RBAC Support in custom provisioning app: Manage the roles and permissions of the external application, and assign roles to the external app’s users via APIs from miniOrange IAM.
Improvement:
GRID Pattern Improvements: Added option for admin to modify the grid size and OTP length to be used for Grid Pattern Authentication.
MO Authenticator Auditing Improvements: Enhanced Push Notification reports upon receipt on the miniOrange Authenticator app.
Improved UI for SAML and TACACS Applications: We have revamped the user interface for both the SAML and TACACS application configuration pages. These updates bring a cleaner layout, improved usability, and a more consistent setup experience across the miniOrange dashboard.
Support for Special Characters in BigCommerce SSO: Added support for email addresses containing special characters during BigCommerce SSO integration.
Pagination Enhancements in Custom Provisioning: Enhancements in pagination for API-based imports in the Custom Provisioning App. Multiple pagination methods are now supported out of the box.
Support for return_to Parameter in JWT SSO Flow: The return_to parameter from incoming JWT SSO requests is now retained and appended to the final redirect URL after authentication.
Nested Group Support for Active Directory Imports: A new option for nested group import has been added within the provisioning service. When enabled, users automatically receive nested group memberships.
Password Sync Support for LDAP Gateway: Support for Password Sync for on-premise LDAP directories via miniOrange LDAP Gateway. When a password is updated in miniOrange, it will be automatically synced to on-premise LDAP directories via miniOrange LDAP Gateway.
Bug Fixes:
Fix for Enforce 2FA Not Resetting for Unregistered Users: Fixed an issue where unregistered users were still prompted for 2FA registration even after Enforce 2FA was disabled. Now the registration page only appears when Enforce 2FA is enabled.
Improved Error Handling for Concurrent Login Attempts: We have updated the login flow behavior when Prevent Concurrent Login is enabled. The system now correctly detects concurrent login attempts and shows the proper message instead of misleading or incorrect error prompts, ensuring a smoother and more transparent login experience.
Enhanced 2FA and Authenticator Experience: Display names for multiple Two-Factor Authentication methods have been updated for improved clarity and consistency. Additionally, Push Notification reports on the miniOrange Authenticator mobile app have been enhanced for more accurate auditing and visibility.
CAPTCHA Validation Fix: Enhanced security by ensuring CAPTCHA validation is consistently required and verified for every attempt where CAPTCHA is enabled.