1 2 3 4 5 6 7 8 9

10 11 12 13 14 15 16 17 18 19 20 21 22

Jazz

2016 (September 11th 2020)2015 (April 29th 2020)2014 (September 12th 2019)2013 (April 19th 2019)2012 (January 17th 2019)2011 (November 2nd 2018)2010 (August 17th 2018)209 (June 28th 2018)208 (March 13th 2018)207 (December 22nd 2017)206 (October 9th 2017)205 (September 6th 2017)204 (July 3rd 2017)203 (April 15th 2017)202 (January 27th 2017)201 (October 21st 2016)200 (September 9th 2016)200M5 (September 2nd 2016)200-M4 (June 24th 2016)200-M3 (June 3rd 2016)200-M2 (March 21st 2016)200-M1 (December 23rd 2015)

2016 (September 11th 2020)Apache Syncope 2016 Jazz is a maintenance release

Issues

Bug

[ ] - Groups select opens a popup when removing a groupSYNCOPE-1549[ ] - File upload component missing translationsSYNCOPE-1560[ ] - Integration tests run with YAML payloads are failingSYNCOPE-1564[ ] - Integration tests run with XML payloads are failingSYNCOPE-1565[ ] - Mapping does not allow relationshipsSYNCOPE-1567[ ] - Logout forced from Console when editing user with many membershipsSYNCOPE-1573[ ] - For members part of a Dynamic Group but cannot access group attributes in member mappingSYNCOPE-1583

Improvement

[ ] - Provide the ability to specify on which resources the users status should be propagatedSYNCOPE-1575

2015 (April 29th 2020)Apache Syncope 2015 Jazz is a maintenance release

Issues

Bug

[ ] - Changes to AjaxPalettePanel components in Console are not saved when the previous step button is pressed before SYNCOPE-1505submitting the wizard form[ ] - Social registration does not redirect to self registration pageSYNCOPE-1524

Upgrade procedure

Upgrading from 2015 There are about this processsome notes

Upgrade procedure

Upgrading from 2014 There are about this processsome notes

[ ] - Documentation indicates sharing private key hiding public keySYNCOPE-1525[ ] - Broken link to issues from reference documentationSYNCOPE-1526[ ] - AjaxPalettePanel does not support setRequiredSYNCOPE-1539

Improvement

[ ] - Allow variable resolution in ContentxmlSYNCOPE-1498[ ] - Auto-select language from Accept-Language HTTP headerSYNCOPE-1509[ ] - Allow X-Forwarded-For and X-Forwarded-Proto HTTP headers integrationSYNCOPE-1518[ ] - XML response message timestamps missing millisecs component if 0 msecsSYNCOPE-1541

2014 (September 12th 2019)Apache Syncope 2014 Jazz is a maintenance release

Issues

Bug

[ ] - RDN not allowed when an attribute of the group present also in the DN is changedSYNCOPE-1467[ ] - Resource association is duplicated on database after update assign or link operationsSYNCOPE-1472[ ] - Activiti modeler is not rendered on Google ChromeSYNCOPE-1475[ ] - Error while creating Enum schema from Admin ConsoleSYNCOPE-1476[ ] - jQuery UIs spinner not renderedSYNCOPE-1477[ ] - Elasticsearchdynrealm assignment not updated on condition changeSYNCOPE-1480[ ] - Invalid values when saving a membership attribute of type dateSYNCOPE-1481[ ] - syncope-ide-netbeans submodule fails to find netbeans dependencySYNCOPE-1484[ ] - Reindex of elasticsearch ends with memory error in case of huge amount of dataSYNCOPE-1485[ ] - Build Instructions do not say that the patch program is neededSYNCOPE-1487[ ] - Change to MVM Env for JDK gt 800SYNCOPE-1488[ ] - Build Instructions are missing an EVN (DOCKER_HOST) needed for mvn -Ppostgres-itSYNCOPE-1492[ ] - Mapping unique schema as remote key never matches internal objectsSYNCOPE-1493

Improvement

[ ] - Allow for configurable orgquartzjobStoremisfireThresholdSYNCOPE-1468[ ] - Provide a PropagationActions to maintain a conservative membership policy managementSYNCOPE-1473

Task

[ ] - Upgrade to Apache Netbeans Maven dependenciesSYNCOPE-1464

2013 (April 19th 2019)Apache Syncope 2013 Jazz is a maintenance release

Issues

Bug

[ ] - APIs to read by key return 404 instead of 401 for not authenticated callsSYNCOPE-1428[ ] - Wildcard case-insesitive queries do not work with ElasticsearchSYNCOPE-1429[ ] - ItemTransformer for Date schemas throws NPESYNCOPE-1430[ ] - changePwdDate field is not initialized when create a new user with the specified passwordSYNCOPE-1438[ ] - User membership attributes not updatedSYNCOPE-1439[ ] - Pagination of UsersGroups doesnt work as expected with ElasticsearchSYNCOPE-1440[ ] - Inactive Job with cron expression set is executed anywaySYNCOPE-1442[ ] - Changing Display Rows number in Reconciliation Resource Panel doesnt workSYNCOPE-1443

Upgrade procedure

Upgrading from 2013 There are about this processsome notes

Upgrade procedure

Upgrading from 2012 There are about this processsome notes

[ ] - Audit sensitive information not masked by default during updateSYNCOPE-1450[ ] - Notification about is not deleted after updateSYNCOPE-1452[ ] - MappingItem with mustChangePassword field cannot be provisioned and updated during importSYNCOPE-1453[ ] - Avoid duplicated Propagation TasksSYNCOPE-1454[ ] - NonAlphaNumeric policy pattern matches the Not word character classSYNCOPE-1457

Improvement

[ ] - Unflagflag uniqueness shouldnt be permittedSYNCOPE-1433[ ] - getRemoteObject into AbstractPropagationTaskExecutor does not check for null object before retrieving attribute fromSYNCOPE-1434[ ] - Remove pullPolicy EAGER fetchType from JPAExternalResourceSYNCOPE-1436[ ] - Perform in-memory match for dynamic conditionsSYNCOPE-1441[ ] - Pull correlation rules allow to discriminate ongoing eventSYNCOPE-1444[ ] - Support multi-value attributes in JEXL expressionsSYNCOPE-1449

2012 (January 17th 2019)Apache Syncope 2012 Jazz is a maintenance release

New and noteworthy

Search Improvements

Various fixes and enhancements finally landed that significantly improve User Group Any Object and Task search operations both in performance and consistence terms see and for detailsSYNCOPE-1417 SYNCOPE-1419 SYNCOPE-1412 SYNCOPE-1424

After Enduser UI now also Admin Console is accessible to the visually impaired

Now both Admin Console and Enduser UI implement accessibility features to help usage by the visually impaired

Issues

Bug

[ ] - Check template for confirmPasswordReset and mustChangePasswordSYNCOPE-1391[ ] - jexl function fullPath2Dn return invalid value for ROOT realmSYNCOPE-1393[ ] - Console stucks on update with unique key constraint violationSYNCOPE-1398[ ] - Error during db initialization viewsxml always set for PostgreSQLSYNCOPE-1405[ ] - Date pattern ignored by widgetSYNCOPE-1407[ ] - Partial user edit via Role layout implies removing all unmanaged attributesSYNCOPE-1408[ ] - UserAny object updates generate attributes with null owner in case of patches involving membership attributesSYNCOPE-1411[ ] - Search with order by two plain attributes gives no resultsSYNCOPE-1417[ ] - User and AnyObject search fails in case of not leaf conditions given on multivalue fieldsSYNCOPE-1419[ ] - Expired Access Tokens might impede successful authenticationSYNCOPE-1420[ ] - Mapping item transformers do not work for non-string valuesSYNCOPE-1425

New Feature

[ ] - Add some accessibility features to ConsoleSYNCOPE-1368

Improvement

[ ] - Add un-claim capability for requestsSYNCOPE-1394[ ] - Give the possibility to configure TLS client parametersSYNCOPE-1396[ ] - Avoid double round-trip to External Resource during PushSYNCOPE-1409[ ] - Search for identities with null attributes can be improvedSYNCOPE-1412[ ] - remove user_search_null_attr viewSYNCOPE-1416[ ] - Permit to provide custom implementation of NotificationManager and AuditManagerSYNCOPE-1422[ ] - Improve Propagation task ordered searchSYNCOPE-1424

2011 (November 2nd 2018)

Upgrade procedure

Upgrading from 2011 There are about this processsome notes

Apache Syncope 2011 Jazz is a maintenance release

Bug

[ ] - Delegated administration to Dynamic Realms not possibleSYNCOPE-1360[ ] - Custom audit appender does not work after a restartSYNCOPE-1361[ ] - Audit events ownership always set to admin userSYNCOPE-1366[ ] - Password reset succeeds also on wrong captchaSYNCOPE-1370[ ] - Password history checks not effectiveSYNCOPE-1372[ ] - Custom task schedule is reset after updateSYNCOPE-1373[ ] - Concurrent propagation tasks for non-Master domains not savedSYNCOPE-1374[ ] - The existence of a membership attribute mapping implies membership creation during pullSYNCOPE-1375[ ] - swagger-ui server URL incorrect behind ssl reverse proxySYNCOPE-1376[ ] - Wrong X-Syncope-Domain header does not throw an errorSYNCOPE-1377[ ] - During Push or Pull if policy with conflict resolution IGNORE is set the process is interrupted as soon as such setting appliesSYNCOPE-1380[ ] - Exception during getObject from external resourceSYNCOPE-1383[ ] - ClassCast exception when pull realmsSYNCOPE-1387[ ] - mustChangePassword flag does not prevent user from invoking actionsSYNCOPE-1388[ ] - In case of virtual attribute mapping propagation is always set as UPDATE also in case of CREATESYNCOPE-1389[ ] - Pull Realms pull task with Unmatching Rules PROVISION shouldnt create propagation taskSYNCOPE-1390

New Feature

[ ] - Template mechanism for Enduser UISYNCOPE-1019[ ] - Add some accessibility features to EnduserSYNCOPE-1367

Improvement

[ ] - Make configurable resource check timeoutSYNCOPE-1379[ ] - Failure specifying push task filters including db column mapped as integerSYNCOPE-1382[ ] - SAML 20 Allow to customize RequestedAuthnContext for a given Service ProviderSYNCOPE-1384[ ] - Priority propagation timeout hard coded into PriorityPropagationTaskExecutorSYNCOPE-1385

