for security vulnerabilities identified during penetration testing, ensuring enhanced system security

Compatibility Update:-

• Made the add-on compatible with Confluence v9.x.x

Improvement:-

• Added patches for vulnerabilities pointed out in some of the 3rd party libraries used in the plugin.
• Improvisation in SLO functionality for Keycloak, Okta, and CustomOpenId

Compatibility Update:-

• Made the add-on compatible with Confluence v9.x.x

Improvement:-

• Added patches for vulnerabilities pointed out in some of the 3rd party libraries used in the plugin.
• Improvisation in SLO functionality for Keycloak, Okta, and CustomOpenID

New Feature:

• Added option for admins to configure URLs that need to skip the SSO process.

Improvements:

• Improvisation in User group retrieval from Azure AD

Security Update:

• Implemented fixes for security vulnerabilities identified during penetration testing, ensuring enhanced system security.

New Feature:

• Added option for admins to configure URLs that need to skip the SSO process.

Improvements:

• Improvisation in User group retrieval from Azure AD

Security Update:

• Implemented fixes for security vulnerabilities identified during penetration testing, ensuring enhanced system security.

New Feature:

• JWT SSO Support: We're thrilled to introduce JWT SSO Support in our plugin. This feature allows seamless auto-login to Confluence using user-based JWT tokens. These tokens can be obtained from a custom dashboard where the user is already logged in or from external identity providers like OAuth 2.0/OpenID Connect.

Improvements:

• Performed bug fixes related to group mapping.
• Enhanced the user interface for a better user experience.

Security Update:

• Implemented fixes for security vulnerabilities identified during penetration testing, providing enhanced system security.

New Feature:

• JWT SSO Support: We're thrilled to introduce JWT SSO Support in our plugin. This feature allows seamless auto-login to Confluence using user-based JWT tokens. These tokens can be obtained from a custom dashboard where the user is already logged in or from external identity providers like OAuth 2.0/OpenID Connect.

Improvements:

• Performed bug fixes related to group mapping.
• Enhanced the user interface for a better user experience.

Security Update:

• Implemented fixes for security vulnerabilities identified during penetration testing, providing enhanced system security.

New Feature :-

• Force Authentication: Introducing the Force Authentication feature, which, when activated, mandates re-authentication to the OAuth Provider, regardless of the existing user session.

Security Update:-

• Implemented fixes for security vulnerabilities identified during penetration testing, ensuring enhanced system security.

Improvements:-

• Resolved minor UI-related issues, enhancing the overall user experience with a smoother and more refined interface.

New Feature :-

• Force Authentication: Introducing the Force Authentication feature, which, when activated, mandates re-authentication to the OAuth Provider, regardless of the existing user session.

Security Update:-

• Implemented fixes for security vulnerabilities identified during penetration testing, ensuring enhanced system security.

Improvements:-

• Resolved minor UI-related issues, enhancing the overall user experience with a smoother and more refined interface.

Improvements:-

• Keycloak Support: With this release, we're pleased to announce full support for all the new versions of Keycloak.
• Addressed minor UI-related bugs.
• Added compatibility with Confluence v (8.8.0).

Improvements:-

• Keycloak Support: With this release, we're pleased to announce full support for all the new versions of Keycloak.
• Addressed minor UI-related bugs.
• Added compatibility with Confluence v (8.8.0).

New Feature:

• Added PKCE (Proof of Key Code Exchange) support, enhancing security measures.

Improvement:

• Addressed minor UI-related bugs, ensuring a seamless and polished user interface

New Feature:

• Added PKCE (Proof of Key Code Exchange) support, enhancing security measures.

Improvement:

• Addressed minor UI-related bugs, ensuring a seamless and polished user interface

Exciting News! In the latest release for our Confluence OAuth app, we're delighted to announce that you can now get the SCIM (System for Cross-domain Identity Management) app for free! Enhance your identity management capabilities seamlessly with SCIM integration. Download today to enjoy the latest features and unlock the power of SCIM at no additional cost! Visit the "User Sync" Tab in the plugin settings for more information.

Exciting News! In the latest release for our Confluence OAuth app, we're delighted to announce that you can now get the SCIM (System for Cross-domain Identity Management) app for free! Enhance your identity management capabilities seamlessly with SCIM integration. Download today to enjoy the latest features and unlock the power of SCIM at no additional cost! Visit the "User Sync" Tab in the plugin settings for more information.

New Feature:

• Added a Plugin Tour option to assist you in configuring the app.

New Feature:

• Added a Plugin Tour option to assist you in configuring the app.

The vulnerable version of the third-party libraries has been updated.

The vulnerable version of the third-party libraries has been updated.

Fixed a minor issue for Custom Error Message Template.

Fixed a minor issue with Custom Error Message Template.

Made the add-on compatible with Confluence versions mentioned below:

• 8.7.1
• 8.6.2
• 8.5.4 (long-term support version)
• 8.4.5
• 7.19.17 (long-term support version)

Made the add-on compatible with Confluence versions mentioned below:

• 8.7.1
• 8.6.2
• 8.5.4 (long-term support version)
• 8.4.5
• 7.19.17 (long-term support version)

Security Update

• Added fixes for some security vulnerabilities uncovered during penetration testing.

New Features

• Added an option to test the Regex in OTF group mapping.
• Added an exclusive call-scheduling feature to address your technical queries

Improvements

• Added fixes for a few minor configuration issues to ensure a smoother user experience.

Security Update

• Added fixes for some security vulnerabilities uncovered during penetration testing.

New Features

• Added an option to test the Regex in OTF group mapping.
• Added an exclusive call-scheduling feature to address your technical queries

Improvements

• Added fixes for a few minor configuration issues to ensure a smoother user experience.

Added an option to schedule a meeting for setup assistance or demo within the plugin itself.

Added an option to schedule a meeting for setup assistance or demo within the plugin itself.

Updated the version of 3rd party library to fix some issues pointed out in it.

Updated the version of 3rd party library to fix some issues pointed out in it.

• Updated 3rd party libraries to fix some issues.

• Updated 3rd party libraries to fix some issues.

New Features:

• Upgraded the API for updating existing user information, providing improved performance.
• Added compatibility for Confluence 8+ Version.

Bug Fixes:

• Fixed error template flow for existing users, resolving issues that previously hindered smooth user experiences.

New Features:

• Upgraded the API for updating existing user information, providing improved performance.
• Added compatibility for Confluence 8+ Version.

Bug Fixes:

• Fixed error template flow for existing users, resolving issues that previously hindered smooth user experiences.

Added a feature to restrict whether the users should be allowed to change their local passwords.

Added a feature to restrict whether the users should be allowed to change their local passwords.

• Added a fix for the issue where the last login date/time not getting updated upon SSO.
• Fixed the issue of duplicate Authorization parameters being sent in the SSO request.
• Resolved the issue of Space admins not being able to authenticate.
• Corrected the SSO initiation flow when Global SSO or SSO for a specific IDP is disabled.
• Fixed the redirection issue after the SSO when the request URL contains “/login.action”.

• Added a fix for the issue where the last login date/time not getting updated upon SSO.
• Fixed the issue of duplicate Authorization parameters being sent in the SSO request.
• Resolved the issue of Space admins not being able to authenticate.
• Corrected the SSO initiation flow when Global SSO or SSO for a specific IDP is disabled.
• Fixed the redirection issue after the SSO when the request URL contains “/login.action”.