mO Two Factor Authentication (2FA) for Confluence

UI Changes:

• Redesigned the Basic Configuration page for improved usability and added direct navigation links.
• Reorganised Advanced Options into three tabs: Security Settings, Skip 2FA, and User Experience for easier configuration.
• Added method videos for all 2FA methods and introduced a comprehensive UI Migration Guide.

Improvement:

• Enhanced Crowd Directory Sync event handling for more reliable directory updates.
• Improved 2FA validation checks on the end-user page for a more consistent verification experience.
• Improved OTP over email Method to handle users without an associated email address.

Fixes:-

• Resolved redirection issues.

• Improvement:
  • Enhanced Crowd Directory Sync user event handling for more reliable and accurate processing of directory-based updates.
  • Handled skip-2FA flow for internal plugin REST calls, ensuring smoother internal operations without unnecessary authentication prompts.
  • Improved 2FA validation checks on the end-user page to provide a more consistent and robust verification experience.
• Bug fix:
  • Minor bug fixes and UI/UX enhancements.

UI Changes:

• Redesigned the Basic Configuration Page for a smoother user experience. Added direct redirection links for easier navigation by adding direct redirection links.
• Introduced Method videos for all 9 2FA methods to help admins easily understand the setup process and functionality of each Method.
• Enhanced Advanced Options: Advanced Options are now organised into three intuitive tabs: Security Settings, Skip 2FA, and User Experience, making it easier for admins to find and configure specific features.
• UI Migration Guide: Introduced a comprehensive guide to simplify the UI migration to ensure a seamless transition.
  

Improvement:

• Updated third-party libraries to their latest patched versions to resolve known vulnerabilities and enhance overall plugin security.

Enhancement:-

• Improved OTP over email to handle users without an associated email address.

Fixes:-

• Enhanced security features for Mobile Authenticator.
• Resolved redirection issues after SSO session.
• Fixed redirection issues when a user gets locked due to brute force protection in OTP over SMS.
• Addressed minor bug fixes and performance improvements.

The add-on is now fully compatible with Confluence v10.x.x, ensuring seamless functionality and improved stability with the latest Confluence Data Center Version.

Improvements

• Strengthened the security and functionality of REST API endpoints.
• Enhanced Twilio SMS gateway integration and added support for MessagingServiceSid for scalable and efficient message delivery.

Bug Fixes

• Resolved minor bugs and UI refinements to enhance overall user experience.

New Feature:

• Import/Export: Export plugin configurations and import them into other instances for faster setup and configuration.

Enhancement:

• Automatic OTP Delivery: OTPs are now sent automatically via Email/SMS, with the flexibility for users to opt in or out based on preference
• IP Restriction Page: Minor usability and clarity improvements.

New Features:

• Added support for sending OTPs via SMS using Twilio Gateway.

Fixes:

• Improved the security of the Remember My Device feature to prevent unauthorized access.

• Updated third-party libraries to their latest patched versions to resolve known vulnerabilities and enhance overall plugin security.
• We have added a Knowledge Base page to provide a unified view of all our documentation resources, including the setup guide, setup video, demo videos, use case articles, and the handbook.
• Minor bug fixes and UI/UX enhancements.

New Feature:

• Introduced a 2FA policy where users can choose whether or not to enable two-factor authentication, giving them the flexibility to opt in or out as per their preference.

Enhancements and Fixes:

• UI enhancements for a smoother and more intuitive user experience.
• Authorization fixes for Confluence to ensure proper access control

Enhancements:

• Improved Brute force: Invalid 2FA attempts are now persistently tracked, ensuring that users are blocked after exceeding the allowed number of failed attempts.
• Stronger Secret Key: The size of the 2FA secret key has been increased to comply with stricter policies of certain authenticator apps, such as FreeOTP.

Bug Fixes:

• Fixed some redirection issues.
• Minor bug fixes and small UI/UX improvements.

• Minor bug fixes
• UI/UX enhancements

New Feature

• One-Time 2FA for Atlassian Apps – Users only need to validate 2FA once per session, eliminating the need to re-authenticate across multiple connected Atlassian applications.

Bug Fixes

• Fixed minor issues related to Yubikey Hardware Token
• Minor UI fixes

Improvements

• Added a Copy button for IP addresses on the IP Restrictions and User Configuration pages.
• Introduced a Reset button for the search filter in User Management.

Improvements:

• 2FA on REST API Calls: Enhances security by requiring users to validate 2FA from any source (browser, command-line interface) before making REST API calls.
• Admins can now view logs for authentication attempts that were aborted.

Bug Fixes:

• Fixed minor issues related to audit logs and redirection.

