> ## Documentation Index > Fetch the complete documentation index at: https://docs.strata.io/llms.txt > Use this file to discover all available pages before exploring further. # 2024 **December 20 2024** * **TLS:** Use Go's native implementation of 'x509.SystemCertPool' on Windows **December 19 2024** Internal improvements and maintenance updates. **December 19 2024** Internal improvements and maintenance updates. **December 19 2024** * **Dependencies:** Resolved CVE-2024-45338 **December 18 2024** Internal improvements and maintenance updates. **December 18 2024** Internal improvements and maintenance updates. **December 18 2024** * **ldapProvider:** Correctly surface 'getHashedCredentialsSE' error **December 17 2024** Internal improvements and maintenance updates. **December 17 2024** Internal improvements and maintenance updates. **December 17 2024** Internal improvements and maintenance updates. **December 17 2024** Internal improvements and maintenance updates. **December 16 2024** * **Secret provider:** Make CA not required for cert auth in HashiVault **December 13 2024** * **Dependencies:** Resolved CVE-2024-45337 **December 13 2024** * Fix Missing Folder for Artifactory Cleanup Workflow **December 12 2024** Internal improvements and maintenance updates. **December 12 2024** * **Connectors:** Allow multiple OIDC callback URLs to be defined **December 10 2024** Internal improvements and maintenance updates. **December 9 2024** * **Dependencies:** Resolved CVE-2024-53259 **November 29 2024** * **Service Extensions:** Implement HTTP interface of Orchestrator API. **November 29 2024** * **OIDC Connector:** Dynamically generate oauth logout callback URLs **November 28 2024** * **SAML Provider:** Fix issue where authentication requests required an ACS URL **November 27 2024** * **OIDC Provider:** Add support for 'ES256' key algorithm for client authentication **November 27 2024** * **HTTP:** Add global endpoint timeout. **November 26 2024** * **HTTP:** Add configurable HTTP server timeouts with sane defaults. **November 26 2024** * Respect env variables and CLI flags when reloading logger **November 22 2024** * **Proxy Apps:** Improve logging when required attributes are missing and not loadable **November 21 2024** * **OIDC Connector:** Dynamically generate oauth callback URLs **November 21 2024** * **OIDC Provider:** Improve logging during JWT bearer client authentication **November 21 2024** Internal improvements and maintenance updates. **November 20 2024** * Enable use of JWT for client authentication with client\_credentials grant **November 20 2024** * **Container:** Resolved CVE-2024-9143 **November 19 2024** * **SAML APP:** Support multiple ConsumerServiceURLs per SAML app **November 19 2024** Internal improvements and maintenance updates. **November 15 2024** * **SAML Connectors:** Use POST binding if available during SAML login **November 15 2024** * **Secret providers:** Support Hashicorp Vault cert auth on Windows **November 13 2024** * **Config Reload:** Make logger reloadable **November 13 2024** * **TLS:** Add support for ECDH algorithms on Windows **November 8 2024** * Add CRL revocation support to tls config **November 8 2024** * **SAML Provider:** Support compressed AuthnReq via POST binding **November 5 2024** Internal improvements and maintenance updates. **November 4 2024** Internal improvements and maintenance updates. **November 4 2024** * **SAML & OIDC Providers:** Enable service extensions to be used in conjunction with attribute providers **October 31 2024** Internal improvements and maintenance updates. **October 30 2024** * Add OCSP revocation check **October 29 2024** * **Logger:** Add error logger to HTTP server **October 25 2024** * **OIDC Provider:** Require openid scope to access userinfo endpoint **October 25 2024** * Support Hashicorp Vault cert auth on Linux **October 22 2024** Internal improvements and maintenance updates. **October 22 2024** * **Health service:** Make health service reloadable **October 18 2024** * Update PR template to hide instructions **October 17 2024** * **Connectors:** Generic SAML health check add cookies jar **October 17 2024** * **QKSLVR-1987:** Upload additional artifacts JFrog **October 17 2024** * **OIDC Provider:** Allow "sub" and "client\_id" claims to