Release Notes 3.1.429

Publication Date: March 19th, 2018

The following are the news features, enhancements and fixed issues for Cloud CMS 3.1.428 release.

Cloud CMS API

• Support for SSO, SAML 2.0 and JWT (JSON Web Token).
• Improved cluster-wide support for client-side SSO initiated user sync.
• GITANA_TICKET now encodes using JSON Web Token (JWT) and customizable secret.
• Fix to allow for empty relators (such that nodeType is not specified), default to n:node.
• Support configurable MongoDB write concerns to allow for finer grained control of writes around replica sets and shard DB setups.
• Fix a bug whereby transaction service rollbacks could fail due to node reload() not being found.
• Fix so that exports run properly in all cases.
• Improved and more efficient handling of JSON structures internally.
• Quieter OpenOffice shutdown for cases where OpenOffice did not initialize properly.
• Node "find" method now uses resolved branch ID (instead of passed in branch ID).
• Improvements to behavior binding compilation to avoid permission-related issues around rules.
• Ensure that failed releases retain differencing results for inspection.
• Release process captures failed transaction commits and retains error messages.
• Reindexing avoids archived branches for greater efficiency.
• Better MongoDB indexing for registrar "tenants" and directory "identity-recipients".
• Improvements to cluster-wide access and refresh token management.
• Auto-client mappings now use "host" instead of "url".
• Fixed a bug whereby params were not processed properly on web hook calls.
• Improvements to HMAC MD5 digital signature support for web hook calls.

Cloud CMS Application Server

• Improvements and refactor of authentication service to support more hooks and extensibility points .including support for JWT, SAML 2.0 and other SSO strategies.
• Support for automatic user properties mapping and group sync based on SAML 2.0 or JWT roles - allow for user within Cloud CMS to automatically be created, updated and placed into mapped projects and teams.
• Support for dynamic application settings to allow for runtime modification to underlying service configurations.
• Fixed a bug whereby application settings invalidation wasn't clearing all required caches.
• Fix so that STOMP MQ provider auto-configures properly for some cases.
• Added "Awareness" service to allow for optional, real-time Socket.io interaction between connected servers including push/pull messaging and discovery of shared state between participants, support for in-memory and Redis backends.
• Improvements to configuration service so that config blocks are detected more accurately on load.
• Virtual configuration service now works with the latest API (supporting "hosts" over "urls").
• Improved support for HTTP caching + optimized TTLs by default.
• Driver cache is more forgiving and null sentinel values have a short TTL.
• Fix so that original URL is retained on redirect for login and redirected to upon login.
• Fix so that explicitly selected UI Configs load for all cases.
• Inline libraries support MD5/timestamp suffixes, allowing for improved caching.
• Code cleanup and improvements for more efficiency.
• Updated Gitana driver, Alpaca and Socket.io to latest versions.

Cloud CMS User Interface Server

• Added support for SAML 2.0 and JWT enterprise SSO which are now fully configurable within the user interface, allowing you to connect Cloud CMS to enterprise identity providers including Microsoft Active Directory Federation Services (ADFS), Azure AD, Oracle Identity Federation, SecureAuth and more.
• Enhanced login and special pages to be more secure and to support an improved authentication flow.
• Support for automatic user sync based on SAML 2.0/JWT assertion, map properties from assertion to user object and automatically assign users to projects and teams based on assertion roles or groups.
• Make loading of themes and modules more forgiving so that faulty elements do not prevent the UI from loading or are more recoverable, automatically fall back to default theme if custom theme fails to load.
• Removed "appcache" from main index.html file, explicit nocache for /index.html.
• Improved release finalization so that it reports any errors immediately (within the modal) instead of requiring editorial users to check project logs for information.
• Ensure that users are redirected back to their original URL after being redirected for login.
• Ensure that dynamic configuration (UIConfig) reloads properly on changes.
• Fix so that workspace color selection works across Windows Chrome and other browsers.
• Updates and improvements to Alpaca forms engine.
• Upgrades to third-party libraries including jQuery and DateTime Picker.