Single Sign-On SAML SSO for Bitbucket SSO SAML+User Sync

Updated the versions of a few 3rd party libraries to account for vulnerabilities pointed out in them.

Improvement:
Optimized the group synchronization process during user login to prevent redundant updates and reduce excessive audit log entries.

New Feature:-

• Added a new feature - Notify Multiple Admins - for notifying multiple admins based on the certificate expiry.

Bug Fixes:-

• Added a UI fix for Knowledge Base tab.

Knowledge Base Improvements:-

• Added a use case documentation under the Knowledge Base tab.

Default Certificate Update Banner:

• A banner has been added to inform users that the default miniOrange SP certificates have been replaced with new certificates having extended validity. The banner includes a “Replace Default Certificates” button, allowing users to seamlessly update to the latest certificate with extended expiry.

Knowledge Base Section:

• Introduced a new Knowledge Base tab that provides easy access to helpful resources. It includes:
  • Video Tab – Setup guides, use case demonstrations, and feature walkthroughs.
  • FAQ Tab – Answers to commonly asked questions.
  • Handbook Tab – Comprehensive documentation and guides.

Advisory:

• Added certificate expiry alert (flag and banner) in the Manage Apps section and plugin headers for users whose default plugin signing certificates will expire within 60 days.

Bug Fixes:

• Added a fix for an issue “To many redirect“ for user while performing SSO.

New Feature:Added the "Remember My IDP" functionality under the Remember My Login tab.

Compatibility Update:Updated compatibility with Bitbucket version 9.6.0.

Made the add-on compatible with Bitbucket v9.4.1

Updated the versions of 3rd party dependencies to account for vulnerabilities found in them.

Bug Fixes

• Fixed an infinite redirection issue faced when unlicensed users try to perform SSO.

Improvements

• Made a few enhancements to the UI.

Bug Fixes

• Fixed an infinite redirection issue faced when unlicensed users try to perform SSO.

Improvements

• Made a few enhancements to the UI.

Made the add-on compatible with the latest Bitbucket v9

Made the add-on compatible with the latest Bitbucket v9

Added an option to disable the Password Autofill option that your browser might provide.

Added an option to disable the Password Autofill option that your browser might provide.

• Added a fix for an issue with Backdoor restriction.

• Added a fix for an issue with Backdoor restriction.

• Fixed an issue faced while trying to customize the Emergency URL
• Fixed a minor issue with the UI on the IDP list page of the plugin.

• Fixed an issue faced while trying to customize the Emergency URL.
• Fixed a minor issue with the UI on the IDP list page of the plugin.

Added a minor UI fix

Added a minor UI fix.

• Minor fix added for a UI issue with one of the descriptions in the plugin.

• Minor fix added for a UI issue with one of the descriptions in the plugin.

Improvement

• Exciting News! In the latest release for our Bitbucket SAML app, we're delighted to announce that you can now get the SCIM (System for Cross-domain Identity Management) app for free! Enhance your identity management capabilities seamlessly with SCIM integration. Download today to enjoy the latest features and unlock the power of SCIM at no additional cost! Visit the "User Sync" Tab in the plugin settings for more information.

New Features

• Option to convert group names to lowercase in the On The Fly group mapping feature.

Improvement

• Exciting News! In the latest release for our Bitbucket SAML app, we're delighted to announce that you can now get the SCIM (System for Cross-domain Identity Management) app for free! Enhance your identity management capabilities seamlessly with SCIM integration. Download today to enjoy the latest features and unlock the power of SCIM at no additional cost! Visit the "User Sync" Tab in the plugin settings for more information.

New Feature

• Option to convert group names to lowercase in the On The Fly group mapping feature.

Improvements

• Enhanced the UI within the Profile Mapping page
• Updated setup guides for quick setup flow

Bugfix

• Added a fix for miniOrange licensing

Improvements

• Enhanced the UI within the Profile Mapping page
• Updated setup guides for quick setup flow

Bugfix

• Added a fix for miniOrange licensing

The app's default certificate (SP certificate) will expire on July 15, 2023. You can find steps to replace it with a new certificate in the Certificates tab. You can check the steps in the link below too.

https://faq.miniorange.com/knowledgebase/update-saml-certificate-miniorange-plugin/

Bug Fixes

• Added admin authentication to access server log file.
• Added admin authentication for some endpoints.
• Added a fix for XSS vulnerability.
• Added a fix where some plugin cookies weren't marked as secure.

The app's default certificate (SP certificate) will expire on July 15, 2023. You can find steps to replace it with a new certificate in the Certificates tab. You can check the steps in the link below too.

https://faq.miniorange.com/knowledgebase/update-saml-certificate-miniorange-plugin/

Bug Fixes

• Added admin authentication to access server log file.
• Added admin authentication for some endpoints.
• Added a fix for XSS vulnerability.
• Added a fix where some plugin cookies weren't marked as secure.

New Features:-

• Added option to test and apply regex on IDP Groups before on-the-fly group mapping.
• Added option to hide domain-mapping form when at least one redirection rule is set.

Minor Bug Fixes:-

• Fixed 500 error thrown while saving the Sign-In Settings configurations.
• Fixed broken link to the Redirection Rules page from Sign-In Settings tab.
• Improved backend validation for the Auto Redirect Delay option and set a proper default value.
• Fixed UI issue where copy message was not shown after copying the Backdoor URL.
• Fixed the issue where the plugin was redirecting to the dashboard after SSO if the return_to URL contains "/logout".
• Fixed broken link for the miniOrange forum.

New Features:-

• Added option to test and apply regex on IDP Groups before on-the-fly group mapping.
• Added option to hide domain-mapping form when at least one redirection rule is set.

Minor Bug Fixes:-

• Fixed 500 error thrown while saving the Sign-In Settings configurations.
• Fixed broken link to the Redirection Rules page from Sign-In Settings tab.
• Improved backend validation for the Auto Redirect Delay option and set a proper default value.
• Fixed UI issue where copy message was not shown after copying the Backdoor URL.
• Fixed the issue where the plugin was redirecting to the dashboard after SSO if the return_to URL contains "/logout".
• Fixed broken link for the miniOrange forum.

• Bug fix for failed SSO for a few users after updating the add-on to the latest version
• Bug fix for the branch name is getting trimmed while creating a branch directly from connected Jira ticket

• Bug fix for failed SSO for a few users after updating the add-on to the latest version
• Bug fix for the branch name is getting trimmed while creating a branch directly from connected Jira ticket