Single Sign On SAML SSO for Confluence (SSO SAML)+User Sync

Updated the versions of a few 3rd party dependencies to account for vulnerabilities pointed out in them.

SAML SSO:

• Fixed invalid URL handling to ensure redirection to the login page.
• Resolved JavaScript conflicts with other plugins.

SCIM Provisioning:

• Added support for detailed audit logs for improved tracking of plugin operations.
• Introduced functionality to seamlessly migrate users across directories without losing their access or resources.
• Fixed Oracle provisioning issues to ensure smoother and more reliable provisioning.
• Improved GSuite provisioning performance, enhancing speed and reliability for user and group provisioning.
• Updated third-party libraries to their latest patched versions to resolve known vulnerabilities and enhance overall plugin security.

Feature Enhancement :

• Restore the Default Custom Login and Logout template.
• Advance Audit Log Search

Bug fix:

• Fixed the current login template.
• Display value saved in Restrict SSO for Specific Groups feature.

• Updated the functionality for “User with no IDP groups” and also updated label text to “Users with no IDP Groups in Group Mapping.”
• Fixed issue where Remote Directory Sync was not functioning.
• Resolved bug causing Redirection Rules tab to always display “All Changes Saved.”
• Fixed an issue where Redirection Rules Priority was not being applying correctly.
• Corrected Backup and Restore API failures when using PAT tokens.
• Added additional success and error logs for better visibility.

Made the add-on compatible with the latest versions of Confluence.

• Addressed the issue where Restrict Duplicate SAML Assertion was not functioning correctly.
• Updated Header-Based Authentication and UI Migration Guide to use the new side menu layout.
• Fixed scheduler execution issue during plugin upload and ensured scheduler logs are visible after enabling the Metadata Rollover toggle.
• Restricted access to Global SSO Settings APIs to improve overall security.
• Applied multiple UI and UX consistency fixes across SAML configuration screens.
• Resolved SP Metadata reset issue when updating Base URL or Entity ID.
• Fixed Single Logout (SLO) not working correctly when using a GET-type response.
• Resolved the logout loop issue when switching between SSO and local login.
• Fixed IDP Metadata URL removal from the Import Metadata section after saving configuration.
• Fixed the Signing certificate disabled warning in IDP configuration.
• Corrected redirection issue where the custom error message page was not redirecting to the login page.

Bug Fixes:

• Bug fixes in “Allow SSO on Administrator Login Page” feature in Sign In Settings tab.

Migration Advisory: This advisory is with regards to the migration from version 3.x.x to version 4.0.1: ⚠️ Migration Advisory for Customers Upgrading from v3.x.x to v4.0.1.

Bug Fixes:

• Resolved an issue related to the context path in the plugin’s URL.

Migration Advisory: This advisory is with regards to the migration from version 3.x.x to version 4.0.1: ⚠️ Migration Advisory for Customers Upgrading from v3.x.x to v4.0.1.

Bug Fixes:

• Resolved an issue related to the context path in the plugin’s URL.

Migration Advisory: This advisory is with regards to the migration from version 3.x.x to version 4.0.1: ⚠️ Migration Advisory for Customers Upgrading from v3.x.x to v4.0.1.

Bug Fixes:

• Fixed redirect loop encountered when accessing the admin area via SSO.

Improvements:

• improved session handling for admin users logging in through SSO to ensure proper session binding.

You can now use SCIM-based user provisioning directly within the SAML plugin. We’ve also reworked the UI to make navigation and accessing features easier, which includes moving some settings to new sections. As a result, the plugin backup file structure has changed.

Before Upgrade:

• Check the guide to see where settings are moved.
• Download the plugin configuration backup from Backup and Restore.

After Upgrade:

• Test in staging.
• If you use the backup file in scripts, download the new version from Backup and Restore.

Changelog:

• Added SCIM provisioning support.
• Major UI rework for smoother navigation.
• Database migration to Active Objects for better performance (tables created automatically).
• Security update: switched from openSAML to OneLogin for improved SAML handling.

Added a minor fix for the listing of the plugin.

Made the add-on compatible with the latest version of Confluence v10.

Bug Fixes:-

• Added a UI fix for Knowledge Base tab.

Improvements:-

• Improvement in rendering custom login templates.
• Improvement in Certificate Expiry Email Notification Template.

