Trustbuilder .IO
Trustbuilder .IO
Breadcrumbs

Release Notes

The following page refers to TrustBuilder.io releases. Please, see Releases FAQ to know more.

Visit our status page to stay informed of outages and scheduled maintenance for the TrustBuilder.io platform. On the status page, click on Subscribe to updates to receive alerts whenever we create, update or resolve an incident.

Starting from the 2024.8.0 release, version names follows a new format: Year.ReleaseNumber.HotfixNumber. This change reflects updates to the architecture and new components.

Production environment

2026.3.0

May 5, 2026

  • The is_blocked field in GET/POST/PUT/PATCH /users/{user_id} has been removed. Use GET /users/{user_id}/blocks to retrieve a user’s blocked status.

  • The Trustbuilder.io API documentation interface has been redesigned. The previous Swagger UI has been replaced with a more structured and user-friendly interface.

    image-20260417-081235.png

    info No changes have been made to the API itself, only the documentation interface has been updated.

  • Bug fix 

2026.2.1

March 26, 2026

  • Bug fix that prevented users with delegation rights from viewing user details within their scope.

The is_blocked field in GET/POST/PUT/PATCH /users/{user_id} is deprecated and will be removed in a future release. Use GET /users/{user_id}/blocks to retrieve a user’s blocked status.

2026.1.0

January 29, 2026

  • Access flows: SP and IdP descriptions are now displayed in the access flow overview on the configuration page.

    Access flows improvements.png

  • Logs improvement

  • Bug fixes

The is_blocked field in GET/POST/PUT/PATCH /users/{user_id} is deprecated and will be removed in a future release. Use GET /users/{user_id}/blocks to retrieve a user’s blocked status.

2025.9.2

December 4, 2024

  • IdPs configuration: auto-provisioning can now be disabled.

    20251117-1013-51.5245380-20251117-101355.gif

  • SAML IdPs: added support of <samlp:Scoping> in AuthnRequests to ensure eHerkenning and eIDAS compliance. Admins can now declare Scoping IdPs.

    image-20251117-105905.png

  • OAuth2 JWT tokens: an option for exposing the scope claim as a space-separated string has been added (for compliance with RFC 9068). The array of values (old behavior) remains the default.

    image-20251117-130757.png

  • Logs now include more information when a user is not found during login.

  • Bug fixes:

    • Security Fix

    • Attribute rules using ENUMERATION values are now correctly saved and displayed in the admin portal (Service Provider > Attribute Rule).

    • Added a new GET users/{user_id}/blocks endpoint to fix an issue where the user’s blocked status was not updated correctly in the admin portal.
      ⚠️ This new endpoint is the definitive way to retrieve the blocked status for a single user. The is_blocked old field in GET/POST/PUT/PATCH users/{user_id} is deprecated and will be removed in a future release.

    • The search behavior in user tab filter has been modified for text attributes:

      • Equals (default) was case-insensitive and is now case-sensitive.

      • Contains doesn't change and is still case-insensitive.

2025.8.1

October 30, 2025

  • Improved error handling to prevent system exceptions during authentication failures.

  • Improved support of multi-valued JSON user attributes in OAuth ID token claims

  • Bug fixes

2025.7.2

September 11, 2025

  • User attribute names must now be unique

  • Improvement of consent management: expired consents are no longer stored.

2025.6.1

July 31, 2025

  • Security: The HSTS Header max-age is now set to 1 year (=31 536 000 seconds)

  • API: Updated endpoints to match REST standards, returning a 201 (CREATED) status code for a POST creation, instead of 200 (OK). This applies to /users and /persona-definitions.

  • Improved handling of missing user consent

  • Bug fixes

2025.5.0

July 1, 2025

  • Menu updates in Admin Portal:

    • Identity Management has been renamed to Directory

    • Identity Providers has been moved to a new section called Integrations

      Nouveau menu.png

  • Improved policy-driven access flow when a derived attribute is used

  • Bug fixes

2025.4.0

June 5, 2025

  • Administrators can now block and unblock users.