• Added functionality to mask user inputs for better privacy
• Fixed minor UI inconsistencies and redirection flow for a smoother user experience

• Introduced support for invoking 2FA during WebSudo Authentication to enhance security for admin-level access.
• Enhanced Duo Push functionality to automatically send push notifications, streamlining the authentication process.

• External libraries with identified vulnerabilities used in the plugin have been upgraded to their latest patched versions.
• Minor bug fixes

• New Feature: Added support for a new 2FA method – Out-of-Band Email Authentication.
• Improvement: Enhanced compatibility with Dark Mode for a seamless user experience.
• Bug Fix: Resolved a redirection issue in the login flow caused by Webpseudo Authentication

• New Feature: Added support for a new 2FA method – Out-of-Band Email Authentication.
• Improvement: Enhanced compatibility with Dark Mode for a seamless user experience.
• Bug Fix: Resolved a redirection issue in the login flow caused by Webpseudo Authentication

• Enhanced IP restrictions with full support for IPv6 addresses
• Resolved a few redirection issues
• Added whitelisted IP addresses for Atlassian Cloud applications

• Enhanced IP restrictions with full support for IPv6 addresses
• Resolved a few redirection issues
• Added whitelisted IP addresses for Atlassian Cloud applications

Made the add-on compatible with Confluence v9.x.x

Made the add-on compatible with Confluence v9.x.x

External libraries with identified vulnerabilities used in the plugin have been upgraded to their latest patched versions.

External libraries with identified vulnerabilities used in the plugin have been upgraded to their latest patched versions.

• Enhanced search functionality for Audit logs
• Fixed bug causing incorrect redirection during website authentication

• Enhanced search functionality for Audit logs
• Fixed bug causing incorrect redirection during website authentication

We have released a fix for a security vulnerability. We suggest upgrading to this version to ensure your environment is safe.

New feature

• Added support to request a new feature

Improvements

• Improved implementation of One Time 2FA feature in Crowd setups
• Improved implementation for 2FA on applications connected using application links

Bug Fixes

• Security vulnerability fix

• Minor bug fixes

We have released a fix for a security vulnerability. We suggest upgrading to this version to ensure your environment is safe.

New feature

• Added support to request a new feature

Improvements

• Improved implementation of One Time 2FA feature in Crowd setups
• Improved implementation for 2FA on applications connected using application links

Bug Fixes

• Security vulnerability fix

• Minor bug fixes

• Updated steps to download the Troubleshooting logs

• Fixed a few redirection issues

• Updated steps to download the Troubleshooting logs

• Fixed a few redirection issues

New Features

• Restrict 2FA methods to specific groups (Allow different 2FA methods to different set of users)
• Allow to End Users to select the Remember Device duration
• Option to redirect based on the URL accessed (instead of configured base URL in Confluence)
• Option to send Email notifications to end users if their 2FA is reset by admin
• Search based on Phone numbers on 2FA user management tab (for OTP over SMS method)
• Option to search Active and Inactive users on 2FA user management tab

Fixes

• Fixed the pagination issue on the Audit logs page
• Fixed the order of the audit logs

New Features

• Restrict 2FA methods to specific groups (Allow different 2FA methods to different set of users)
• Allow to End Users to select the Remember Device duration
• Option to redirect based on the URL accessed (instead of configured base URL in Confluence)
• Option to send Email notifications to end users if their 2FA is reset by admin
• Search based on Phone numbers on 2FA user management tab (for OTP over SMS method)
• Option to search Active and Inactive users on 2FA user management tab

Fixes

• Fixed the pagination issue on the Audit logs page
• Fixed the order of the audit logs

• Added compatibility with Confluence 8.8.0
• Added a fix for an issue in Remember device feature due to an issue in fetching user agent

• Added compatibility with Confluence 8.8.0
• Added a fix for an issue in Remember device feature due to an issue in fetching user agent

New features:

• Added support for configuring a custom mail server which will be used for sending any emails from the 2FA plugin.
• Added support for configuring a custom SMS server which will be used for sending any SMS from the 2FA plugin.

Improvements

• Option to set a default country code
• Handled incorrect redirection if KB articles are accessed from Jira portal
• Bug fixes and UI enhancements

New features:

• Added support for configuring a custom mail server which will be used for sending any emails from the 2FA plugin.
• Added support for configuring a custom SMS server which will be used for sending any SMS from the 2FA plugin.