Knowledge Base Improvements:-

• Added a use case documentation under the Knowledge Base tab.

• Default Certificate Update Banner:
  A banner has been added to inform users that the default miniOrange SP certificates have been replaced with new certificates having extended validity. The banner includes a “Replace Default Certificates” button, allowing users to seamlessly update to the latest certificate with extended expiry.
• Knowledge Base Section:Introduced a new Knowledge Base tab that provides easy access to helpful resources. It includes:
  • Video Tab – Setup guides, use case demonstrations, and feature walkthroughs.
  • FAQ Tab – Answers to commonly asked questions.
  • Handbook Tab – Comprehensive documentation and guides.

• Certificate Expiry Alert Added — The plugin now displays alert flags and a banner to inform users that the default miniOrange signing certificates are due to expire within the next 60 days.

• New Feature:Introduced a Download button in the Audit Logs section, allowing users to easily download log data.
• UI Enhancements:Improved the plugin UI and added support for dark theme compatibility in Confluence.

Compatibility Update:

1. Made the plugin compatible with Confluence v9.3.2

Bug Fixes:

1. Bug fixes in Restrict local authentication feature.

Added support for certificate decryption for IDPs that use multiple encryption algorithms.

Made the plugin compatible with Confluence v9.1.0

Added a fix for space permissions issues being faced on a few 8.x versions of Confluence.

Added a minor UI fix to the main plugin page.

• Made the add-on compatible with Confluence v9.x.x
• Added patches for vulnerabilities pointed out in some of the 3rd party libraries used in the plugin.

Added support for Personal Access Tokens in the REST API provided for plugin configuration.

Added support for Personal Access Tokens in the REST API provided for plugin configuration.

Minor UI fix for the Test Group Regex pop-up in the On The Fly group mapping section.

Minor UI fix for the Test Group Regex pop-up in the On The Fly group mapping section.

New Feature

• Added a feature where you can now disable Password Auto-fill from within the plugin directly for your Jira instance.

Improvement

• Added support for complex regex expressions which can be used to transform usernames.

Bug Fix

• Fixed a minor bug in the import/export configuration feature.

New Feature

• Added a feature where you can now disable Password Auto-fill from within the plugin directly for your Jira instance.

Improvement

• Added support for complex regex expressions which can be used to transform usernames.

Bug Fix

• Fixed a minor bug in the import/export configuration feature.

• Added a fix for an issue with Emergency URL restriction.
• Minor UI improvement.

• Added a fix for an issue with Emergency URL restriction.
• Minor UI improvement.

Bugfix for SSO configuration via the quick setup flow

Bugfix for SSO configuration via the quick setup flow

Updated the SAML SSO plugin to ensure compatibility with the latest Confluence version, v8.8.0

Updated the SAML SSO plugin to ensure compatibility with the latest Confluence version, v8.8.0

• Added a fix for an issue faced while creating and using App-links
• Added a fix for an issue with the Remember Me functionality provided in the plugin.
• Added a few UI improvements

• Added a fix for an issue faced while creating and using App-links
• Added a fix for an issue with the Remember Me functionality provided in the plugin.
• Added a few UI improvements.

Improvements:

• Updated the plugin framework to the latest version supported by Atlassian
• Added support for Guest Login to unlicensed and deactivated users

Bug Fixes:

• Added fixes for an issue faced with Certificate generation on instances running with Java 17
• Added a fix for certificates getting reverted to default values on some fresh instance installs

Improvements:

• Updated the plugin framework to the latest version supported by Atlassian
• Added support for Guest Login to unlicensed and deactivated users

Bug Fixes:

• Added fixes for an issue faced with Certificate generation on instances running with Java 17
• Added a fix for certificates getting reverted to default values on some fresh instance installs

One of the external libraries with vulnerabilities used in the plugin has been updated to the latest patched version.

One of the external libraries with vulnerabilities used in the plugin has been updated to the latest patched version.

