0.14.x release notes
Changelog
0.14.7
Released on 23 May 2017 for JIRA and Confluence
- Select Identity Provider by entering email address. 
- Variable skew setting for SAML-response validity dates. 
- Option to convert group names to lowercase. 
- Exclude default page templates from plugin configuration. 
- Fixed bug: The plugin now filters inactive user when searching an admin user for user creation/update. 
0.14.5.3
Released on 23 January 2017 for JIRA and Confluence
- Fixed NullPointerExceptions if cacerts-file contains private keys 
- Added option to validate SAMLResponse-timestamps (enabled by default) 
- Added option to validate SAMLResponse-id (enabled by default). The SAMLResponse is denied if the ID has already been seen within the last hour. 
0.14.5
Released on 29 November 2016 for JIRA and Confluence
- Refurbished administration page 
- Configuration import from XML 
- Option to add a 2nd IdP certificate 
- Added Option to set the remember-me cookie during authentication 
- Fixed a potential XSS vulnerability during the IdP redirect with POST 
Changes specific to JIRA
- SSO for JIRA issue collectors 
0.14.3
Released on 1 July 2016 for JIRA and Confluence
The default-values for Force SSO URLs have changed. You should clear this field and save the configuration to restore the new defaults.
- Fixed issues with group assignments during login 
- Fixed issues with SSO-enforcement for specific URLs 
- /plugins/servlet/samlsso now passes parameters through to the IdP 
- /plugins/servlet/samlsso now accepts a new parameter issuer. The URL in this parameter is used as issuer-URL in the SAMLRequests and the IdP will send the POST to this URL after authentication. 
Changes specific to JIRA
- Service Desk Customer users are assigned to the groups from the SAML response. 
Changes specific to Confluence
- Support for Confluence 5.10.1 
0.14.1
Released on 11 March 2016 for JIRA and Confluence
- Users can now be created and updated with information coming from the SAML IdP 
- Userid, Full Name, Emailaddress and groups can be mapped from SAML attributes 
- IdP-Metadata can be parsed for easier configuration 
- Login can be enforced for additional JIRA URLs 
Changes specific to JIRA
- Support for JIRA version 7.1.1 
- Fixed some Issues with non-working links if JIRA is not running under / 
Changes specific to Confluence
- URLs requiring login can be added 