    Block user.gif

  • HSTS header is now optional in Gateway

  • FIDO2 authentication - Feature enabled on demand: support of French and Dutch languages in registration and login pages.

  • Change the management of session cookie to avoid conflicts.

  • Bug and security fixes

2025.3.0

May 15, 2025

  • FIDO2 authentication - Feature enabled on demand:
    Improved behavior at user deletion: all user security keys are now automatically deleted

  • Self-Service Portal: Users can now rename their security keys.

    key renaming in release note.gif

  • Performance improvement

  • Bug fixes

2025.2.0

February 20, 2025

  • [Beta] FIDO2 authentication - Feature enabled on demand

    • FIDO2 Registration policy is now visible and can be edited

    • The username is now captured and stored during registration to improve the authentication experience.

  • Self-Service portal

    • Users can view the status of their security keys.

    • Multi-language support has been added.

  • Improve logging on Authentication and Authorization events

  • Remove Service Catalog support on IDP and SP creation pages

  • Bug fixes

    • Add missing confirmation messages when clicking Save.

    • Other bug fixes

2025.1.1

January 30, 2025

  • Database optimizations

2025.1.0

January 23, 2024

  • Bug fixes

    • Buttons sometimes not be visible on pop-ups

    • Persona invitation link not followed after login

    • E-mail verification field might revert to FALSE.

    • Other bug fixes.

  • [Beta] FIDO2 authentication - Feature enabled on demand

    • Improved error messages when registering a key via the Self-Service Portal

2024.9.1

December 19, 2024

  • Fixed an issue with user and persona events handling.

2024.9.0 (11.2.26)

December 12, 2024

  • [Beta] Support of FIDO2 security key as a new authentication method - Feature enabled on demand
    More information

  • Sign-up option is a configurable feature on login page
    More information

  • Bug fixes

2024.8.0 (11.2.25)

November 14, 2024

  • Request ID can be provided to the user to report a problem with authorization

  • User self-registration can be disabled in the administration

  • User caching can be disabled in the administration

  • Performance improvements

  • Bug fixes

11.2.24

October 3, 2024

  • Self-Service portal > shows active persona information

  • Performance improvements

  • Bug fixes

11.2.23

July 23, 2024

  • Admin Portal: added Delegated Administration feature
    More information

  • Self-Service Portal:

    • Added user personas management capability

    • Users can now delegate their personas to other users

    • Users can now see and manage requests
      More information

  • Performance improvements

  • Bug fixes

11.2.22

May 30, 2024

  • Admin Portal > Added entitlements parameter to personas

  • Refactored endpoint for tenant queries

  • Bug fixes

11.2.21

May 02, 2024

  • Improved UX on viewing user profile

  • Accessibility improvements

  • Performance improvements

  • Better explanation of some errors to users

  • Bug fixes

11.2.20

March 28, 2024

  • Identity Manager > enforces attribute definitions marked as unique to ensure the uniqueness of values in user profiles

  • Identity Manager > improves the behavior when adding a unique property to an existing attribute definition

  • Policy Engine > custom attributes are now supported in policy rules on user level

  • Admin Portal > allows to set a persona as preferred from the list of personas

  • Logs improvements

  • Bug fixes

11.2.19

February 9, 2024

  • Policy Engine > persona attributes are now supported in policy rules

  • Admin Portal > now allows to filter users by custom attributes in users overview

  • Admin Portal > improved the UI of rules configuration interface

  • Access Management > improved the authentication process to remain robust and error-free (ACR handling)

  • Identity Manager > now allows to define a display name to persona definition

  • Session Manager > improved persona selection to use the right attributes

  • Bug fixes

11.2.18

January 25, 2024

  • Bug fix

11.2.17

January 4, 2024

  • Admin Portal > now allows to filter users by persona in users overview

  • Admin Portal > added pagination to user profiles overview

  • Identity Manager > improved the behavior of user profiles creation with required custom attributes

  • Identity Manager > now allows to add custom top-level attributes to user profiles