be overwritten via service extension **October 15 2024** * Add Single Logout JSON Schema **October 15 2024** Internal improvements and maintenance updates. **October 10 2024** * Add deb build target in Makefile * **OIDC Provider:** Dynamically build userinfo response **October 9 2024** * **OIDC Provider:** Add association from token cache to userinfo cache **October 7 2024** * **OIDC Provider:** Store userinfo data only once **October 2 2024** * **Connectors:** Infer correct protocol binding from SAML metadata **October 1 2024** * Expose 'jose.ContentType' in service extensions **October 1 2024** * **Connectors:** Add support for login hint via subject in PingFed SAML **September 27 2024** Internal improvements and maintenance updates. **September 26 2024** * Update github PR template * **Connectors:** Implement login\_hint in query for Azure SAML **September 23 2024** * **SE:** Add 'postLogoutSEV2' service extension **September 19 2024** * Ensure mTLS can not be bypassed by spoofing the Host header. **September 19 2024** * **Connectors:** Restore SAML login in PingFed **September 19 2024** * **Connectors:** Add login hint to OIDC connectors **September 17 2024** * **Proxy apps:** Allow secrets loading in policy locations **September 17 2024** * **SE:** Introduce v2 service extension signature for 'evalIdleTimeoutSE' **September 17 2024** * Support retrieving AWS secrets via ARN **September 17 2024** Internal improvements and maintenance updates. **September 16 2024** * **TLS:** Add support for SNI via 'http.hosts' **September 16 2024** * **SE:** Introduce v2 session evalMaxLifetime **September 13 2024** * **Service Extensions:** Fix route registration issue **September 12 2024** * Add newline delimiter option in CCP as workaround for multi-line secrets. **September 9 2024** * Format the Hypr HTML to make it more readable **September 9 2024** * **DSO-1348:** Add Uploading Artifacts for Services Team * SAML App inherits signing cert from SAMLProvider **September 6 2024** * **HTTP:** Rework HTTP initialization logic to support SNI **September 5 2024** Internal improvements and maintenance updates. **September 3 2024** * SAMLProvider fix panic when claims mapping attribute does not use connector notation **September 3 2024** * Fix OIDCProvider panic when claims mapping attribute does not use connector notation **August 29 2024** * **Bundle Validation:** Improve error handling when loading public key **August 28 2024** * **TLS:** Rename 'clientCAs' to 'clientCAFiles' in TLS config **August 28 2024** * **Continuity:** Improve reload behavior **August 27 2024** * **Continuity:** Check for duplicated status codes **August 27 2024** * **Continuity:** Add health check to ADFS **August 27 2024** * **Connectors:** Make cert and keys paths optional for ADFS **August 26 2024** Internal improvements and maintenance updates. **August 22 2024** Internal improvements and maintenance updates. **August 22 2024** * Support LoadAttributesSE for OIDC Apps **August 22 2024** * Enable service extensions for oidc provider authorization **August 21 2024** * Support multiple secrets for OIDC client authentication **August 20 2024** * Add load attributes service extension to SAML apps **August 19 2024** * Ensure OIDC clients are unique by client ID **August 17 2024** * Expose make commands in make help * **SAML Apps:** Support app level 'disableSignedAssertion' and 'disableSignedResponse' **August 15 2024** * Add authorization rules to OIDC apps **August 14 2024** Internal improvements and maintenance updates. **August 13 2024** * **SAML Apps:** Support app-specific signing certs **August 13 2024** * Support client defined grant types for OIDC apps **August 13 2024** * **Continuity:** Remove body matching response logging **August 12 2024** * Update mitchellh/mapstructure to go-viper/mapstructure/v2 **August 12 2024** * **Apps:** Validate 'name' uniqueness **August 9 2024** * Support ROPC flow for OIDC apps via backchannel authenticate SE **August 8 2024** * **Continuity:** Increase state parameter length in generic OIDC health check **August 6 2024** * **Continuity:** Add TLS to custom health check **August 6 2024** Internal improvements and maintenance updates. **July 31 2024** * Support IsAuthorizedSE in SAML apps **July 31 2024** * Add permissions