Improvements

• Option to set a default country code
• Handled incorrect redirection if KB articles are accessed from Jira portal
• Bug fixes and UI enhancements

• Added customizable login strategy
• Minor bug fixes

• Added customizable login strategy
• Minor bug fixes

2.6.1 release - Minor fixes

Last releases (2.6.0) - Added compatibility with recent Confluence versions - 8.7.1, 8.6.2, 8.5.4 (long-term support version), 8.4.5, 7.19.17 (long-term support version)

2.6.1 release - Minor fixes

Last releases (2.6.0) - Added compatibility with recent Confluence versions - 8.7.1, 8.6.2, 8.5.4 (long-term support version), 8.4.5, 7.19.17 (long-term support version)

The add-on is now compatible with recent Confluence versions mentioned below:

• 8.7.1
• 8.6.2
• 8.5.4 (long-term support version)
• 8.4.5
• 7.19.17 (long-term support version)

The add-on is now compatible with recent Confluence versions mentioned below:

• 8.7.1
• 8.6.2
• 8.5.4 (long-term support version)
• 8.4.5
• 7.19.17 (long-term support version)

New features:

• Admin Audit logs: Added support for tracking 2FA plugin admin activities in Audit logs
• Java 17 compatibility
• Customizable Activity Tracking in audit logs: Tailor the Audit logs to your needs by choosing which activities to monitor

Improvements

• Resend OTP option support for OTP over SMS feature

New features:

• Admin Audit logs: Added support for tracking 2FA plugin admin activities in Audit logs
• Java 17 compatibility
• Customizable Activity Tracking in audit logs: Tailor the Audit logs to your needs by choosing which activities to monitor

Improvements

• Resend OTP option support for OTP over SMS feature

• Fixed some vulnerabilities in the addon
• Added option to enforce 2FA on Rest APIs
• Fixed “Redirection to internal pages after 2FA” issue

• Fixed some vulnerabilities in the addon
• Added option to enforce 2FA on Rest APIs
• Fixed “Redirection to internal pages after 2FA” issue

New Feature

• Added multilingual support: End users can choose their preferable language

Bug Fixes

• Added fix for forcing only currently enabled 2FA methods
• Fixed logger issue on some plugin page

New Feature

• Added multilingual support: End users can choose their preferable language

Bug Fixes

• Added fix for forcing only currently enabled 2FA methods
• Fixed logger issue on some plugin pages

• Added 2FA Remember device support for Confluence mobile app
• Added OTP over SMS support for Confluence mobile app
• Added support for fetching Confluence page information from Bitbucket using Application links

• Added 2FA Remember device support for Confluence mobile app
• Added OTP over SMS support for Confluence mobile app
• Added support for fetching Confluence page information from Bitbucket using Application links
• Licensing improvements

Handled an exception on the User Management tab of plugin

Handled an exception on the User Management tab of plugin

New Features

• Plugin Access Control: Provision to give plugin configuration access (VIEW/EDIT) based on groups to non-admin users.
• Multiple Yubikey (Security Key) Configuration Support
• Multiple Device Configuration Support in WebAuthn 2FA method

New Features

• Plugin Access Control: Provision to give plugin configuration access (VIEW/EDIT) based on groups to non-admin users.
• Multiple Yubikey (Security Key) Configuration Support
• Multiple Device Configuration Support in WebAuthn 2FA method

UI changes:

• Improved UI of the plugin admin dashboard for better usability and experience (View migrated settings)

New Features:

• Customizable Security Questions with support for all languages
• Provision to change the look and feel of 2FA registration and 2FA validation pages for WebAuthn and Duo methods

Bug Fixes:

• Fixed an issue on Confluence Mobile app in crowd flow

UI changes:

• Improved UI of the plugin admin dashboard for better usability and experience (View migrated settings)

New Features:

• Customizable Security Questions with support for all languages
• Provision to change the look and feel of 2FA registration and 2FA validation pages for WebAuthn and Duo methods

Bug Fixes:

• Fixed an issue on Confluence Mobile app in crowd flows

• Fixed a redirection issue after 2FA verification

• Fixed a redirection issue after 2FA verification

• Fixed an issue related to redirection after 2FA validation on certain confluence versions

• Fixed an issue related to redirection after 2FA validation on certain confluence versions

• Added a fix for a redirection issue faced by some customers.
• Fixed an issue faced while trying to upload the plugin.
• Added fixes to make the plugin compatible with Native SSO.

• Added a fix for a redirection issue faced by some customers.
• Fixed an issue faced while trying to upload the plugin.
• Added fixes to make the plugin compatible with Native SSO.

• Added fixes for 2FA on Confluence Mobile app
• Handled 2FA enable/disable on user synchronization from crowd
• Added fixes regarding secure cookies
• Added remaining pages in Look and Feel tab
• Added next scheduler run information in the Audit Logs tab
• UI Improvements (In all tables for handling large username)

• Added fixes for 2FA on Confluence Mobile app
• Handled 2FA enable/disable on user synchronization from crowd
• Added fixes regarding secure cookies
• Added remaining pages in Look and Feel tab
• Added next scheduler run information in the Audit Logs tab
• UI Improvements (In all tables for handling large username)