2010 (August 17th 2018)Apache Syncope 2010 Jazz is a maintenance release

Issues

Bug

[ ] - Missing virtual attribute value in case of type extensionSYNCOPE-1333[ ] - Password history policy is not enforced on salted passwordsSYNCOPE-1337[ ] - Double type conversion applied during pull leads to errorsSYNCOPE-1338[ ] - Enduser spinner does not apply to the whole pageSYNCOPE-1339[ ] - Cannot update membership attributeSYNCOPE-1340[ ] - Attributes are not reset after pull of null valuesSYNCOPE-1343[ ] - CORE_SCHEME not being updated in enduserpropertiesSYNCOPE-1344[ ] - Adding a new task while re-executing a propagation taskSYNCOPE-1346[ ] - Invocation Problem calling orgapachesyncopeinstallerprocessesArchetypeProcessSYNCOPE-1347[ ] - Date values not formatted according to the conversion patternSYNCOPE-1350[ ] - Group wizard doesnt update the plain attributesSYNCOPE-1352[ ] - DBPasswordPropagationActions link in the reference guide is wrongSYNCOPE-1353[ ] - Push Tasks do not send status onto External ResourcesSYNCOPE-1354[ ] - LDAPMembershipPullActions does not remove membershipsSYNCOPE-1356[ ] - MemoryVirAttrCache not workingSYNCOPE-1357[ ] - Search by boolean value does not work from Admin ConsoleSYNCOPE-1358

Improvement

Upgrade procedure

Upgrading from 2010 There are about this processsome notes

Upgrade procedure

Upgrading from 209 There are about this processsome notes

[ ] - Need option to configure the encryption algorithm used to generate JWTSYNCOPE-1328[ ] - JWT need support for asymmetric keySYNCOPE-1329[ ] - Add pagination for approvals formsSYNCOPE-1336[ ] - Domain should be configurable parameter for syncope-enduser docker imageSYNCOPE-1341[ ] - Document how to access services when using Docker ComposeSYNCOPE-1355

209 (June 28th 2018)Apache Syncope 209 Jazz is a maintenance release

New and noteworthy

OpenID Connect Client features

SYNCOPE-1270 provides an enabling Apache Syncope to act as as extension OpenID Connect Client

Once an Apache Syncope deployment - enabled with this extension - is properly configured and the Syncope Core application is running the Syncope Admin UI and the Syncope Enduser UI can be enabled to allow OpenID Connect-based SSO The global result is that Admin UI and or Enduser UI can be accessed after user authentication against (one of configured) providersOpenID Connect

Docker Hub

Finally Apache Syncope Core Console and Enduser are available as three separated Docker images at Docker Hub published under the apacheorganization

Details are provided in the guide Getting Started

Enduser UI social registration

Once configured the appropriate SAML 20 Service Provider features or OpenID Connect Client features for the Enduser UI it is now possible to take the initial values for some attributes in Syncope from a profile owned by the registering user in one of most popular social networks as Twitter LinkedIn Facebook Google+

More bundled ConnId connectors

New ConnId connectors come bundled with Apache Syncope

Azure Active DirectorySCIM 11ServiceNow

Miscellaneous

Reference provided relying on the famous servicePassword Rule Have I been PwnedManual reconciliation tool for Admin Console given a User Group Any Object and an External Resource allows to examine the current status force pushing or pulling values for mapped attributesREST now supports for exchanging payloads besides and applicationyaml applicationjson applicationxml

Issues

Bug

[ ] - Search schema errorSYNCOPE-1282[ ] - Quartz db init on HA environments occurs on all nodesSYNCOPE-1285[ ] - Propagation tasks list not keeping order while browsing pagesSYNCOPE-1288[ ] - Deletion of only schema entry breaks schema UISYNCOPE-1290[ ] - Cannot login again into Admin Console after Session ExpiredSYNCOPE-1291[ ] - Default password reset notifications not workingSYNCOPE-1293[ ] - Plainschema panel doesnt display the assigned validator classSYNCOPE-1294[ ] - Select all + bulk button redirecting to top of the page on clickSYNCOPE-1297[ ] - Quartz jobs with no matching Task or Report not visible from Admin ConsoleSYNCOPE-1298[ ] - Token creation is not threadsafeSYNCOPE-1301[ ] - Content migration from 12 problemsSYNCOPE-1303[ ] - Order Groups by userOwner throws DataIntegrityViolation exceptionSYNCOPE-1304[ ] - Date value without a conversion pattern not shown by Admin ConsoleSYNCOPE-1306

Upgrade procedure

Upgrading from 208 There are about this processsome notes

[ ] - Wrong export order for RealmsSYNCOPE-1307[ ] - Exception getting users with orderBy on SyncopeClient API with Postgres 103SYNCOPE-1308[ ] - Enduser UI does not remove Access Token on FinishSYNCOPE-1309[ ] - Console CSS is depending from Google fontsSYNCOPE-1312[ ] - Bulk action from reconciliation section ever shows NOT ATTEMPTED after provisionSYNCOPE-1314[ ] - Propagation task sorting by Object Type not working as expectedSYNCOPE-1315[ ] - RuntimeException when remove all schemasSYNCOPE-1317[ ] - Future task rejected from ScheduledThreadPoolExecutorSYNCOPE-1318[ ] - Pull Task template not assigning rolesSYNCOPE-1319[ ] - Push task report generation fails in case of IgnoreProvisionExceptionSYNCOPE-1320[ ] - Search doesnt work for date attributes with conversion pattern with time zoneSYNCOPE-1321[ ] - Wizard generates unnecessary attrPatch when the field is emptySYNCOPE-1326

New Feature

[ ] - Social registration for Enduser UISYNCOPE-1018[ ] - Docker imagesSYNCOPE-1256[ ] - OpenID Connect client featureSYNCOPE-1270[ ] - Support Azure ADSYNCOPE-1283[ ] - REST support YAML payloadsSYNCOPE-1289[ ] - Support SCIM v11SYNCOPE-1310[ ] - Support ServiceNowSYNCOPE-1316

Improvement

[ ] - SAML-initiated self-registrationSYNCOPE-1148[ ] - Use Remote Key during Pull to match internal entitiesSYNCOPE-1292[ ] - Create a structured wizard to edit SCIM 20 configurationSYNCOPE-1295[ ] - Manual reconciliationSYNCOPE-1299[ ] - New expression model in mapping for internal attributes to access user relationshipsSYNCOPE-1302[ ] - Get available tasks from workflow definitionSYNCOPE-1322[ ] - Have I Been Pwned password ruleSYNCOPE-1324

208 (March 13th 2018)Apache Syncope 208 Jazz is a maintenance release

Security advisories

CVE-2018-1321CVE-2018-1322

New and noteworthy

Admin Console

New language translation available Japanese

Upgrade procedure

Upgrading from 207 There are about this processsome notes

New feature schema search

Enduser UI

New language translation available Japanese

OpenAPI 30 Swagger UI 30

The existing support for Swagger 20 specification was upgraded to OpenAPI 30

Additionally Swagger UI 20 was replaced by Swagger UI 30

Issues

Bug

[ ] - USER search by GROUP does not work if group name has spacesSYNCOPE-1257[ ] - When starting with empty database and no ConnInstances in Contentxml no bundles are reported as availableSYNCOPE-1261[ ] - REST invocation with invalid JWT string returns 500SYNCOPE-1263[ ] - SAML 20 IdP cache empty until either new is imported or SAML2IdPServicelist is invokedSYNCOPE-1265[ ] - Multivalue binary attributes leads to OutOfMemory exceptionSYNCOPE-1266[ ] - Cannot specify validator for Configuration ParametersSYNCOPE-1269[ ] - Export of the report always returns the result of the last executionSYNCOPE-1272[ ] - Add the possibiliy to delete a jobSYNCOPE-1275[ ] - Link or assign Group from External Resource resets dynamic membership conditionsSYNCOPE-1276

New Feature

[ ] - Japanese translation for Admin console amp Enduser UISYNCOPE-1259[ ] - Provide live updates from running tasks and reportsSYNCOPE-1279

Improvement

[ ] - Search funcionality in SchemasSYNCOPE-1225[ ] - Provide check of mimetypes before generate a binary attribute previewSYNCOPE-1267[ ] - Report required and read-only payload properties in OpenApi specSYNCOPE-1274[ ] - Better job interruptSYNCOPE-1280

Task

[ ] - Upgrade to Swagger UI 30SYNCOPE-1262

207 (December 22nd 2017)Apache Syncope 207 Jazz is a maintenance release

New and noteworthy

SCIM 20

The is now available allowing to provision users and groups through the new REST endpoint according to the (System for SCIM extension scim SCIMCross-domain Identity Management) 20 specifications

Upgrade procedure

Upgrading from 206 There are about this processsome notes

Additionally Swagger UI 20 was replaced by Swagger UI 30

Issues

Bug

[ ] - USER search by GROUP does not work if group name has spacesSYNCOPE-1257[ ] - When starting with empty database and no ConnInstances in Contentxml no bundles are reported as availableSYNCOPE-1261[ ] - REST invocation with invalid JWT string returns 500SYNCOPE-1263[ ] - SAML 20 IdP cache empty until either new is imported or SAML2IdPServicelist is invokedSYNCOPE-1265[ ] - Multivalue binary attributes leads to OutOfMemory exceptionSYNCOPE-1266[ ] - Cannot specify validator for Configuration ParametersSYNCOPE-1269[ ] - Export of the report always returns the result of the last executionSYNCOPE-1272[ ] - Add the possibiliy to delete a jobSYNCOPE-1275[ ] - Link or assign Group from External Resource resets dynamic membership conditionsSYNCOPE-1276

New Feature

[ ] - Japanese translation for Admin console amp Enduser UISYNCOPE-1259[ ] - Provide live updates from running tasks and reportsSYNCOPE-1279

Improvement

[ ] - Search funcionality in SchemasSYNCOPE-1225[ ] - Provide check of mimetypes before generate a binary attribute previewSYNCOPE-1267[ ] - Report required and read-only payload properties in OpenApi specSYNCOPE-1274[ ] - Better job interruptSYNCOPE-1280

Task

[ ] - Upgrade to Swagger UI 30SYNCOPE-1262

207 (December 22nd 2017)Apache Syncope 207 Jazz is a maintenance release

New and noteworthy

SCIM 20

The is now available allowing to provision users and groups through the new REST endpoint according to the (System for SCIM extension scim SCIMCross-domain Identity Management) 20 specifications