  • Admin portal > improved JSON mode switching behavior

  • Admin Portal and Self-Service Portal > improved the returned error messages in persona editor

  • APIs > changed the base URL of TrustBuilder.IO API (preview and production environments) - More information

  • Logs improvements

  • Bug fixes

11.2.13

October 26, 2023

  • Admin Portal > improved the behavior after deleting a persona definition

  • Admin Portal > IP ranges can now be added to Admin Portal access restrictions

  • Self-Service Portal > now allows to edit email and username

  • Bug fixes

11.2.12

October 7, 2023

  • Policy editor > now supports the entire range of attributes

  • Admin Portal and Self-Service Portal > now allows to search for an attribute when adding a filter

  • Fixes a refresh token issue relative to PKCE Authorization grant

  • Bug fixes

11.2.11

October 5, 2023

  • Admin Portal > Improve user administration screens

  • Identity Manager > Event on persona deletion

  • Policy Engine now supports the use of persona attributes

  • Bug fixes

11.2.10

August 31, 2023

  • Identity Manager > API now allows to add custom attributes at top-level

  • Bug fixes

11.2.9

July 19, 2023

  • Admin Portal > Native integration of TrustBuilder MFA

  • Identity Manager > Native bi-directional synchronization with TrustBuilder MFA

  • Identity Manager > Users > auto-provisioning of roles to TrustBuilder MFA based on Administrator Persona

  • Admin Portal > Policy > now allows to create a rule while editing a policy

  • Admin Portal > Rule > now allows deletion of an expressions

  • Admin Portal > filtering is now case-insensitive

  • Admin Portal > has restructured menu

  • Bug fixes

11.2.8

July 6, 2023

  • Admin Portal > Access Flows now allows policies to be linked

  • Admin Portal > Identity Providers now includes AppleID configuration

  • Policy Engine now protects against accidental deletion of policies that are in use

  • Admin Portal > Policies now allows rules to be created while adding it to a policy

  • Admin Portal > Policies now allows policies and rules to contain a description

  • Admin Portal > Rules now supports has_value and is_empty in visual mode

  • Hosted Login tb-login now allows forgot-password to be linked to external systems, e.g. other IAM

11.2.7

May 23, 2023

  • Identity Manager introduces PATCH for deletion of attributes

  • Admin Portal > Policies now allows the rules to be combined visually

  • Admin Portal > Policies now provides more guidance in JSON editor

  • Admin Portal now shows the TB.io version number of the tenant

11.2.6

May 9, 2023

  • Admin Portal > Rules allows obligations to be added in visual mode

  • Admin Portal > Rules allows equals and not_equals expression in visual mode

  • Admin Portal > Users allows the filtering to be reset

  • Policy Engine now uses the term DENY_OVERRIDES instead of ORDERED_DENY_OVERRIDES

  • Hosted Login now supports Swedish, French, and German

  • TB.Connect bug fixes in SAML and OIDC handlers

11.2.5

April 27, 2023

  • Policy Engine introduces the elem_match operator in rule expressions and renames deny_overrides

  • Session Manager enforces status, valid_from and valid_till during persona selection

  • Identity Manager enables attribute deletion and persona attribute setting through the PATCH endpoint

  • Hosted Login adds support for Swedish, French, German

  • Admin Portal > Users allows sorting by any column

  • Admin Portal and Self-Service Portal show the scope on the persona tile

  • Bug fixes

  • Security fix in Self-Service Portal

11.2.4

April 12, 2023

  • Hosted Login enables language selection

  • Hosted Login defaults to user_name if given_name and family_name or not set

  • Admin Portal enables user list to be sorted

  • Admin Portal enables scope of a persona to be edited

  • Admin Portal resolves concurrent user editing conflicts between multiple users admins

  • Bug fixes

11.2.3

March 29, 2023

  • Extends Identity Management API with PATCH endpoints on user and persona

  • Adds filtering by custom attributes to user overview

  • Shows updated_at and created_at in the user overview

  • Prevents that Persona definitions contain duplicate attributes or undefined attributes