• Fixed the user interface of the 'Remember My' Identity Provider configuration page
• Fixed the user interface of the 'On-the-fly group mapping' configuration page
• Fixed an issue where no error message was displayed when an unauthorized user, attempting to bypass SSO, tried to log in with local credentials

• Fixed the user interface of the 'Remember My' Identity Provider configuration page
• Fixed the user interface of the 'On-the-fly group mapping' configuration page
• Fixed an issue where no error message was displayed when an unauthorized user, attempting to bypass SSO, tried to log in with local credentials

Bug fix for restoring configuration by uploading the configuration backup file

Made the add-on compatible with Confluence versions mentioned below:

• 8.7.1
• 8.6.2
• 8.5.4 (long-term support version)
• 8.4.5
• 7.19.17 (long-term support version)

Bug fix for restoring configuration by uploading the configuration backup file

Made the add-on compatible with Confluence versions mentioned below:

• 8.7.1
• 8.6.2
• 8.5.4 (long-term support version)
• 8.4.5
• 7.19.17 (long-term support version)

• Added a security patch for environments which do not allow cookies to be read via JavaScript
• Minor UI fix.

• Added a security patch for environments which do not allow cookies to be read via JavaScript
• Minor UI fix.

Improvements

• Exciting News! In the latest release for our Confluence SAML app, we're delighted to announce that you can now get the SCIM (System for Cross-domain Identity Management) app for free! Enhance your identity management capabilities seamlessly with SCIM integration. Download today to enjoy the latest features and unlock the power of SCIM at no additional cost! Visit the "User Sync" Tab in the plugin settings for more information.

New Features

• You now have an option to login users using any custom attribute you might have in your IDP, instead of just the username or email attributes.
• Option to convert group names to lowercase in the On The Fly group mapping feature.

Bug Fix

• Fixed an issue where random HTML content was getting added to the exported plugin configuration.

Improvements

• Exciting News! In the latest release for our Confluence SAML app, we're delighted to announce that you can now get the SCIM (System for Cross-domain Identity Management) app for free! Enhance your identity management capabilities seamlessly with SCIM integration. Download today to enjoy the latest features and unlock the power of SCIM at no additional cost! Visit the "User Sync" Tab in the plugin settings for more information.

New Features

• You now have an option to login users using any custom attribute you might have in your IDP, instead of just the username or email attributes.
• Option to convert group names to lowercase in the On The Fly group mapping feature.

Bug Fix

• Fixed an issue where random HTML content was getting added to the exported plugin configuration.

• Account section introduced to view plugin license details
• Email service for license expiry
• Improvements in the licensing module

• Account section introduced to view plugin license details
• Email service for license expiry
• Improvements in the licensing module

New Feature

• Added an option which allows admins to disable local login for the Admin Authentication page.

Bug Fixes

• Added a fix for faulty redirection after initiating logout from Confluence.
• Added a fix for issue faced while trying to perform IDP initiated single logout.
• Added a fix for issue with group name parsing if the group name contains a comma.
• Added a few minor fixes for the Session Timeout Warning feature

New Feature

• Added an option which allows admins to disable local login for the Admin Authentication page.

Bug Fixes

• Added a fix for faulty redirection after initiating logout from Confluence.
• Added a fix for issue faced while trying to perform IDP initiated single logout.
• Added a fix for issue with group name parsing if the group name contains a comma.
• Added a few minor fixes for the Session Timeout Warning feature

• Made plugin compatible with miniOrange Usersync|SCIM app

• Made plugin compatible with miniOrange Usersync|SCIM app

The app's default certificate (SP certificate) will expire on July 15, 2023. You can find steps to replace it with a new certificate in the Certificates tab. You can check the steps in the link below too.

https://faq.miniorange.com/knowledgebase/update-saml-certificate-miniorange-plugin/

The app's default certificate (SP certificate) will expire on July 15, 2023. You can find steps to replace it with a new certificate in the Certificates tab. You can check the steps in the link below too.

https://faq.miniorange.com/knowledgebase/update-saml-certificate-miniorange-plugin/

• Added some certificate compatibility fixes for Java version 11
• Fix for redirection issue faced after logout

• Added some certificate compatibility fixes for Java version 11
• Fix for redirection issue faced after logout

• Added a fix for logout based redirection.

• Added a fix for logout based redirection.

Bugfix for redirection rule configuration not showing all IDPs

Bugfix for redirection rule configuration not showing all IDPs

We've added a few UI Improvements to the user and group provisioning sections.

We've added a few UI Improvements to the user and group provisioning sections.