Upgrade procedure

Upgrading from 206 There are about this processsome notes

Issues

Bug

[ ] - Unwanted delete from External Resources on Membership removalSYNCOPE-1222[ ] - Cannot search for values containing commaSYNCOPE-1223[ ] - CLI user all operations limited to 25 usersSYNCOPE-1224[ ] - List the attributes to be displayed show deleted attributesSYNCOPE-1226[ ] - Password template not nullable after settingSYNCOPE-1227[ ] - Pull task execution bulk delete failsSYNCOPE-1229[ ] - Bad toggle handling during task execution deleteSYNCOPE-1230[ ] - Hidden columns in bulk action resul modal pageSYNCOPE-1231[ ] - AnyType removal does not check for existing AnyObjectsSYNCOPE-1232[ ] - NullPointerException in Topology after creating a connector with no displayName using pure REST callSYNCOPE-1233[ ] - Unlink or unassign Group from External Resource resets dynamic membership conditionsSYNCOPE-1235[ ] - Pagination error for executed tasksSYNCOPE-1236[ ] - Missing specified plain attr values if plain attr step is the last one of the any management wizardSYNCOPE-1239[ ] - Under high load propagation after pull might failSYNCOPE-1241[ ] - Error creating bean with name logicInitializer on startup related to quartz clusteringSYNCOPE-1244[ ] - Group membership search stucks with several thousands of groupsSYNCOPE-1246[ ] - Group search and auto-completion does not work with several thousands of groupsSYNCOPE-1247[ ] - Password policy history error when the user is updated before being approvedSYNCOPE-1248[ ] - Missing attributes layout orderSYNCOPE-1250[ ] - UserTO variable is not updated during Update Activiti TaskSYNCOPE-1251[ ] - Search failing for non-string attributes from Admin ConsoleSYNCOPE-1252[ ] - Pulled users have password set even if no mapping was providedSYNCOPE-1253

Improvement

[ ] - Update RelationshipTO to also report the left end of a relationshipSYNCOPE-1138[ ] - Parent should be passed once for Realm createSYNCOPE-1228[ ] - SyncDelta pre-processingSYNCOPE-1234[ ] - Copy table row element key to clipboard by clicking on its name in toggle menuSYNCOPE-1237[ ] - Terminate Topology background checks once completedSYNCOPE-1238[ ] - Simple way to see elements full text value in Palette PanelsSYNCOPE-1242[ ] - Add information to GroupTO about user and AnyObject membership countsSYNCOPE-1243[ ] - Dynamic grouprole createupdate can result in timeout error in case of a great number of membersSYNCOPE-1255

New Feature

[ ] - Support SCIM REST APISYNCOPE-152[ ] - Support for mustChangePassword mappingSYNCOPE-1249

206 (October 9th 2017)Apache Syncope 206 Jazz is a maintenance release

Issues

Bug

[ ] - Serialization exception in the logs when editing users pending approvalSYNCOPE-1205[ ] - Dynamic membership updates not considered for provisioning during updateSYNCOPE-1206[ ] - Audit incorrect output element reported for Pull TasksSYNCOPE-1207[ ] - Random password generation fails for push tasksSYNCOPE-1210[ ] - syncope migration 12 to 20 users blocked to 200SYNCOPE-1211[ ] - Syncope console should advice user about exceeded file sizeSYNCOPE-1213[ ] - Error when sorting Users by RealmSYNCOPE-1214[ ] - Multivalue readonly fields allow frontend deletionSYNCOPE-1215[ ] - Using the JAVA API is possible to create a Realm with the same name in the same parent realmSYNCOPE-1217

Improvement

[ ] - Allow for easier Pull Push processes customizationSYNCOPE-1212

Upgrade procedure

Upgrading from 205 There are about this processsome notes

1 2 3

4 5 6

Task

[ ] - Remove copy of SAMLSSOResponseValidator and SSOValidatorResponse when CXF 3113 is outSYNCOPE-1186

205 (September 6th 2017)One year after 200 here it comes bringing fixes new features and improvementsApache Syncope 205 Jazz

New and noteworthy

SAML 20 Service Provider improvements

The - eg the ability to SSO into Admin Console Enduser UI and any other Java EE application properly enabled - SAML 20 Service Provider extensionwas provided with several enhancements

allow to define complete mapping between Syncope Schema and SAML 20 attributesallow to specify custom - which can be used among other things for flexible Role assignment based on SAML 20 statementsIdP Actionsconsent to on-the-fly creation of unmatched SAML 20 users allowing users not pre-existing in a given Apache Syncope deployment to be created in case of SAML 20 SSOstrict validation of SAML 20 payloadssignature of the generated Service Provider Metadatasupport for IdP-initiated SSO

Realm provision enhancements

Introduced in earlier versions Realm provisioning is now feature-equivalent to Users Groups and Any Objects provisioning with complete mapping resource exploration and more

Audit Appenders

It is now possible to configure which allow to Audit Appenders route audit messages with optional transformation (rewrite) to files queues sockets syslog etc

Delegated Administration for Connectors and External Resources

Connectors now requires to specify a Realm which is then used to evaluate the entitlements owned by administrators when performing management operations on Connectors and their External Resources

Moreover changes in Connectors and External Resources configuration are now tracked by default and allow to revert unwanted breaking changes at hand

Issues

Bug

[ ] - StackOverflowError while serializing AuditEntry after propagationSYNCOPE-1139[ ] - Error when trying to assign a relationshipSYNCOPE-1140[ ] - Error when getting numbers with applicationxmlSYNCOPE-1141[ ] - Access token still required for the third party JWT SSO integration scenarioSYNCOPE-1149[ ] - Invalid property set for propagation task modal page headerSYNCOPE-1150[ ] - Glinch in the root realm informationSYNCOPE-1151[ ] - Misleading Push Task reportsSYNCOPE-1158[ ] - Change to Connectors display name not reflected by contextual menuSYNCOPE-1162[ ] - External Resource priority is never NULLSYNCOPE-1163[ ] - No propagation task is created for resources where the password is not propagatedSYNCOPE-1166[ ] - Encryptor pads short secret keys with 0 instead of random charactersSYNCOPE-1168[ ] - Operation not supported error when trying to run a bulk action for usersSYNCOPE-1169[ ] - Cant remove a Dynamic USER assignmentSYNCOPE-1170[ ] - NPE in AccessTokenDataBinderImpl if no jwtlifetimeminutes schema is presentSYNCOPE-1174[ ] - Password Reset Token Generation Not Working After Upgrading to 204SYNCOPE-1175

Upgrade procedure

Upgrading from 204 There are about this processsome notes

Portions of this software are developed by the support of European iWelcome Identity amp Access Management as-a-Service (IDaaS) provider

[ ] - PlainSchema page empty while self update on EnduserSYNCOPE-1178[ ] - JWT Date claims are interpreted using milliseconds instead of secondsSYNCOPE-1179[ ] - No e-mail debug outputSYNCOPE-1180[ ] - In the Attributes to be displayed sellection show the ones already displayed by defaultSYNCOPE-1184[ ] - NPE Message while saving Dynamic Realm with empty keySYNCOPE-1188[ ] - Realms page not accessible when user has permissions on dynamic realmsSYNCOPE-1189[ ] - Username not refreshed on toggle menu after user updateSYNCOPE-1190[ ] - Add the option to update a user via REST by using the username as keySYNCOPE-1193[ ] - Syncope performance AnyObjectTOs creation time grows with its quantitySYNCOPE-1199[ ] - Not possible to add provision rules for Realm typeSYNCOPE-1203

Improvement

[ ] - Download button should be disabled while populating for the first time a binary attributeSYNCOPE-1096[ ] - Downloaded file for binary attribute better namingSYNCOPE-1097[ ] - Display attributes for propagation tasksSYNCOPE-1115[ ] - Fine-grained administration rights for Connector and ResourcesSYNCOPE-1143[ ] - On-the-fly creation of unmatched users logging via SAML 20SYNCOPE-1146[ ] - Extend SAML 20 IdP mapping to RolesSYNCOPE-1147[ ] - Clear out unneeded anonymous authenticated servicesSYNCOPE-1152[ ] - Push Tasks result to show no operation when operation is not enabledSYNCOPE-1153[ ] - Edit resource to show always in the same order in list of object provision rulesSYNCOPE-1154[ ] - Hard-coded syncope-enduser HTTP subcontextSYNCOPE-1155[ ] - Allow to set Realm for Push TasksSYNCOPE-1159[ ] - Complete mapping for Realm provisioningSYNCOPE-1164[ ] - Preliminary AnyType selection when adding new provision ruleSYNCOPE-1167[ ] - Skip Relationships page when no relationship types existSYNCOPE-1171[ ] - Error message of Malformed Path could be made a little clearerSYNCOPE-1172[ ] - Replace ListltStringgt dynGroups with ListltMembershipTOgt dynMembershipsSYNCOPE-1173[ ] - Edit provisioning rules menu is flat and not toggleSYNCOPE-1176[ ] - Configuration Parameter deletion should ask for confirmationSYNCOPE-1177[ ] - Use Remote Key in the Mapping to fetch external entitiesSYNCOPE-1182[ ] - Realm attribute available (as a detail) to use as a column in the realm view object listSYNCOPE-1183[ ] - Further validate SAML responses with CXFs SAMLSSOResponseValidatorSYNCOPE-1185[ ] - Provide latest GIT commit hash alongside with version numberSYNCOPE-1192[ ] - Sign the SAML SSO Service Provider MetadataSYNCOPE-1194[ ] - Binary previewer also for configuration parametersSYNCOPE-1196[ ] - Enduser console doesnt specify SAML 20 as per the admin consoleSYNCOPE-1197[ ] - Make the signature algorithm configurable for SAML SSOSYNCOPE-1198[ ] - Allow to update user data during approvalSYNCOPE-1200[ ] - Allow AnyType-based conditions for DynRealmsSYNCOPE-1201[ ] - Support IdP Initiated SAML SSOSYNCOPE-1202

New Feature

[ ] - Customizable Audit appenderSYNCOPE-1144[ ] - Connector and Resource configuration versioningSYNCOPE-1145

Task

[ ] - Remove copy of OpenSAMLUtil when WSS4J 2111 is outSYNCOPE-1195

Wish

[ ] - Option to clone a resourceSYNCOPE-1161

204 (July 3rd 2017)The brand new keeps bringing fixes new features and improvementsApache Syncope 204 Jazz