  • Extends the Policy Engine language with not, not_equals, not_in, older_than, not_older_than

  • Relaxes uniqueness constraint on attribute displayname to uniqueness per category

  • TB.Connect:

    • Extends the Application Catalogue with any OAuth2 SP

    • Receives session information with HTTP 200 response from Session Manager

    • Fixed issue with missing claims after token exchange

  • Bug fixes

11.2.2

March 13, 2023

  • Extends the Policy Engine rule expression language with $session.persona

  • Session Manager provides an endpoint to store persona selection

  • Allows description and metadata to be added to policies and rules

  • Allows policy name to be changed in the visual editor

  • Allows customization of the persona selection screen

  • Adds filtering by native attributes to user overview

  • Enhances the login screen to make self-registration configurable

  • Renames the attribute member_of into entitlements

  • Publishes event on event bus at “add/update tenant”

  • Auto-creates a TB.Connect instance when creating a new tenant in TB.io

  • Bug fixes

11.2.1

February 14, 2023

  • Introduces persona selection in Session Lifecycle Management without login/logout

  • Extends Policy Engine API and Admin Portal with “delete policy” and “delete rule”

  • Extends Policy Engine rule expression language

  • Adds managed id_at_customer to the user profile at top level

  • Self-Service Portal enables password manager to autofill password

  • Self-Service Portal makes registration an optional button on login screen

  • Publishes event on event bus at “add/update persona” and “update user”

  • Enables TB.Connect to support automated provisioning triggered through events

  • Enables TB.Connect to handle persona obligation

  • Improves error reporting

  • Bug fixes

11.2.0

February 3, 2023

  • Introduces Policy Administration Point with XACML-based declarative language

  • Introduces Session Lifecycle Management

  • Introduces authentication driven by declarative policies

  • Introduces authentication obligations as acr and amr

  • Admin Portal Enables “get, add, change policy” and “get, add, change, find, reorder rule”

  • Introduces Rule Library

  • Extends Policy Engine API with “get, add, change policy” and “get, add, change rule”

  • Extends Policy Engine API with “reorder rules” and “add existing rule”

  • Extends Identity Manager API with “delete persona”

  • Admin Portal Improves persona admin section and adds paging to user overview

  • Self-Service Portal introduces storybook for UX customization

  • Self-Service Portal extends search capability

  • Self-Service Portal sets CDN URL via template variables on Hosted Login

  • Self-Service Portal extends Web Components for Lazy Migration

  • Self-Service Portal adds translation-key model to Web Components

  • TB.Connect synchronizes start, continue and end sessions with Session Manager

  • Enables TB.Connect to handle acr and amr obligation

  • Improves error reporting for tenant manager

  • Bug fixes

11.1.2

January 12, 2022

  • Identity Manager becomes the master in user management and makes TB.Connect the slave

  • Identity Manager publishes event on event bus on “add user”

  • Bug fixes

11.1.1

December 19, 2022

  • Extends Identity Manager API with “get persona by attribute”

  • Bug fixes

11.1.0

October 7, 2022

  • Introduces Persona Lifecycle Management

  • Adds API and enables Admin Portal to “get, add, change, delete a persona definition”

  • Adds API and enables Admin Portal to “get, add, change persona”

  • Extends API and enables Admin Portal with “get user by attribute”

  • Extends API and enables Admin Portal with “list and filter user profiles”

  • Enables custom attributes to be added to a persona type

  • Enables TB.Connect to use Persona attributes in Access Flows

  • Bug fixes

11.0.0

July 15, 2022

  • Introduces Identity Management on top of credentials management in TB.Connect

  • Adds API to “get, add, change user profile”

  • Adds API to “get, add, change, delete attribute definition”

  • Adds Tenant Management API to “create tenant”

  • Adds Configuration Management API to “configure tenant”

  • Admin Portal and Self-Service Portal introduces the use of Web Components

  • Admin Portal enables “get, add, change user profile” and “list and filter user profiles”

  • Enables TB.Connect to use User Profile attributes in Access Flows

Preview environment

2026.3.0

April 23, 2026 in preview

  • The is_blocked field in GET/POST/PUT/PATCH /users/{user_id} has been removed. Use GET /users/{user_id}/blocks to retrieve a user’s blocked status.