for id-token for Jfrog Artifactory GitHub Workflow * **Continuity:** Add custom health check response body matching **July 29 2024** * Use the correct HTTP client for SAML health check **July 29 2024** * **Continuity:** Add headers to custom health check endpoint **July 26 2024** * Add QR authentication mode for Hypr connector **July 25 2024** * Add GitHub workflow for uploading artifacts to JFrog Artifactory * Update Artifactory GitHub Workflow to reference branch * **Continuity:** Add ability to define custom health check **July 19 2024** * **Continuity:** Change the default health check interval **July 19 2024** * **Continuity:** Add un/healthy threshold **July 18 2024** * Enforce authorization rules in SAML Apps **July 18 2024** * **Continuity:** Support health checks in PingFederate connector **July 17 2024** * Reimplement Cyberark Conjur Secret Provider **July 12 2024** Internal improvements and maintenance updates. **July 11 2024** * Add state to continuity enabled connectors **July 11 2024** * Remove legacy LDAP 'attrproviders' implementation **July 11 2024** * **Continuity:** Update IdP healthcheck metric prefix to include namespace **July 10 2024** * **SAML APP:** Query for nameID attributeMapping attribute if not on session **July 9 2024** * Update log level to error when referenced secret is not found **July 5 2024** * **Continuity:** Add IDP health check to Auth0 **July 3 2024** * **Continuity:** Add IdP health metrics **July 2 2024** * Expose ldap.Control **June 28 2024** * Implement SAML health check in Okta **June 28 2024** * Implement SAML health check in Azure **June 27 2024** * Add AWS Secrets manager secret provider support **June 25 2024** Internal improvements and maintenance updates. **June 25 2024** * **Continuity:** Add generic SAML health check **June 24 2024** * **Telemetry:** Update local Docker Compose telemetry environment for development **June 24 2024** * Support reload for single logout config **June 21 2024** * **Continuity:** Leverage generic OIDC health check in Okta and Azure **June 21 2024** * **Continuity:** Add meter and tracer to health check service **June 21 2024** * **Continuity:** Parse health check values as duration **June 20 2024** * Protect session store with mutex and add session service to config reloader **June 19 2024** * Implement session config reload **June 18 2024** Internal improvements and maintenance updates. **June 18 2024** * **Service Extensions:** Expose symbols for JWT encryption **June 18 2024** Internal improvements and maintenance updates. **June 17 2024** Internal improvements and maintenance updates. **June 14 2024** * **MSI:** Fix file contention issue **June 14 2024** Internal improvements and maintenance updates. **June 13 2024** * **Continuity:** Add health check to OIDC connector **June 13 2024** Internal improvements and maintenance updates. **June 12 2024** * **OIDC & SAML Apps:** Remove legacy resilience implementation **June 11 2024** * **Proxy apps:** Remove legacy resilience implementation **June 11 2024** Internal improvements and maintenance updates. **June 6 2024** * Redirect SAML SSO error responses correctly **June 5 2024** * **Continuity:** Add health check to AD **June 5 2024** * **Continuity:** Add health check to LDAP **May 31 2024** * SAMLProvider support LogoutRequest via POST binding **May 30 2024** Internal improvements and maintenance updates. **May 29 2024** * **Connectors:** Gracefully handle failure to retrieve OIDC well-known metadata **May 16 2024** * Verify Signed SAML Logout requests via Redirect binding **May 16 2024** Internal improvements and maintenance updates. **May 14 2024** * **SAML Apps:** Store logout request in cache **May 14 2024** * Fix SAMLProvider cacheState storage when using multiple IDPs **May 13 2024** * Add support for namespace in HashiVault **May 13 2024** * **Resilience connector:** Add support for logout **May 10 2024** * Unregister SAMLProvider SLO endpoint during stop **May 10 2024** * **Connectors:** Better handle logout errors **May 10 2024** * **Resilience connector:** Implement Query **May 9 2024** Internal improvements and maintenance updates. **May 9 2024** * Append query parameters to authn request during IDP Initiated SAML **May 8 2024** * Validate bundle file in MSI installer **May 7 