New and noteworthy

Netbeans Plugin

Besides the consolidated Eclipse IDE Plugin a is now available for with similar featuresnew plugin Apache Netbeans

Upgrade procedure

Upgrading from 203 There are about this processsome notes

Elasticsearch-based Search Engine

Especially suitable for large deployments a relying on an external cluster is provided dramatically improving the overall new search engine Elasticsearchsearch performance when the number of managed entities (Users Groups and Any Objects) raises above tens of thousands

Dynamic Realms

In addition to static containment provided by Realms can be used to identify Users Groups and Any Objects according to some Dynamic Realmsattributes value resource assignment group membership or any other condition available with purpose of granting delegated administration rights

Flexible Quartz configuration in clusters

The Quartz scheduler is to schedule the execution of jobs including pull push notification and custom tasks and largely used within Syncope Corereportlets

By default Quartz is configured for clustering where all cluster nodes are equally selectable for processing jobs Individual cluster nodes can now be disabled for jobs processing

JWT and security improvements

SSO header change for RESTful services

In Apache Syncope 203 SSO support was added ( - ) for RESTful services by sending SYNCOPE-1035 JWT-based access to REST services CLOSED

a JWT Token using the header egX-Syncope-Token

curl -H X-Syncope-Token eyJ0e httplocalhost8080syncoperestusersself

From Syncope 204 onwards ( - ) this header value is no SYNCOPE-1120 Use the standard Bearer Authorization header for JWT tokens CLOSED

longer supported Instead you must use the standard Bearer header egAuthorization

curl -H Authorization Bearer eyJ0e httplocalhost8080syncoperestusersself

Third Party JWT SSO integration

Besides validating and accepting the JSON Web Tokens generated during the authentication process as sketched above Apache Syncope can be enabledto cope with tokens generated by third parties

JWS signing key reference

In Apache Syncope 203 the default signing JWS key was referenced in as followssecurityContextxml

$jwsKeybytes

However this was incorrect and results in the key value with appended to it In Syncope 204 the following value should be used insteadbytes

jwsKeygetBytes()

Default key and password checking

In Apache Syncope 204 a warning is logged if the default JWS key is used to either create update an access token or is used to invoke on a RESTful service A similar warning is logged if the default anonymous key is used to invoke on a RESTful service A warning is also logged if the default admin password or anonymous key are detected

If you see these warnings in the logs then it is critical to change the default values

More is now available in the Reference Guideinformation about the internal authorization process

HikariCP for JDBC connection pool

The internal storage is now based by default on the high-performance connection pool HikariCP

Improved UX in Admin Console

Up to Syncope 203 the general interaction paradigm for data tables in Admin Console used to be based on showing several icons for each row following the various actions available for the given entity

With the increasing number of potential actions this mechanism proved to be poor now instead a contextual menu will appear after clicking on any row reporting all the available actions for the selected entity

IssuesSub-task

[ ] - Netbeans pluginSYNCOPE-808

Bug

[ ] - WADL servlet uses request url to provide wadlSYNCOPE-1066[ ] - Incomplete HA setup instructionsSYNCOPE-1069[ ] - Conversion pattern ignored for date long and double values during propagationSYNCOPE-1070[ ] - The executed notification tasks are not displaying on the consoleSYNCOPE-1071[ ] - User lastChangeDate attribute is not displayed correctlySYNCOPE-1075[ ] - The console doesnt allow to download the report in various formatsSYNCOPE-1076[ ] - Activiti modeler window doesnt open on clickSYNCOPE-1078[ ] - Missing toggle panel for the job control widget of the administration console dashboardSYNCOPE-1079[ ] - Console new toggle panel behavior anomaliesSYNCOPE-1081[ ] - Concurrent CRUD random failures with dynamic membershipsSYNCOPE-1082[ ] - Custom tasks modal page shouldnt show Cancel buttonSYNCOPE-1085[ ] - Improve provisioning mapping page in order to avoid duplicates in internal attribute name listSYNCOPE-1089[ ] - Error defining clause to search for group ownersSYNCOPE-1090[ ] - Error while downloading Jpeg binary attribute contentSYNCOPE-1091[ ] - Out of memory error while rendering PDFSYNCOPE-1094[ ] - User edit modal page opening takes long in case of a lot of groups definedSYNCOPE-1098[ ] - Dynamic group membership does not trigger propagationSYNCOPE-1099[ ] - Error showing action icons on Notidfication events managementsSYNCOPE-1101[ ] - Missing autocomplete for ConnId object class when defining new provisionSYNCOPE-1104[ ] - The installer fails with a NoClassDefFoundErrorSYNCOPE-1107[ ] - NullPointerException while saving an empty templateSYNCOPE-1108[ ] - Installer fails to setup ActivitiSYNCOPE-1109[ ] - Error replacing groupauxclassresource during self-management operationSYNCOPE-1110[ ] - New any type not shown unders RealmsSYNCOPE-1111[ ] - Error searching for usergroupanyobject by providing conditions on attribute with schema type LongSYNCOPE-1112[ ] - Dynamic group information not available during propagationSYNCOPE-1114[ ] - Enduser form customization does not work with empty section in edit modeSYNCOPE-1121[ ] - Enduser must show all attributes when customFormjson has empty section with show=trueSYNCOPE-1122[ ] - Enduser UserRequestValidator NPE on custom form empty sectionsSYNCOPE-1123[ ] - Password on external resource not updated via EnduserSYNCOPE-1125[ ] - Membership attribute values are not shownSYNCOPE-1127[ ] - Content exporter does not sort for internal foreign keysSYNCOPE-1128[ ] - NPE refreshing realm page after realm creationSYNCOPE-1130[ ] - Cannot delete resources owned by realmsSYNCOPE-1131[ ] - Search panel used for relationships definition does not workSYNCOPE-1133[ ] - Action menu not working after page refreshSYNCOPE-1134[ ] - Groups list not refreshing after realm changeSYNCOPE-1135

Improvement

[ ] - Replace ActionLinksPanel with TogglePanelSYNCOPE-1047[ ] - Show actual pending modifications during approvalSYNCOPE-1053[ ] - More flexible delegated administration modelSYNCOPE-1067[ ] - Console CSRF protectionSYNCOPE-1068[ ] - Display or enable add button only to realms were CREATE is ownedSYNCOPE-1072[ ] - Hide realm management if no realm entitlement are ownedSYNCOPE-1073[ ] - Realm navigator show only relevant realms for delegated adminSYNCOPE-1074

[ ] - ConnInstance location is not normalizedSYNCOPE-1083[ ] - Switch to HikariCP for Cores default DataSource definitionsSYNCOPE-1084[ ] - Avoid to read whole entities to check ETagSYNCOPE-1086[ ] - Avoid to read input entities if no notification or audit are requestedSYNCOPE-1087[ ] - Store authorizations with access tokensSYNCOPE-1088[ ] - Add some feedbacks when linking not existing groupsresources to existing userSYNCOPE-1093[ ] - Provide JWT expiration information to selfSYNCOPE-1100[ ] - Option to disable Quartz instances across clusterSYNCOPE-1103[ ] - Remove misleading getAttrMap and similar methods from TOsSYNCOPE-1106[ ] - Make it more obvious that the jwsKey needs to be changedSYNCOPE-1117[ ] - Update docs to explain what anonymousKey refers toSYNCOPE-1118[ ] - Make it more obvious that the default admin password needs to be changedSYNCOPE-1119[ ] - Use the standard Bearer Authorization header for JWT tokensSYNCOPE-1120[ ] - Support functions for internal JEXL engineSYNCOPE-1124[ ] - Include realms into the Explore Resource featureSYNCOPE-1126[ ] - Groups list reset always after realm changeSYNCOPE-1136

New Feature

[ ] - Extension Elasticsearch-based search engineSYNCOPE-1077[ ] - Provide preview for JSON and XML binary fieldSYNCOPE-1095[ ] - Third Party JWT SSO integrationSYNCOPE-1129

Task

[ ] - Update swagger-jaxrs dependency to 1513SYNCOPE-1080

203 (April 15th 2017)Despite being a minor release and besides the high number of fixes provided brings several new features and Apache Syncope 203 Jazzimprovements

New and noteworthy

SAML 20 Service Provider features

SYNCOPE-1041 provides an enabling Apache Syncope to act as as extension SAML 20 Service Provider

Once an Apache Syncope deployment - enabled with this extension - is properly configured and the Syncope Core application is running the Syncope Admin UI and the Syncope Enduser UI can be enabled to allow SAML-based SSO The global result is that Admin UI and or Enduser UI can be accessed after user authentication against (one of configured) SAML 20 Identity Provider(s)

Enduser UI form customization

After the now features a JSON-based high-level which further enhances its adaptation SYNCOPE-1009 Enduser UI form customization mechanismcapabilities

Via this enhancement it is possible to dynamically configure the user form to

hide show attributesset attributes read-only for usersprovide default value(s)

Flowable user workflow adapter

SYNCOPE-1055 adds for the Java BPM Engine besides the one based on Activitinative support Flowable

Extended support for workflow sub-process management

SYNCOPE-1020 enhances the support for managing which can now be explicitly defined managed via Activiti Modeler (if BPMN sub-processesavailable) and invoked from the main process through the constructcall-activity

Upgrade procedure

Upgrading from 202 There are about this processsome notes

Portions of this software are developed by the support of the University of Helsinki the largest university in Finland with 35000 degree students and some 8000 employees

Authentication Authorization improvements

Up to Apache Syncope 202 each REST invocation required - at least in the default configuration - to inject the invoker credentials via the AuthorizationHTTP headerAfter the process is and requires an initial authentication step which returns an unique which can be SYNCOPE-1035 more structured JSON Web Tokenused for further invocations This renewed mechanism is the basis for easier inclusion of various authentication mechanisms including SAML 20 - as provided by - OAuth 20 and OpenID ConnectSYNCOPE-1041

Moreover with it is now possible to configure which user attribute(s) SYNCOPE-1015 can be passed as login name for authentication besides username(default)

