All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog and this project adheres to Semantic Versioning.
- Check if voPersonCertificateIssuerDN exists during the preparation of data for job scheduler
- New error page for handling registered identifiers in an error state
- New configuration option for setting the name of the attribute containing the user's Certificate Subject DN(s)
- Encoding of default roles in entitlemenets for nested groups (AARC-G002)
- Encoding of roles in entitlemenets for nested groups (AARC-G002)
- New configuration option for generating entitlements without role attribute
- Redirect users to Community Sign-up flow based on IdP tag in metadata
- Check for every accepted AUP related to a VO if user is still member
- Insert jobs to COmanage for updating OrgIdentity
- Do not construct the
organization
attribute for a Removed OrgIdentity - Fixed error handling on unhandled exceptions such as database related errors
- Add
cuid
in state
Removed
OrgIdentities should not be allowed to login- On failure return friendly error message, not the stack trace
- This version is compatible with COmanage Registry v3.3-rciam
- Record Authenticiation Event to Registry Database
- Do not include empty
edupersonEntitlements
field in state - Skip merge of
edupersonEntitlements
when the user has no memberships
- Support for resending email verificaton when the user status is in pending confirmation
- Construct VO membership entitlements if the user is active or in grace period
- Support for redirecting user to community signup flow without affiliation information
- Namespace errors
- Namespace errors
- Encoding of nested COUs in entitlements according to AARC-G002
voGroupPrefix
configuration option to support multitenacyvoPersonVerifiedEmail
attribute for releasing verified email address(es)- Support for querying terms & conditions agreement information
- Configuration for enabling the retrieval of certificate information
- Option to skip
voWhitelist
checks, ifvoWhitelist
isnull
attrMap
configuration option. Map COmanage RegistryIdentifierEnum
class values to SimpleSAMLphp attibute names- User's COPerson ID in state information
- Support for retrieving user's SSH keys
- Dictionary for error messages
coOrgIdType
configuration option. List of Identifier types associated with user's Organizational Identities
- Improve calculation of COPerson's profile attributes
- Improve handling of suspended users
- Calculation of user's Profile Identifier. A valid Identifier must be an authenticator and must not be expired
- Fix agreed aup revision with null value evalueated falsely
- Minor code style changes
- Bug where retrieval of AUP information was skipped when the user had no COU or Group membership
- User's Terms and Conditions/Acceptable Use Policy (AUP) information in state information
- User's COPerson ID in state information
- Support for retrieving user's SSH keys
- Dictionary for error messages
- Improve handling of suspended users
coOrgIdType
configuration option. List of Identifier types associated with user's Organizational Identities
- Calculation of user's Profile Identifier. A valid Identifier must be an authenticator and must not be expired
🌹
attrMap
configuration option. Map COmanage RegistryIdentifierEnum
class values to SimpleSAMLphp attibute names
- Improve calculation of COPerson's profile attributes
- Add option to skip
voWhitelist
checks, ifvoWhitelist
isnull
- Add configuration for enabling the retrieval of certificate information
- Support for querying terms & conditions agreement information
- Fixed bug allowing duplicate
eduPersonScopedAffiliation
attribute values
- Added
voPersonVerifiedEmail
attribute
- Refactored
getProfile
query
- Added
voGroupPrefix
configuration option to support multitenacy
- Fixed faulty condition in entitlement construction
- Fixed uninitialized variables
- Exclude parent COU default roles if the user is only a member of the
admins
group and has no affiliation with the COU - Minor code improvements
- Fix wrong calculation of entitlements if the user is an admin but has no affiliation in a COU
- Fetch COPerson memberships in one query
- Fixed bug when encoding COUs not in voWhitelist
- Encode nested COUs in entitlements according to AARC-G002
- Fixes target_new URL redirect for self sign-up flow
- Fixes evaluation of member and owner roles of COU admins group
- Fixes target_new URL redirect for self sign-up flow
- Fixes evaluation of member and owner roles of COU admins group
- This version is compatible with SimpleSAMLphp v1.17
- Fetch missing CO Person data when resuming state from target_new URL
- Encode COU role title and affiliation as role information in generated entitlements
- Encode COU admins group member and owner role information in generated entitlements
- Fix typos in coid var reference and legacy URN formatting
This version is compatible with SimpleSAMLphp v1.14
- COmanageDbClient class
- Get the following information about the user:
- user's profile (given name, family name, organisation, affiliation, identifier)
- certificate (subject DN)
- role attributes (COU membership)
- group membership (group member role)
- Create eduPersonEntilement values based on:
- roles attributes (COU membership)
- groups (group member role)
- Store the session into
target_new
query parameter. Use the stored seesion for the purpose of redirecting the user to the SP at the end of Registry enrollment.
- Get the following information about the user:
- Moved placeholder variables to configuration
- urnNamespace
- urnAuthority
- COmanage registry redirect URLs
- voRoles
- sql query failure due to typo error