  • The Trustbuilder.io API documentation interface has been redesigned. The previous Swagger UI has been replaced with a more structured and user-friendly interface.

    image-20260417-081235.png

    info No changes have been made to the API itself, only the documentation interface has been updated.

  • Bug fix

2026.2.1

March 19, 2026 in preview

  • Bug fix that prevented users with delegation rights from viewing user details within their scope.

The is_blocked field in GET/POST/PUT/PATCH /users/{user_id} is deprecated and will be removed in a future release. Use GET /users/{user_id}/blocks to retrieve a user’s blocked status.

2026.1.0

January 22, 2026 in preview

  • Access flows: SP and IdP descriptions are now displayed in the access flow overview on the configuration page.

    Access flows improvements.png

  • Logs improvement

  • Bug fixes

The is_blocked field in GET/POST/PUT/PATCH /users/{user_id} is deprecated and will be removed in a future release. Use GET /users/{user_id}/blocks to retrieve a user’s blocked status.

2025.9.2

December 1, 2025 in preview

Security Fix

2025.9.1

November 27, 2025 in preview

  • IdPs configuration: auto-provisioning can now be disabled.

    20251117-1013-51.5245380-20251117-101355.gif

  • SAML IdPs: added support of <samlp:Scoping> in AuthnRequests to ensure eHerkenning and eIDAS compliance. Admins can now declare Scoping IdPs.

    image-20251117-105905.png

  • OAuth2 JWT tokens: an option for exposing the scope claim as a space-separated string has been added (for compliance with RFC 9068). The array of values (old behavior) remains the default.

    image-20251117-130757.png

  • Logs now include more information when a user is not found during login.

  • Bug fixes:

    • Attribute rules using ENUMERATION values are now correctly saved and displayed in the admin portal (Service Provider > Attribute Rule).

    • Added a new GET users/{user_id}/blocks endpoint to fix an issue where the user’s blocked status was not updated correctly in the admin portal.
      ⚠️ This new endpoint is the definitive way to retrieve the blocked status for a single user. The is_blocked old field in GET/POST/PUT/PATCH users/{user_id} is deprecated and will be removed in a future release.

    • The search behavior in user tab filter has been modified for text attributes:

      • Equals (default) was case-insensitive and is now case-sensitive.

      • Contains doesn't change and is still case-insensitive.

2025.8.1

October 23, 2025 in preview

  • Bug fixes

2025.8.0

October 16, 2025 in preview

  • Improved error handling to prevent system exceptions during authentication failures.

  • Improved support of multi-valued JSON user attributes in OAuth ID token claims

  • Bug fixes

2025.7.2

September 4, 2025 in preview

  • User attribute names must now be unique

  • Improvement of consent management: expired consents are no longer stored

2025.6.0

July 22, 2025 in preview

  • Security: The HSTS Header max-age is now set to 1 year (=31 536 000 seconds)

  • API: Updated endpoints to match REST standards, returning a 201 (CREATED) status code for a POST creation, instead of 200 (OK). This applies to /users and /persona-definitions.

  • Improved handling of missing user consent

  • Bug fixes

2025.5.0

June 24, 2025 in preview

  • Menu updates in Admin Portal:

    • Identity Management has been renamed to Directory

    • Identity Providers has been moved to a new section called Integrations

      Nouveau menu.png

  • Improved policy-driven access flow when a derived attribute is used

  • Bug fixes

2025.4.0

May 27, 2025 in preview

  • Administrators can now block and unblock users.

    Block user.gif

  • HSTS header is now optional in Gateway

  • FIDO2 authentication - Feature enabled on demand: support of French and Dutch languages in registration and login pages.

  • Change the management of session cookie to avoid conflicts.