Issues

Bug

[ ] - Error when accessing notification tasks for a given userSYNCOPE-1003[ ] - Notification tasks generated for self read event not linked to userSYNCOPE-1004[ ] - NPE in Console when on an empty search term for user assignmentSYNCOPE-1007[ ] - Maven home directory not trimmed of whitespaceSYNCOPE-1008[ ] - Some PushActions methods not invoked even if assignedSYNCOPE-1010[ ] - Security answer not recognized during password resetSYNCOPE-1012[ ] - Password reset link generated by default notification template does not trigger Enduser UI featuresSYNCOPE-1013[ ] - The list of security questions is not refreshed after creating new oneSYNCOPE-1014[ ] - Last change date not updated for users when attributes are updated via pullSYNCOPE-1016[ ] - UTF-8 characters in security questions not correctly encoded by Enduser UISYNCOPE-1022[ ] - Maven projects from archetype deploy test content with all profileSYNCOPE-1023[ ] - Enduser does not manages properly ENUM schema labelsSYNCOPE-1024[ ] - SYNCOPEAUDIT table not populatedSYNCOPE-1025[ ] - Cannot remove group owner once setSYNCOPE-1026[ ] - Mapping errors cannot be fixed when defining provision rules for a new resourceSYNCOPE-1027[ ] - Invalid DefaultAccountRule definition from Admin ConsoleSYNCOPE-1030[ ] - Role key must be not modifiable during edit from Admin ConsoleSYNCOPE-1032[ ] - NPE in Admin Console when working with Reconciliation ReportSYNCOPE-1033[ ] - Assigned Auxiliary classes disappear in the Type Extensions panel when click on cancelSYNCOPE-1034[ ] - Notification icon does not refresh on new approval eventSYNCOPE-1036[ ] - Pending approvals list is clickableSYNCOPE-1037[ ] - User create finish button should remain clickable if the last step is reachedSYNCOPE-1038[ ] - User attributes in user editcreate form are reset after validation errorSYNCOPE-1039[ ] - Membership derived attributes cannot reference own plain attributesSYNCOPE-1040[ ] - Removal of all executed pull tasks via bulk action returns a missing resource exceptionSYNCOPE-1042[ ] - Improve JWT token expiration handlingSYNCOPE-1043[ ] - By editing the provisioning rules modal footer is not disabledSYNCOPE-1044[ ] - Activiti Modeler log out from Admin Console in case of errorSYNCOPE-1045[ ] - Console task execution sort not working properlySYNCOPE-1046[ ] - Into the connector configuration page the same bundle appear more then once if different versions existSYNCOPE-1048[ ] - Console returns an error if you try to explore Syncope as a remote objectSYNCOPE-1049[ ] - It is possible to schedule task execution in the pastSYNCOPE-1051[ ] - Enduser CAPTCHA not reloadingSYNCOPE-1052[ ] - Type extensions cleared after group update during pullSYNCOPE-1057[ ] - Date in membership attribute is propagated as timestampSYNCOPE-1060[ ] - Changes pulled from one resource not propagated externallySYNCOPE-1062

Improvement

[ ] - Improve user password management resource managementSYNCOPE-991[ ] - Schema sorting should be done on JS sideSYNCOPE-1005[ ] - Enduser must provide an easy way to enabledisable visualization and sorting of USER attributesSYNCOPE-1009[ ] - Support for BPMN call activitySYNCOPE-1020[ ] - Improve usability of the modal window for provision rulesSYNCOPE-1028[ ] - Change modal window title and button bars backgroundSYNCOPE-1029[ ] - Hide key when creating editing Security Questions from Admin ConsoleSYNCOPE-1031[ ] - Allow easier extension of REST interface exposed to AngularJSSYNCOPE-1050[ ] - Do not show time picker and values for date-only schemasSYNCOPE-1058[ ] - Remove final landing page after user createupdateSYNCOPE-1059[ ] - Support SAML 20 Redirect profileSYNCOPE-1061[ ] - Incomplete title for modal windows from TopologySYNCOPE-1063[ ] - Improve security of customization mechanismSYNCOPE-1064

New Feature

[ ] - User Authentication using emailSYNCOPE-1015[ ] - JWT-based access to REST servicesSYNCOPE-1035[ ] - SAML 20 Service Provider featureSYNCOPE-1041[ ] - Provide Flowable 5X-based workflow adapterSYNCOPE-1055

202 (January 27th 2017)The second maintenance release for addressing some bugs and providing improvements both on the Admin Console and Enduser Syncope 20 Jazzapplication

Most noticeable changes

case-insensitive search selectable via REST and available by default from the Admin ConsoleEnduser applications default HTML CSS template now responsivesample External Resource provided using the connectorScripted RESTApache FOP upgraded to the latest stable version available providing major enhancements to report export as PDF and RTFbrand new which provides full access to Core logs from the Admin consoleLog Viewer

Upgrading from 201 There are about this processsome notes

Sub-task

[ ] - Errors when building on Windows for archetype and Eclipse pluginSYNCOPE-984[ ] - orgapachesyncopeclientclicommandsMigrateTest Fails on WindowsSYNCOPE-985

Bug

[ ] - Cron expression for scheduled job is not saved from the consoleSYNCOPE-965[ ] - Exception reported when looking at propagation task details from user listSYNCOPE-966[ ] - On logout page translation doesnt reset to default settingsSYNCOPE-970[ ] - Incorrect error reported when creating notification with missing eventsSYNCOPE-974[ ] - Search case insensitive ilike operator triggers search validationSYNCOPE-975[ ] - Duplicated events shown by admin console for notifications and auditSYNCOPE-976[ ] - style missing for captcha buttons in responsive template (under 800px width)SYNCOPE-977[ ] - resource id is missing in user propagation task tableSYNCOPE-979[ ] - AnyObject search filter not honored with inGroups conditionSYNCOPE-980[ ] - OracleSQLServer configuration does not workSYNCOPE-981[ ] - Notification tasks modal window does not provide access to actual HTML and TEXT e-mail bodySYNCOPE-982[ ] - Build issues on WindowsSYNCOPE-987[ ] - Explore resource detailed view always shows empty left columnSYNCOPE-990[ ] - Date not registered in self registrationSYNCOPE-992[ ] - Footer buttons positioning and resizingSYNCOPE-993[ ] - Character encoding not being respectedSYNCOPE-994[ ] - Angular transition errorsSYNCOPE-997[ ] - REST exception mapper overwrites Spring Security responseSYNCOPE-999[ ] - CSVDir connector unclear about required attributescolumnsSYNCOPE-1000[ ] - Closing the Activiti Modeler popup does not make the spinner to disappearSYNCOPE-1001[ ] - Updating any objects name via console is ineffectiveSYNCOPE-1002

Improvement

[ ] - Allow in-place edit in Job dashboard widgetSYNCOPE-773[ ] - Use Kendo UI Boostrap DateTimePickerSYNCOPE-779[ ] - Enduser test updateSYNCOPE-967[ ] - Case insensitive searchSYNCOPE-971[ ] - Make Syncope Enduser template responsiveSYNCOPE-972

1 2

[ ] - Add sample REST external resourceSYNCOPE-978[ ] - Search performance improvement with mandatory schemas onlySYNCOPE-983[ ] - Upgrade FOP to 21SYNCOPE-989[ ] - Replace Angular Bootstrap DateTimePicker with Kendo UI DateTimePickerSYNCOPE-996

New Feature

[ ] - Log viewerSYNCOPE-882

Task

[ ] - Upgrade to Wicket 750SYNCOPE-962

201 (October 21st 2016)The first maintenance release for addressing some bugs and providing improvements especially on the Enduser applicationSyncope 20 Jazz

Upgrading from 200 There are about this processsome notes

Bug

[ ] - Security question not loaded while resetting the user passwordSYNCOPE-937[ ] - Handle authorization issues more gracefully in the consoleSYNCOPE-940[ ] - Bug in changing security answer in the Enduser UISYNCOPE-942[ ] - Cannot manually assign groups provided with dynamic assignment rulesSYNCOPE-944[ ] - Encrypted attribute values not managed as password valuesSYNCOPE-946[ ] - Missing quotes defining realm (JEXL) expression in usergroupanyobject templates for realmsSYNCOPE-947[ ] - Self-registration self-update not workingSYNCOPE-950[ ] - Enduser shows groups of the selected realm rather than groups assignable to users in the selected realmSYNCOPE-953

Improvement

[ ] - Optionally provide schema information with attribute valuesSYNCOPE-948[ ] - Leave WebApplicationException to default processingSYNCOPE-949[ ] - Provide realm management to enduserSYNCOPE-952[ ] - Enduser improvementsSYNCOPE-958[ ] - Specify working domain in enduserpropertiesSYNCOPE-959[ ] - Make the breadcrumb in creation navigable only when the Finish page has been reachedSYNCOPE-960

200 (September 9th 2016)The first stable version of is finally available finalizing almost 2 years of community effortSyncope 20 Jazz

Whats new

Identity RecertificationMigration guide from Apache Syncope 12

Bug

[ ] - Startup errors with Wildfly due to Camel route loadingSYNCOPE-738[ ] - Braces are ignored for FIQL stringsSYNCOPE-929[ ] - Exception when dropping the last Base Contexts to Synchronize from LDAP connectorSYNCOPE-930[ ] - Error in Camel route causes subsequent failuresSYNCOPE-931[ ] - Dashboard status COMPLETE is reported for running jobsSYNCOPE-933[ ] - Bad form (including login) appearance with IE 11SYNCOPE-934[ ] - Attribute type shouldnt be available to create a group filterSYNCOPE-935[ ] - Sync token reset to NULL when no SyncDelta items are availableSYNCOPE-936

Improvement

[ ] - Add AngularJS tests for enduserSYNCOPE-853[ ] - Syncope 2x startup improvementsSYNCOPE-926[ ] - Search UI improvementsSYNCOPE-932

New Feature

[ ] - Identity RecertificationSYNCOPE-880

200M5 (September 2nd 2016)The last milestone release from the new major series is now available bearing a relevant number of fixes and improvements over 200-Syncope 20 JazzM4

Whats new

Eclipse IDE PluginThe Eclipse IDE plugin allows remote management of notification e-mail and report templates and constitutes an example of a Java application relying on the Client Library for interacting with the Core via REST

The plugin was developed as part of Google Summer of Code 2016

DocumentationPossibly the major long-lasting most claimed missing feature of open source projects in general and Apache Syncope in particular

The brand new guide and are now complete and availableGetting Started Reference Guide

Migrating from older releases

The supporting tools are available and the procedure is now and ready to be embedded into the outlined Reference Guide

