5.11.3

The footer links have been made configurable to a greater extent in this release.

• Make Wiki links configurable #736
• Conditionally show a IdP support link on error pages #740

And in addition to those functional changes, the PDP error page has been restyled:

• Improve PDP error screen styling #733

5.10.4

This release changed the way the rolling upgrades are handled between version 5.9 and 5.10. In code, we stop using two database columns we no longer use. But the database migration that accompanies that change was also included in this release. This change was removed in this release and will be executed in 5.11.

See #704 for details.

5.11.1

This release have all backported issues from release 5.10.2 and 5.10.3

5.10.3

The unsolicited SSO endpoint received some TLC. In addition to adding request input validation, we also added additional test coverage and cleaned up some unused routes.

• Enrich unsolicited SSO test coverage #699
• Unsolicited request validation #700
• Remove unused SSO routes #701

5.10.2

Two regressions where fixed in this release:

• Whitelist debugSingleSignOnService for access without session #697
• Remove validation on unsolicitedSingleSignOnAction #698

5.11.0

⚠️ This is a pre-release: do not use this release in production!

The error feedback pages have been overhauled in this release. In addition, the theming solution that was previously used has been revised.

Be sure to read up on how to work with the new theming solution in the README.md

The most notable changes are:

• Grunt is no longer used, npm run scripts are used instead. #672
• Theming has changed, allowing for more easy theme overrides for JS and Sass resources. Wiki
• The error page styling has been updated, making it more user-friendly. This by being focused on the important information instead of overflowing the user with irrelevant data.
• The error pages have been made mobile friendly #673
• Minified front-end assets are no longer kept in version control #667
• Visual regression tests have been added for the error pages #687
• The browser support policy has been made explicit #686

5.10.1

Features

• Add the possibility to sign a SAML response #690

5.10.0

This release focuses on making EngineBlock more robust. The biggest aim is to improve error reporting.

Features

• SSO and ACS mis-use is logged earlier in the process #641 #642
• Show a repeatable error code on the custom error pages (ART) #645
• Improved handling of HTTP 405 request errors #646 #647
• Allow re-posting of SAML Responses, allowing page refresh on Consent screen #648
• Allow for more than one in-flight authentication session per user session #649
• Added further support for Portuguese language #650 (thanks @domgon!)
• Cleanup rolling update 5.8 compatibility support #683 (this was added in 5.8.3)
• Update release script #666 #681
• Differentiate session exception #657
• Add Saml binding validator to acs endpoint #665
• Make the memory limit for push configurable #680
• Make the metadata push action more efficient #679

5.9.4

During functional testing, some issues where encountered on the WAYF. These have been addressed in this release.

• Prevent blurring the search bar #656
• Make sure the mouse responds after removing previous IdP selection #661
• Unconnected IdP mouse hover should also highlight the IdP #662

5.9.3

Bugfix

• Honor explicit keyid in unsolicited single sign on #653