  • Bug and security fixes

2025.3.0

March 25 2025 in preview

  • FIDO2 authentication - Feature enabled on demand:
    Improved behavior at user deletion: all user security keys are now automatically deleted

  • Self-Service Portal: Users can now rename their security keys.

    key renaming in release note.gif

  • Performance improvement

  • Bug fixes

2025.2.0

February 18, 2025 in preview

  • [Beta] FIDO2 authentication - Feature enabled on demand

    • FIDO2 Registration policy is now visible and can be edited

    • The username is now captured and stored during registration to improve the authentication experience.

  • Self-Service portal

    • Users can view the status of their security keys.

    • Multi-language support has been added.

  • Improve logging on Authentication and Authorization events

  • Remove Service Catalog support on IDP and SP creation pages

  • Bug fixes

    • Add missing confirmation messages when clicking Save.

    • Other bug fixes

2025.1.1

January 28, 2025 in preview

  • Database optimizations

2025.1.0

January 16, 2025 in preview

  • Bug fixes

    • Buttons sometimes not be visible on pop-ups

    • Persona invitation link not followed after login

    • E-mail verification field might revert to FALSE.

    • Other bug fixes.

  • [Beta] FIDO2 authentication - Feature enabled on demand

    • Improved error messages when registering a key via the Self-Service Portal

2024.9.1

December 18, 2024 in preview

  • Fixed an issue with user and persona events handling.

2024.9.0 (11.2.26)

December 05, 2024 in preview

  • [Beta] Support of FIDO2 security key as a new authentication method - Feature enabled on demand
    More information

  • Sign-up option is a configurable feature on login page
    More information

  • Bug fixes

2024.8.0 (11.2.25)

November 07, 2024 in preview

  • Request ID can be provided to the user to report a problem with authorization

  • User self-registration can be disabled in the administration
    More information

  • User caching can be disabled in the administration

  • Performance improvements

  • Bug fixes

11.2.24

September 26, 2024 in preview

  • Self-Service portal > shows active persona information

  • Performance improvements

  • Bug fixes

11.2.23

July 17, 2024 in preview

  • Admin Portal: added Delegated Administration feature
    More information

  • Self-Service Portal:

    • Added user personas management capability

    • Users can now delegate their personas to other users

    • Users can now see and manage requests
      More information

  • Performance improvements

  • Bug fixes

11.2.22

May 23, 2024 in preview

  • Admin Portal > Added entitlements parameter to personas

  • Refactored endpoint for tenant queries

  • Bug fixes

11.2.21

April 25, 2024 in preview

  • Improved UX on viewing user profile

  • Accessibility improvements

  • Performance improvements

  • Better explanation of some errors to users

  • Bug fixes

11.2.20

March 26, 2024 in preview

  • Identity Manager > enforces attribute definitions marked as unique to ensure the uniqueness of values in user profiles

  • Identity Manager > improves the behavior when adding a unique property to an existing attribute definition

  • Policy Engine > custom attributes are now supported in policy rules on user level

  • Admin Portal > allows to set a persona as preferred from the list of personas

  • Logs improvements

  • Bug fixes

11.2.19

February 9, 2024 in preview

  • Policy Engine > persona attributes are now supported in policy rules

  • Admin Portal > now allows to filter users by custom attributes in users overview

  • Admin Portal > improved the UI of rules configuration interface

  • Access Management > improved the authentication process to remain robust and error-free (ACR handling)

  • Identity Manager > now allows to define a display name to persona definition

  • Session Manager > improved persona selection to use the right attributes

  • Bug fixes

11.2.18

January 17, 2024 in preview

  • Bug fix

11.2.17

December 28, 2023 in preview

  • Logs improvements

  • Bug fixes

11.2.16

December 14, 2023 in preview

  • Admin Portal > now allows to filter users by persona in users overview

  • Bug fixes

11.2.15

November 28, 2023 in preview

  • Admin Portal > added pagination to user profiles overview

  • Identity Manager > improved the behavior of user profiles creation with required custom attributes

  • Bug fixes

11.2.14

November 9, 2023 in preview

  • Identity Manager > now allows to add custom top-level attributes to user profiles