Sub-task

[ ] - Eclipse pluginSYNCOPE-809

Bug

[ ] - Type extensions not considered for user formSYNCOPE-872[ ] - Failure on bulk deletion of usersSYNCOPE-878[ ] - Auto-completion not working for internal and external attribute namesSYNCOPE-879[ ] - Users not removed from transitive external resources when deletedSYNCOPE-881[ ] - Cant access REST API via browserSYNCOPE-883[ ] - Error in REST API when specifying applicationxml accept headerSYNCOPE-884[ ] - Error enabligdisabling user on a single resourceSYNCOPE-886[ ] - Hidden password in pull task user templateSYNCOPE-887[ ] - No error thrown if resource mapping internal attribute doesnt existSYNCOPE-888[ ] - Resource Provisioning ErrorSYNCOPE-891[ ] - RuntimeException when resizing tablesSYNCOPE-892[ ] - International characters in group nameSYNCOPE-893[ ] - Cannot set realm in user group any object templates for pull taskSYNCOPE-898[ ] - neighborhood relationship type has no descriptionSYNCOPE-899[ ] - Cant edit Camel routes in ConsoleSYNCOPE-900[ ] - Syncope 200X maven source artifacts missingSYNCOPE-901[ ] - Wrong entitlement evaluationSYNCOPE-905[ ] - Creating any object with relationship to another results in self-relationshipSYNCOPE-907[ ] - Exception when searching for any object to fill relationshipSYNCOPE-908[ ] - Enduser should allow empty values on non required select fieldsSYNCOPE-911[ ] - Registered users receive an error message after saving their own profileSYNCOPE-912[ ] - When changing connectors display name the topology is not refreshedSYNCOPE-915[ ] - Content exporter includes unwanted itemsSYNCOPE-916[ ] - When a user has been successfully updated logout link doesnt bring back to home pageSYNCOPE-918[ ] - Approval list not reloaded after approvereject operationsSYNCOPE-921[ ] - Sync Pull task not configured for delete causes incremental sync to prematurely stopSYNCOPE-923[ ] - User creation randomly fails if capctha check has been disabledSYNCOPE-927[ ] - Table that stores user passwords store duplicate entriesSYNCOPE-928

Improvement

[ ] - Documentation artifactsSYNCOPE-700[ ] - Uploaded file preview for enduserSYNCOPE-854[ ] - Allow international characters in username groups and any objects namesSYNCOPE-894[ ] - Enable Secure Processing on all DocumentBuilderFactoryTransfomerFactory instancesSYNCOPE-895[ ] - Non-mandatory DropDown attributes should show a blank value when no value is specifiedSYNCOPE-896[ ] - Provide helper method to retrieve all the groups of a userSYNCOPE-902

[ ] - Allow reference to username and group any object name as search parametersSYNCOPE-906[ ] - Consolidate Camel ProcessorsSYNCOPE-909[ ] - Introduce new Camel propagation componentSYNCOPE-910[ ] - Add and remove buttons in multivalue fields are not alignedSYNCOPE-913[ ] - Spinner should be always in front of any other elementSYNCOPE-914[ ] - Adjust activiti user workflow to be able to remove users in createApproval statusSYNCOPE-919[ ] - Allow to specify recipients provider class for notificationsSYNCOPE-920[ ] - Allow domain selection from Swagger UISYNCOPE-925

Wish

[ ] - Skip configuration screen if no applicable valuesSYNCOPE-885[ ] - Display information on Enable Realm ProvisioningSYNCOPE-890

200-M4 (June 24th 2016)The forth milestone release from the new major series is now available bearing a relevant number of fixes and improvements over Syncope 20 Jazz200-M3

Bug

[ ] - Type extensions not considered for user and any objects formsSYNCOPE-845[ ] - Pull policy correlation rule plain attributes palette doesnt work fineSYNCOPE-863[ ] - Random ConcurrentModificationException reported in the logsSYNCOPE-865[ ] - Creating a new notification template the list of available templates are not updated after submitSYNCOPE-867[ ] - Submit and cancel button not available in create report template modal pageSYNCOPE-868[ ] - Missing notification in case of success after create and updateSYNCOPE-869[ ] - Cant test LDAP Connector in admin consoleSYNCOPE-875[ ] - Fake after object reported by propagation in case of deleteSYNCOPE-876

Improvement

[ ] - Allow to specify user group any object filters for push tasksSYNCOPE-827[ ] - Use actual pagination for resource exploreSYNCOPE-829[ ] - Add a good title including reportreportlet name modal used to edit report and reportletSYNCOPE-852[ ] - Membership and type extension improvementsSYNCOPE-862[ ] - Check for existence of key before adding templateSYNCOPE-866[ ] - Refer to users and groups by their names in Activiti workflow definitionSYNCOPE-870[ ] - Link NumberWidgets on the dashboard to their respective pagesSYNCOPE-871[ ] - Remove list() methods from User Group and AnyObject REST APIsSYNCOPE-873

New Feature

[ ] - Enduser i18nSYNCOPE-721[ ] - External Resource bulk operationsSYNCOPE-859[ ] - Allow listing group role membersSYNCOPE-860[ ] - Support for PayaraSYNCOPE-864[ ] - Realm provisioningSYNCOPE-874

200-M3 (June 3rd 2016)The third milestone release from the new major series is now available bearing a relevant number of fixes and improvements over Syncope 20 Jazz200-M2

Whats new

New Admin ConsoleApache Syncope admin UI has been shining for the past five years emerging as a beautiful gem from the old-fashioned and morose traditional IdM tools But time flies several competitors projects have built their own interfaces in the meanwhile and it was about time to renew Apache Syncope primacy in this respect

The admin UI is also available in Russian - besides English Italian and Brazilian Portuguese

This application is now feature-complete and ready to amaze with its complete rich and dynamic UI

Work In Progress Documentation

Possibly the major long-lasting most claimed missing feature of open source projects in general and Apache Syncope in particular

The Apache Syncope team is currently producing a Getting Started guide (almost complete) and a with purpose of eliminating this Reference GuideAchilles heel

Migrating from older releases

The supporting tools are available and the procedure is now and ready to be embedded into the outlined Reference Guide

Sub-task

[ ] - UI enhancementsSYNCOPE-719[ ] - Complete ConfigurationSYNCOPE-745[ ] - Provide approval managementSYNCOPE-765

Bug

[ ] - UserWizardBuilder the store internally password flag is not set properlySYNCOPE-737[ ] - Activiti Modeler breaks deployment from installerSYNCOPE-781[ ] - DateTime fields not correctly handled in EnduserSYNCOPE-783[ ] - Improve JEXL information text for mandatory when creating a new schema attributeSYNCOPE-792[ ] - Password keys missing when creating a resource mappingSYNCOPE-793[ ] - Once authenticated to enduser Cancel brings nowhereSYNCOPE-798[ ] - Do not allow admin user log in to enduserSYNCOPE-799[ ] - Synchronization fails in case of accountId mapped on derived attribute starting with literalSYNCOPE-800[ ] - Provisioning mappings are not savedSYNCOPE-801[ ] - Error message spinner is requiredSYNCOPE-811[ ] - Remove flickeringSYNCOPE-812[ ] - Remove mandatory field from configuration parameter creationSYNCOPE-813[ ] - MasterContentxml configuration is broken for mainSYNCOPE-814[ ] - Switching between Connector Configuration tabs loses informationSYNCOPE-817[ ] - Workflow XML editor pops up after closing Activiti ModelerSYNCOPE-823[ ] - CSS title under Realms bad styleSYNCOPE-825[ ] - On Firefox once logged in cant log out and viceversa if cache is not have been clearedSYNCOPE-836[ ] - Bad appearance for + - buttons under Chrome ChromiumSYNCOPE-837[ ] - Syncope 200-M2 has a missing dependency syncope-fit-build-build-toolsSYNCOPE-839[ ] - When showing propagation task details stacktrace is reported insteadSYNCOPE-844[ ] - Annoying flickeringSYNCOPE-846[ ] - When creating virtual schema the new item is not shown in the listSYNCOPE-847[ ] - Task execution popup does not resize properly on ChromeSYNCOPE-849[ ] - Heart icon to check connector connectivity does not show feedback panel on ChromeSYNCOPE-850

Improvement

[ ] - Update UI to display what youre adding when creating a roleSYNCOPE-791[ ] - Add favicon to enduserSYNCOPE-796[ ] - Automatically select a unique version for a ConnectorSYNCOPE-797[ ] - Improve Connector Capabilities layoutSYNCOPE-802[ ] - Improve explanation for onoff buttons in the Connector ConfigurationSYNCOPE-803[ ] - Support the explanation of the Connector Configuration propertiesSYNCOPE-804[ ] - Select destination realm from a drop down list when creating a taskSYNCOPE-805[ ] - Validate standalone resource provisioningSYNCOPE-806[ ] - When editing realms select account and password policies from combo boxSYNCOPE-807[ ] - Allow generated projects to include extensions in embedded modeSYNCOPE-810[ ] - Configure standalone to log under $CATALINA_HOMElogsSYNCOPE-815[ ] - Add message when no plain attributes availableSYNCOPE-816[ ] - Allow to optionally specify the MappingItemTransformer class for each mapping itemSYNCOPE-818[ ] - Add deletion query across all componentsSYNCOPE-819[ ] - Allow to optionally specify user group any object template(s) for pull tasksSYNCOPE-820[ ] - Allow capability override on resourcesSYNCOPE-821[ ] - Replace Long autogenerated keys with UUIDsSYNCOPE-822[ ] - PushPull task names not marked as mandatory in the consoleSYNCOPE-824[ ] - Allow to specify any templates and logic actions from realmSYNCOPE-826[ ] - Associate notification tasks to related notificationsSYNCOPE-830[ ] - Single WebSocketBehavior per pageSYNCOPE-834[ ] - Allow to configure groups type extensionsSYNCOPE-835[ ] - review of logging state of the syncope enduserSYNCOPE-838[ ] - Admin console small tweaks and fixesSYNCOPE-841[ ] - Use gzip compression by defaultSYNCOPE-842[ ] - Include provision information in VirSchemaTOSYNCOPE-848

[ ] - Add title per wizard step about usergroupanyobjectSYNCOPE-851[ ] - Synchronization token management enhancement in case of errorsSYNCOPE-855[ ] - JEXL-based transformation for mapping itemsSYNCOPE-857[ ] - Ensure afterObject is provided after propagationSYNCOPE-858

