What's New in Identity Service

CBPFR-747 To improve system security, configuring multiple authenticators is now prohibited for two-factor authentication of users under accounts not linked to any brand (typically, the provider account).

After the upgrade, users with multiple authenticators configured will not be able to log in, facing the error: "Incorrect configuration of two-factor authentication. Please contact support to reset 2FA configuration."

Two-factor configuration for such users can be reset using these instructions.

Fixes

CBIDP-38 It was not possible to create a user using the same external identity.
CBIDP-5 A re-created user was not able to log in.
CBIDP-42 Security fixes.
CBIDP-60 The Privacy Policy page could not be opened in public marketplace.

Identity Service 4.1.356 (September 17, 2024)

This is a patch release.

Fixes

CBIDP-61 Privacy policy did not open from public marketplace.

Identity Service 4.1.353 (August 29, 2024)

This is a patch release.

Features

CBIDP-50 Starting with this release, Google Analytics can also be used for the login page.

Identity Service 4.1.350 (May 16, 2024)

Features

CBPFR-246 Now, provider and operating unit users can reset two-factor authentication settings for users under their own and child accounts. After the reset, the user will be asked to reconfigure two-factor authentication for their account.

Fixes

CBIDP-27 After the upgrade to version 4.0.330, some URLs in SAML settings were changed incorrectly, which caused failed login attempts.

Components required for specific scenarios

To be able to reset two-factor authentication, the following component is additionally required:

OSS: 21.16

Identity Service 4.0.330 (March 7, 2024)

This is a patch release.

Fixes

IDP-437 It was possible to change a user name in Keycloak so that this user could impersonate a different account using the same credentials.
IDP-375 Backchannel logout did not work: an existing session could be reused to authenticate a user after logging out.
IDP-352 IDP liveness metrics could indicate that Identity Service was running when it was down.

Identity Service 4.0.314 (October 24, 2023)

This is a patch release that includes internal improvements only.

Identity Service 4.0.303 (September 13, 2023)

This release includes internal improvements and the following fix:

IDP-381 MFA could be reset when users were changing their passwords.

Identity Service 3.0.3 (August 11, 2023)

This is a patch release.

Fixes:

IDP-386 Sign-up could fail when using an email with the plus sign.

Identity Service 3.0.2 (August 2, 2023)

This release includes internal component improvements only.

Identity Service 2.3.279 (June 30, 2023)

Fixes:

IDP-355 Changing a user's password could take up to 30 seconds.

Identity Service 2.3.260 (March 28, 2023)

This patch release brings security fixes.

Identity Service 2.3.255 (March 8, 2023)

This release brings security fixes and the following improvement:

IDP-279 Identity Service now supports Keycloak version 18.0.2.

Identity Service 2.2.236 (December 23, 2022)

This release includes internal component improvements only.

Identity Service 2.1.206 (July 21, 2022)

This release of Identity Service brings the following improvements:

You can now configure your Public Marketplace to redirect a user to an external sign-up form for a customized onboarding process from:
- Сheckout in Public Marketplace
- Sign-up form in Public Marketplace
  
  If your external sign-up form is configured to send back a SAML response to CloudBlue Commerce, a user will be securely authenticated with single sign-on.
Identity Service now supports a new URL parameter that allows you to authenticate users with your external IDP, providing them with a seamless SSO experience.

Note: This functionality requires BSS version 21.7 and Branding UI version 21.7.162 or higher.
As of this version, PostgreSQL 13 can now be used for the database of this component.

Identity Service 2.0.165 (March 14, 2022)

This release of Identity Service fixes the following issues:

IDP-206 The issue that sometimes caused the cookies notice to disappear is fixed.
IDP-210 A critical security vulnerability in Keycloak was fixed. The version of Keycloak has been updated to 15.1.1.
IDP-200 This version of Identity Service supports K8s 1.22.

Identity Service 2.0-156 (January 27, 2022)

The PL locale has been added in this version.
This component is now based on Red Hat Universal Base Images (UBI). These are lightweight and more secure operating system images as they contain a minimal set of software packages.
You can now change the log level of this component at runtime. To learn more, please refer to Managing the Log Level of a Component.

Identity Service 2.0-143 (October 29, 2021)

Identity Service overall performance and stability has been improved in this version.

Resolved Issues

IDP-153 Password quality policy could prevent weak passwords from being anonymized.

IDP-157 If multiple Kubernetes pods with IDP were running on an installation, login stopped working for some users.

How to Upgrade the Identity Service to the Latest Version

Identity Service 2.0-100 (April 23, 2021)

Identity Service overall performance and stability has been improved in this version.

Resolved Issues

IDP-124 There were exceptions when the IDP service was installed in a non-default namespace.

IDP-139 A One-Time-Password was not reset after the password reset procedure.

IDP-142 A brand in IDP could not be recreated.

Identity Service 2.0-65 (February 10, 2021)

Identity Service overall performance and stability has been improved in this version.

Resolved Issues

IDP-119 UX1 Marketpalce sign-up and sign-in pages did not have Google Analytics conversion tracking.

IDP-115 An IDP call during reseller creation sometimes failed, which caused resubmitting of the creation order failure.