  • Admin portal > improved JSON mode switching behavior

  • Admin Portal and Self-Service Portal > improved the returned error messages in persona editor

  • APIs > changed the base URL of TrustBuilder.IO API (preview and production environments) - More information

  • Bug fixes

11.2.13

October, 2023 in preview

  • Admin Portal > improved the behavior after deleting a persona definition

  • Admin Portal > IP ranges can now be added to Admin Portal access restrictions

  • Self-Service Portal > now allows to edit email and username

  • Bug fixes

11.2.12

October, 2023 in preview

  • Policy editor > now supports the entire range of attributes

  • Admin Portal and Self-Service Portal > now allows to search for an attribute when adding a filter

  • Fixes a refresh token issue relative to PKCE Authorization grant

  • Bug fixes

11.2.11

October, 2023 in preview

  • Admin Portal > Improve user administration screens

  • Identity Manager > Event on persona deletion

  • Policy Engine now supports the use of persona attributes

  • Bug fixes

11.2.10

August, 2023 in preview

  • Identity Manager > API now allows to add custom attributes at top-level

  • Bug fixes

11.2.9

July, 2023 in preview

  • Admin Portal > Native integration of TrustBuilder MFA

  • Identity Manager > Native bi-directional synchronization with TrustBuilder MFA

  • Identity Manager > Users > auto-provisioning of roles to TrustBuilder MFA based on Administrator Persona

  • Admin Portal > Policy > now allows to create a rule while editing a policy

  • Admin Portal > Rule > now allows deletion of an expressions

  • Admin Portal > filtering is now case-insensitive

  • Admin Portal > has restructured menu

  • Bug fixes

11.2.8

July, 2023 in preview

  • Admin Portal > Access Flows now allows policies to be linked

  • Admin Portal > Identity Providers now includes AppleID configuration

  • Policy Engine now protects against accidental deletion of policies that are in use

  • Admin Portal > Policies now allows rules to be created while adding it to a policy

  • Admin Portal > Policies now allows policies and rules to contain a description

  • Admin Portal > Rules now supports has_value and is_empty in visual mode

  • Hosted Login tb-login now allows forgot-password to be linked to external systems, e.g. other IAM

11.2.7

May, 2023 in preview

  • Identity Manager introduces PATCH for deletion of attributes

  • Admin Portal > Policies now allows the rules to be combined visually

  • Admin Portal > Policies now provides more guidance in JSON editor

  • Admin Portal now shows the TB.io version number of the tenant

11.2.6

May, 2023 in preview

  • Admin Portal > Rules allows obligations to be added in visual mode

  • Admin Portal > Rules allows equals and not_equals expression in visual mode

  • Admin Portal > Users allows the filtering to be reset

  • Policy Engine now uses the term DENY_OVERRIDES instead of ORDERED_DENY_OVERRIDES

  • Hosted Login now supports Swedish, French, and German

  • TB.Connect bug fixes in SAML and OIDC handlers

11.2.5

April, 2023 in preview

  • Policy Engine introduces the elem_match operator in rule expressions and renames deny_overrides

  • Session Manager enforces status, valid_from and valid_till during persona selection

  • Identity Manager enables attribute deletion and persona attribute setting through the PATCH endpoint

  • Hosted Login adds support for Swedish, French, German

  • Admin Portal > Users allows sorting by any column

  • Admin Portal and Self-Service Portal show the scope on the persona tile

  • Bug fixes

  • Security fix in Self-Service Portal

11.2.4

April, 2023 in preview

  • Hosted Login enables language selection

  • Hosted Login defaults to user_name if given_name and family_name or not set

  • Admin Portal enables user list to be sorted

  • Admin Portal enables scope of a persona to be edited

  • Admin Portal resolves concurrent user editing conflicts between multiple users admins

  • Bug fixes

11.2.3

March, 2023 in preview

  • Extends Identity Management API with PATCH endpoints on user and persona

  • Adds filtering by custom attributes to user overview

  • Shows updated_at and created_at in the user overview

  • Prevents that Persona definitions contain duplicate attributes or undefined attributes