New Feature

[ ] - New admin UISYNCOPE-156[ ] - New end-user UISYNCOPE-701[ ] - Show the propagation task(s) linked to a given user group any objectSYNCOPE-788[ ] - Browse objects on external resourcesSYNCOPE-789[ ] - Allow user group any object admin form customizationSYNCOPE-790[ ] - Russian translation for admin consoleSYNCOPE-828[ ] - Allow to provision all groups members upon requestSYNCOPE-856

Task

[ ] - Settle how to migrate from 12SYNCOPE-753[ ] - Update IzPack to 508SYNCOPE-777[ ] - Provide demo page on websiteSYNCOPE-785[ ] - Automatic demo deploy upon Jenkins buildSYNCOPE-786[ ] - Enable Activiti Modeler for demoSYNCOPE-787

200-M2 (March 21st 2016)3 months 256 commits and 1536 files changed after 200-M1 here is the second release from the new major series Syncope 20 Jazz

Whats new

End-user

As system integrators know each single customer running an IdM solution requires to customize the end-user web interface (addressing self-registration self-management and password reset) as much as possible to match organizations needs processes and look amp feel

Such brand new application is now complete which allows extreme customization for each deployment

Work In Progress New Admin Console

Apache Syncope admin UI has been shining for the past five years emerging as a beautiful gem from the old-fashioned and morose traditional IdM tools But time flies several competitors projects have built their own interfaces in the meanwhile and it was about time to renew Apache Syncope primacy in this respect

This new release besides several improvements brings a full-working dashboard providing overview and control of several core aspects of the system

Work In Progress Documentation

Possibly the major long-lasting most claimed missing feature of open source projects in general and Apache Syncope in particular

The Apache Syncope team is currently producing a guide (almost complete) and a with purpose of eliminating this Getting Started Reference GuideAchilles heel

Migrating from older releases

This is work-in-progress tracked as SYNCOPE-753

Sub-task

[ ] - Unauthenticated password reset functionalitySYNCOPE-720[ ] - Complete TopologySYNCOPE-743[ ] - Provide dashboardSYNCOPE-744[ ] - Migrate console extension mechanism from 12SYNCOPE-746[ ] - Re-enable console testsSYNCOPE-752

Bug

[ ] - Datetime picker component is not working properly with some date formatsSYNCOPE-730

[ ] - Relationships with USERs on the right side have to be forbiddenSYNCOPE-756[ ] - Workflow diagram not updated after saving from XML editor modal windowSYNCOPE-758[ ] - Creation of a new AnyTypeClass doesnt check if the key is already usedSYNCOPE-759[ ] - Last execution date value is always null for Sched Sync and Push tasksSYNCOPE-762[ ] - Missing records in case of user list ordered by nullable schemaSYNCOPE-768[ ] - Sync performance decreaseSYNCOPE-769[ ] - Cannot update resource mappingSYNCOPE-774[ ] - Error when adding a dynamic user membership condition to a roleSYNCOPE-775[ ] - Standalone 200-M1 does not start upSYNCOPE-776[ ] - On logout session is not completely cleared outSYNCOPE-780[ ] - DateParamConverterProvider not working with Widlfly 9SYNCOPE-782

Improvement

[ ] - Better way to override console pagesSYNCOPE-155[ ] - Upgrade to CXF 315SYNCOPE-742[ ] - Allow dynamic reloading of mail templatesSYNCOPE-760[ ] - Allow dynamic reloading of report stylesheetsSYNCOPE-761[ ] - Provide sample Audit reportletSYNCOPE-763[ ] - Password Policy mustnt contain value of the following attributes case insensitiveSYNCOPE-767[ ] - Rename Sync to PullSYNCOPE-771[ ] - Allow admins to force users password change at next loginSYNCOPE-778

New Feature

[ ] - StatisticsSYNCOPE-750[ ] - Reconciliation reportletSYNCOPE-766

Task

[ ] - Replace Hibernate Validator with Apache BValSYNCOPE-764

200-M1 (December 23rd 2015)More than one year about 1000 commits and 200 issues resolved after Syncope 12 Intermezzo here it comes the first release from the new major series

Syncope 20 Jazz

Whats new

Any Objects

Traditional Identity Management and Provisioning used to care only about users and groups (or roles depending on the terminology) with Syncope 20 instead new object types can be defined so that any objects data can be managed workstations printers folders sensors services and so on This positions Apache Syncope at the forefront for bringing Identity Management in the IoT world

New Authorization Model

Permissions to operate in delegated administration are now granted on the basis of widespread concepts of and realms entitlementsThis also allows maintaining a hierarchical structure where to manage users groups and any objects

Multi-tenancy

A single Apache Syncope instance can now be shared by different tenants (domains) while keeping every domains data in separate DBMS instancesThis simplifies handling of as-a-service scenarios for Apache Syncope

CLI

DevOps and SysAdmins love it it definitely represents one of the pillars of IT automation Apache Syncope finally gains a full-fledged command-line administration tool

Work In Progress New Admin Console

Apache Syncope admin UI has been shining for the past five years emerging as a beautiful gem from the old-fashioned and morose traditional IdM tools But time flies several competitors projects have built their own interfaces in the meanwhile and it was about time to renew Apache Syncope primacy in this respect

While still in progress a completely new admin console is being built with several features already ready for use

1 2 3

Work In Progress End-user

As system integrators know each single customer running an IdM solution requires to customize the end-user web interface (addressing self-registration self-management and password reset) as much as possible to match organizations needs processes and look amp feel

A brand new application is under development while already being usable which allows extreme customization for each deployment

Work In Progress Documentation

Possibly the major long-lasting most claimed missing feature of open source projects in general and Apache Syncope in particular

The Apache Syncope team is currently producing a guide (almost complete) and a with purpose of eliminating this Getting Started Reference GuideAchilles heel

and much much more

Several REST enhancements and increased compliance with standards and best-practicesSwagger UI integrationCode RefactoringEvery single line of code has been ported from Syncope 12 to 20 taking into account all sorts of enhancements and optimizations moreover the whole code organization was reviewed in order to increase the overall quality and allow easier manageability and extendability

Migrating from older releases

This is work-in-progress tracked as SYNCOPE-753

Sub-task

[ ] - Provide Activiti modeler installation feature to installerSYNCOPE-552[ ] - Add user services to command line interfaceSYNCOPE-580[ ] - Add configuration services to command line interfaceSYNCOPE-581[ ] - Add connector services to command line interfaceSYNCOPE-582[ ] - Add entitlement services to command line interfaceSYNCOPE-583[ ] - Add logger services to command line interfaceSYNCOPE-584[ ] - Add notification services to command line interfaceSYNCOPE-585[ ] - Add policy services to command line interfaceSYNCOPE-586[ ] - Add report services to command line interfaceSYNCOPE-587[ ] - Add resource services to command line interfaceSYNCOPE-588[ ] - Add role services to command line interfaceSYNCOPE-589[ ] - Add schema services to command line interfaceSYNCOPE-590[ ] - Add security question services to command line interfaceSYNCOPE-591[ ] - Add task services to command line interfaceSYNCOPE-592[ ] - Add workflow services to command line interfaceSYNCOPE-595[ ] - make it possible to disallow using the username as passwordSYNCOPE-626[ ] - Include proper LICENSE amp NOTICE in the dist artifactSYNCOPE-636[ ] - Add domain services to command line interfaceSYNCOPE-711[ ] - Add missing integrationsSYNCOPE-718[ ] - CLI documentationSYNCOPE-722[ ] - Create bash script file to wrap java commandSYNCOPE-723[ ] - create properties file as help messagesSYNCOPE-724[ ] - Integration testSYNCOPE-727[ ] - Delete all usersSYNCOPE-728[ ] - Website update for 200SYNCOPE-740

Bug

[ ] - Installer does not pick Syncope version from POMSYNCOPE-532[ ] - Edit user with resources causes Ajax failureSYNCOPE-539[ ] - Console build fails on WindowsSYNCOPE-540[ ] - Roles Inherit Attributes does not inherit from parent role for check box attributeSYNCOPE-543[ ] - Date field without conversion pattern specified goes in NPE if deleting dateSYNCOPE-545[ ] - Cannot send e-mails out when SMTP server requires authenticationSYNCOPE-547[ ] - Provide Activiti Modeler setup instructionsSYNCOPE-548[ ] - Activiti Modeler always show the default workflow definitionSYNCOPE-549[ ] - Admin console shows 24 roles at most in the role treeSYNCOPE-551[ ] - Internal Server Error when creating account policySYNCOPE-553[ ] - Class Cast Exception when syncronization task startsSYNCOPE-554[ ] - Error in the enum schema when trying to add new enumeration valuelabelSYNCOPE-556[ ] - Exception during report execution when matching condition is not provided for user and role reportletsSYNCOPE-557[ ] - build-tools classes artifact not published to Maven repositorySYNCOPE-560[ ] - HTML reports not displayed correctly with no external resourcesSYNCOPE-561[ ] - Duplicated configuration parameters in the CATTR tableSYNCOPE-562[ ] - Error while viewing user details in approval request workflow from Approvers loginSYNCOPE-564[ ] - Error on ResourceModalPage when override a SpinnerField in the ConnectorModalPageSYNCOPE-565

