Ubisecure SSO 8.x.x

Ubisecure SSO 8.3.8

This release improves the compatibility with Finnish Trust Network. It also includes improvements on general OpenID Connect compatibility.

IDS-2037: OpenID Connect: Ability to duplicate parameters outside the request object when sending Authorization requests as JWTs
IDS-2107: OpenID Connect: Implementation of Key ID in JWKs, JWS and JWE
IDS-2108: OpenID Connect: Send client_id as a request parameter in Token requests when using client assertions
IDS-2110: OpenID Connect: Ability to perform relaxed or strict JWT aud claim validation
IDS-2113: OpenID Connect: Improved UI locale handling
IDS-2114: OpenID Connect: Ability to perform Authentication request with HTTP POST instead of GET
IDS-2115: OpenID Connect:: Include the aud claim in client assertions
IDS-2164: OpenID Connect: Ability to define static ubisecure_request_parameters to be sent with Authorization requests

This version was omitted from public consumption due to limited use functionality

IDS-1412: Improvents Improvements in support for Redis Cluster failover during server startup and runtime.
- SSO now supports configuring more than one initial seed nodes which are used during SSO startup. Instructions on setting the initial seed nodes can be found here.
- SSO now recovers from changes in the Redis cluster's topology during runtime, such as nodes going down and back up.

...

IAM-1320: SSO Server acts as a TUPAS IDP
IAM-1478: PCR generation - an option to use new kind of UUID format as specified in RFC 41124122[9]
IAM-1493: It is now possible to prevent SSO on server side by using agent setting (using either Forceauthn, oneTimeUse or both parameters)
IAM-1736: New Ubisecure look and feel to SSO
IAM-1770: New tomcat version 8.0.38

...