  • Extends the Policy Engine language with not, not_equals, not_in, older_than, not_older_than

  • Relaxes uniqueness constraint on attribute displayname to uniqueness per category

  • TB.Connect:

    • Extends the Application Catalogue with any OAuth2 SP

    • Receives session information with HTTP 200 response from Session Manager

    • Fixed issue with missing claims after token exchange

  • Bug fixes

11.2.2

March, 2023 in preview

  • Extends the Policy Engine rule expression language with $session.persona

  • Session Manager provides an endpoint to store persona selection

  • Allows description and metadata to be added to policies and rules

  • Allows policy name to be changed in the visual editor

  • Allows customization of the persona selection screen

  • Adds filtering by native attributes to user overview

  • Enhances the login screen to make self-registration configurable

  • Renames the attribute member_of into entitlements

  • Publishes event on event bus at “add/update tenant”

  • Auto-creates a TB.Connect instance when creating a new tenant in TB.io

  • Bug fixes

11.2.1

February, 2023 in preview

  • Introduces persona selection in Session Lifecycle Management without login/logout

  • Extends Policy Engine API and Admin Portal with “delete policy” and “delete rule”

  • Extends Policy Engine rule expression language

  • Adds managed id_at_customer to the user profile at top level

  • Self-Service Portal enables password manager to autofill password

  • Self-Service Portal makes registration an optional button on login screen

  • Publishes event on event bus at “add/update persona” and “update user”

  • Enables TB.Connect to support automated provisioning triggered through events

  • Enables TB.Connect to handle persona obligation

  • Improves error reporting

  • Bug fixes

11.2.0

February, 2023 in preview

  • Introduces Policy Administration Point with XACML-based declarative language

  • Introduces Session Lifecycle Management

  • Introduces authentication driven by declarative policies

  • Introduces authentication obligations as acr and amr

  • Admin Portal Enables “get, add, change policy” and “get, add, change, find, reorder rule”

  • Introduces Rule Library

  • Extends Policy Engine API with “get, add, change policy” and “get, add, change rule”

  • Extends Policy Engine API with “reorder rules” and “add existing rule”

  • Extends Identity Manager API with “delete persona”

  • Admin Portal Improves persona admin section and adds paging to user overview

  • Self-Service Portal introduces storybook for UX customization

  • Self-Service Portal extends search capability

  • Self-Service Portal sets CDN URL via template variables on Hosted Login

  • Self-Service Portal extends Web Components for Lazy Migration

  • Self-Service Portal adds translation-key model to Web Components

  • TB.Connect synchronizes start, continue and end sessions with Session Manager

  • Enables TB.Connect to handle acr and amr obligation

  • Improves error reporting for tenant manager

  • Bug fixes

11.1.2

January, 2022 in preview

  • Identity Manager becomes the master in user management and makes TB.Connect the slave

  • Identity Manager publishes event on event bus on “add user”

  • Bug fixes

11.1.1

December, 2022 in preview

  • Extends Identity Manager API with “get persona by attribute”

  • Bug fixes

11.1.0

  • Introduces Persona Lifecycle Management

  • Adds API and enables Admin Portal to “get, add, change, delete a persona definition”

  • Adds API and enables Admin Portal to “get, add, change persona”

  • Extends API and enables Admin Portal with “get user by attribute”

  • Extends API and enables Admin Portal with “list and filter user profiles”

  • Enables custom attributes to be added to a persona type

  • Enables TB.Connect to use Persona attributes in Access Flows

  • Bug fixes

11.0.0

  • Introduces Identity Management on top of credentials management in TB.Connect

  • Adds API to “get, add, change user profile”

  • Adds API to “get, add, change, delete attribute definition”

  • Adds Tenant Management API to “create tenant”

  • Adds Configuration Management API to “configure tenant”

  • Admin Portal and Self-Service Portal introduces the use of Web Components

  • Admin Portal enables “get, add, change user profile” and “list and filter user profiles”

  • Enables TB.Connect to use User Profile attributes in Access Flows