[ ] - Name attribute value disappears after changing attribute type during schema manipulationSYNCOPE-566[ ] - Security question is not displayed correctly during password resetSYNCOPE-567[ ] - Connectors configuration check connectionSYNCOPE-568[ ] - The user status is not propagated on the resourcesSYNCOPE-569[ ] - ResourceConnConfPanel feedback panel does not workSYNCOPE-571[ ] - overridable resource connector properties cannot be changedSYNCOPE-572[ ] - NullPointerException in ConnInstanceDataBinder with Java 8SYNCOPE-574[ ] - The values of configuration parameters are not savedSYNCOPE-576[ ] - Role bulk delete not workingSYNCOPE-578[ ] - Standalone persistence not configured for H2SYNCOPE-596[ ] - Error when serializating SyncToken with byte array type during sync task from Active DirectorySYNCOPE-597[ ] - Push Task fails on role with LDAP resource with rolemapping definedSYNCOPE-598[ ] - Approval chains do not work from second form onwardsSYNCOPE-600[ ] - AD deleted object synchronization fails if a sync policy is specified on one or more attributes that can have no values on SYNCOPE-601Syncope[ ] - Remote unauthorized exception when a user makes a request to add a role to his profileSYNCOPE-603[ ] - Impossible to update the connector capabilitiesSYNCOPE-605[ ] - Error when adding a value to a multivalue configuration parameter of type longSYNCOPE-607[ ] - Cannot configure audit for AuthenticationControllerSYNCOPE-608[ ] - Installer doesnt update the consoleproperties with the container portSYNCOPE-610[ ] - An approver displays all approval tasks including those not assigned to himSYNCOPE-611[ ] - delete overridable connector configuration property of type array String in resource edit panelSYNCOPE-613[ ] - NotificationJob fails with NullPointerExceptionSYNCOPE-614[ ] - Updating properties and xml files of the installer module with the current versionSYNCOPE-615[ ] - Userrole schema attribute with minus symbol in nameSYNCOPE-617[ ] - Build fails with Java 6SYNCOPE-625[ ] - ATTRTEMPLATE entities not exportedSYNCOPE-629[ ] - Errors during update propagation when derived attribute is configured as account idSYNCOPE-632[ ] - MAttrTemplate and RAttrTemplate sequence values are not managed in contentxmlSYNCOPE-638[ ] - Notification recipientAttrType and recipientAttrName are not requiredSYNCOPE-639[ ] - Concurrency issues with multiple client threadsSYNCOPE-641[ ] - WorkflowResult provides unmodifiable collection for performed tasksSYNCOPE-643[ ] - Error during synchronization of roles when using a RoleSchema as accountIdSYNCOPE-644[ ] - Problem during propagation of an updated membership on a resourceSYNCOPE-647[ ] - Paged lists not working properlySYNCOPE-649[ ] - Some generic and uninformative error messagesSYNCOPE-654[ ] - Debian configuration files overwritternSYNCOPE-656[ ] - Duplicate derived attribute after sync task when it is configured as accountid for the synched resourceSYNCOPE-658[ ] - Wrong fasterxmljackson common-lang3 version in the Import-Package in the syncope-common syncope-clientSYNCOPE-659[ ] - Empty string values not allowed with Oracle DBSYNCOPE-664[ ] - JobInstanceLoader class is not able to return the correct Task id or Report id from its job nameSYNCOPE-668[ ] - Search filter in the notifications doesnt work properlySYNCOPE-669[ ] - Prpagation miss all UserMods changes performed by the Activiti update service taskSYNCOPE-670[ ] - Changed password value is not propagated to external resources on successful password resetSYNCOPE-671[ ] - Console doesnt display the right condition when configuring a search filter with a resourceSYNCOPE-672[ ] - Null ids in SyncJob reportSYNCOPE-673[ ] - Password generation fails with no password policy or no min max lengthSYNCOPE-678[ ] - Password not updated on external resources from self-serviceSYNCOPE-684[ ] - Indirect LDAP resource provisioning fails on missing passwordSYNCOPE-686[ ] - JSON (de)serialization not working in Glassfish 41SYNCOPE-688[ ] - Multivalue virtual attribute does not workSYNCOPE-691[ ] - Documentation issue on Architecture sectionSYNCOPE-702[ ] - Static WADL is missing extension servicesSYNCOPE-703[ ] - INTERNAL_SERVER_ERROR when authenticating with non existing usernameSYNCOPE-706[ ] - ConfigurationLogic doesnt check the existence of key during deletionSYNCOPE-707[ ] - Password propagation not occuring if other updates are set on different resourcesSYNCOPE-710[ ] - Inconsistent double attribute value managementSYNCOPE-717[ ] - Skipped remote update during resource assignment if connector CREATE capability is not providedSYNCOPE-729[ ] - Table sort does not work fine in case of multi paged resultSYNCOPE-733[ ] - Acitiviti history tables uncontrolled growthSYNCOPE-735[ ] - Virtual attributes are not updated after a sync taskSYNCOPE-739[ ] - Tasks page unusable when a task has thousand executionsSYNCOPE-741

Improvement

[ ] - Avoid duplication in consoles authorization managementSYNCOPE-120[ ] - Support OpenICF connector bundlesSYNCOPE-139[ ] - Concurrent propagationSYNCOPE-141[ ] - Asynchronous propagationSYNCOPE-142[ ] - Make password management optionalSYNCOPE-391[ ] - Upgrade to Activiti 516SYNCOPE-536[ ] - Externalize all WAR configurationSYNCOPE-538[ ] - Provide cleaner user workflow definition for productionSYNCOPE-550[ ] - check for id = 0 in ControllerresolveReference()SYNCOPE-555[ ] - Remove usage of deprecated comthoughtworksseleniumSeleniumSYNCOPE-570[ ] - Choose between stable and snapshot releaseSYNCOPE-575[ ] - Enhance consoles authorizationxml parsingSYNCOPE-599[ ] - Make form approver available as workflow variableSYNCOPE-602

[ ] - allow configuring empty connid location listSYNCOPE-604[ ] - explicit configuration of Velocity loggingSYNCOPE-612[ ] - Improving the management of the xml and properties files inside the installerSYNCOPE-616[ ] - Upgrade Activiti to 517SYNCOPE-618[ ] - Code re-organizationSYNCOPE-620[ ] - Reduce log level of bean validation errors (in data binder)SYNCOPE-621[ ] - Improve VirAttrCache managementSYNCOPE-622[ ] - Camel provisioning manager separate user role route management and introduce Unit TestSYNCOPE-627[ ] - Eliminate duplicate Syncope WADL methodsSYNCOPE-630[ ] - performance optimization for content loadingSYNCOPE-634[ ] - Let user choose extensionsSYNCOPE-637[ ] - Allow MariaDB to be chosen with installerSYNCOPE-640[ ] - Provide validation error message when add a role attribute in a user mapping as accountIdSYNCOPE-645[ ] - Do not propagate password if not explicitely requestedSYNCOPE-646[ ] - Notification Configuration missing some labels in eventsSYNCOPE-648[ ] - SyncopeUsercheckToken() should fail if token is not set on userSYNCOPE-651[ ] - Extend control over asynchronous job executionSYNCOPE-660[ ] - Remove overloaded methods from REST servicesSYNCOPE-661[ ] - Option to ignore users roles during synchronization or pushSYNCOPE-663[ ] - Introduce LogicActions for users and groupsSYNCOPE-665[ ] - NotificationManager should be able to return a list of created task idsSYNCOPE-674[ ] - Option for getting simplified list of users and rolesSYNCOPE-676[ ] - Deferred tasksSYNCOPE-679[ ] - Recipient provider extension classSYNCOPE-680[ ] - List and search on external resourcesSYNCOPE-692[ ] - PATCH and PUT update for users groups and any objectsSYNCOPE-694[ ] - Allow to restrict task listSYNCOPE-696[ ] - Support gzip compression for REST servicesSYNCOPE-705[ ] - Conform the Logger service stack to othersSYNCOPE-708[ ] - Virtual attributes management refactoringSYNCOPE-709[ ] - Remove ConfTO object from ConfigurationServiceSYNCOPE-713[ ] - Add the possibility to override the capabilities of the connectorSYNCOPE-714[ ] - Configure whether password hash values should be returned via REST callsSYNCOPE-715[ ] - Derived attributes management refactoringSYNCOPE-725[ ] - Fine-grained entitlements for any objectsSYNCOPE-731[ ] - Filtered reconciliation for synchronizationSYNCOPE-732[ ] - Exchange JSON by defaultSYNCOPE-736[ ] - Option to disable tasks reportsSYNCOPE-747[ ] - Selectively delete task and report executionsSYNCOPE-748[ ] - Human-readable date values for JSON payloadsSYNCOPE-749[ ] - Preview for PDF binary valuesSYNCOPE-751

New Feature

[ ] - Realm-based authorizationSYNCOPE-119[ ] - Password resetSYNCOPE-135[ ] - Dynamic role and group membershipsSYNCOPE-140[ ] - GUI InstallerSYNCOPE-143[ ] - CLI admin toolSYNCOPE-158[ ] - Ability to configure which user role and membership attributes to display and in which orderSYNCOPE-558[ ] - Provisioning manager integrationSYNCOPE-623[ ] - Handling errors for external resource operationsSYNCOPE-650[ ] - DomainsSYNCOPE-652[ ] - Any objectsSYNCOPE-666[ ] - Custom Account Password policy specificationsSYNCOPE-685[ ] - Must change password at next loginSYNCOPE-690[ ] - Use ConnId 14 pagination APISYNCOPE-693[ ] - REST endpoints for attribute CRUDSYNCOPE-695[ ] - Pluggable transformation for resource mapping itemsSYNCOPE-698[ ] - Swagger extensionSYNCOPE-704

Task

[ ] - Set Java 7 as minimum requirementSYNCOPE-494[ ] - Upgrade to ConnId 1400SYNCOPE-537[ ] - Upgrade ConnId connectors to latest versions featuring ConnId 1400SYNCOPE-573[ ] - Add support for MariaDBSYNCOPE-633[ ] - Upgrade CSVDir connector bundle dependency versionSYNCOPE-635[ ] - Upgrade to ConnId 1410SYNCOPE-642[ ] - Upgrade Spring Security to 400RELEASESYNCOPE-653[ ] - Enable build-time Checkstyle checksSYNCOPE-657[ ] - Upgrade to OpenJPA 240SYNCOPE-662[ ] - Clean up ONE_PHASE TWO_PHASESSYNCOPE-697

Wish

[ ] - Provide Debian packages for Apache SyncopeSYNCOPE-535

Bug

[ ] - Serialization exception in the logs when editing users pending approvalSYNCOPE-1205[ ] - Dynamic membership updates not considered for provisioning during updateSYNCOPE-1206[ ] - Audit incorrect output element reported for Pull TasksSYNCOPE-1207[ ] - Random password generation fails for push tasksSYNCOPE-1210[ ] - syncope migration 12 to 20 users blocked to 200SYNCOPE-1211[ ] - Syncope console should advice user about exceeded file sizeSYNCOPE-1213[ ] - Error when sorting Users by RealmSYNCOPE-1214[ ] - Multivalue readonly fields allow frontend deletionSYNCOPE-1215[ ] - Using the JAVA API is possible to create a Realm with the same name in the same parent realmSYNCOPE-1217

Improvement

[ ] - Allow for easier Pull Push processes customizationSYNCOPE-1212

Task

[ ] - Remove copy of SAMLSSOResponseValidator and SSOValidatorResponse when CXF 3113 is outSYNCOPE-1186