We have introduced support for Integrated Windows Authentication (IWA) to provide a seamless and secure authentication experience. With this enhancement, users can be automatically authenticated using their existing Windows credentials without being prompted for additional usernames or passwords.
Improvements:
Preserve miniOrange-Specific Groups During LDAP Sync
LDAP Gateway sync now preserves miniOrange-managed group memberships while synchronizing users from Active Directory.
AD-managed groups are added or removed based on AD changes.
miniOrange-specific groups remain unchanged.
Final user group membership is the union of AD groups and miniOrange groups.
Repeated syncs do not create duplicate group assignments.
Detailed logs indicate groups added, removed (AD-only), and preserved.
This feature is driven directly from the LDAP Gateway.
Administrators can explicitly select the groups to be excluded from user-group membership sync, allowing full control over which groups are preserved.
LDAP Injection Prevention for Username Parameter
Improved security by parameterizing LDAP queries to protect against LDAP injection attacks. All malicious payloads supplied via the username field are now neutralized, preventing authentication bypass, data exposure, and filter manipulation while ensuring normal authentication for valid users.