2024** * **SAMLProvider:** Add SingleLogoutService to metadata when sloEndpoint is defined **May 7 2024** * **SAMLProvider:** Implement SP initiated SLO **May 7 2024** * **MSI:** Fix service restart when change and add default remote configs. **May 6 2024** * **Service Extensions:** Expose symbols to enable JWT generation **May 6 2024** Internal improvements and maintenance updates. **May 6 2024** * **Connectors:** Set transport properties on health check HTTP client **May 3 2024** * **SAML Connectors:** Fix panic observed when generating unsigned logout requests **May 2 2024** * **Resilience Connector:** Add meter and tracer **May 2 2024** * **Resilience Connector:** Add attributes mapping **April 30 2024** * **Resilience Connector:** Add 'enabled' property and remove dependency on feature flag **April 26 2024** * Add instructions on setting up the dev environment for the MSI Installer * **Resilience connector:** Implement failover strategy **April 25 2024** * Improve specificity of pull request instructions * **Resilience Connector:** Add base config and validation **April 24 2024** * **Resilience Connector:** Implement base lifecycle **April 23 2024** * **SAML Apps:** Call BuildRelayState extension post-authentication **April 22 2024** * **Resilient Connector:** Scaffold connector implementation **April 19 2024** Internal improvements and maintenance updates. **April 18 2024** * **SAML Apps:** Expose NameID configuration **April 18 2024** * Include allowedProtectedPackages option for Service Extensions **April 16 2024** * Introduce cache to SAMLProvider **April 16 2024** * **SAML Apps:** Expose BuildRelayState service extension for IDP-initiated login flow **April 15 2024** * MSI - Separate HTTP address field into IP and Port. **April 12 2024** * **SAML Apps:** Allow IDP-initiated 'relayStateURL' field to be optionally defined **April 12 2024** * MSI - Add documentation hyperlink to complex properties. **April 12 2024** Internal improvements and maintenance updates. **April 11 2024** * MSI - Auto set MAVERICS\_RELOAD\_CONFIG=true **April 11 2024** * Fix log key to have correct attrProvider name * MSI - Fix double configuration source error. **April 11 2024** * MSI - Migrate system environment variables. **April 10 2024** Internal improvements and maintenance updates. **April 10 2024** Internal improvements and maintenance updates. **April 10 2024** Internal improvements and maintenance updates. **April 10 2024** * **SAML & OIDC Apps:** Organize authprovider pkg and improve logging **April 10 2024** * Manually validate timestamp assertions in SAML **April 10 2024** Internal improvements and maintenance updates. **April 10 2024** * Implement generic SAML in 1Kosmos and add cache **April 9 2024** * Improve MSI UX flow for Bundle Key File selection. **April 9 2024** * MSI - Find certificate should have empty selection. **April 9 2024** * **SAML Apps:** Validate SP audience is unique before creation **April 4 2024** * **Proxy Apps:** Add support for HTTP request methods in policy **April 3 2024** * **OIDC Apps:** Add 'Authorization' to list of 'Access-Control-Allow-Headers' to fix CORS issue **April 3 2024** * Resolved CVE-2024-22189 **April 3 2024** * Make Ping Fed use generic SAML package and introduce cache **April 2 2024** Internal improvements and maintenance updates. **March 28 2024** Internal improvements and maintenance updates. **March 27 2024** * Fix remote config box gets cleared after selecting bundle public key file. **March 27 2024** * **SAML Connectors:** Only sign SAML AuthnRequest if signing certs are provided **March 27 2024** * OIDC ClaimsMapping -> LogicNodes **March 26 2024** * Implements new MSI UI flow **March 26 2024** * Minor changes to improve azure and connector behaviors **March 26 2024** * Rename LogicNode IDP to Value **March 25 2024** * Enhance SAML metadata parsing to support formatted certificates **March 25 2024** * Support api.App in IsAuthenticatedSE, AuthenticateSE and v2/BuildClaimsSE for saml apps **March 25 2024** * Support api.App in IsAuthenticatedSE, AuthenticatedSE, BuildAccessTokenClaimsSE, BuildIDTokenClaimsSE for oidc apps **March 22 2024** * Add support RP-initiated logout in OIDC provider **March 22 2024** * **NG-LDAP Provider:** Correctly handle a bind after the SASL security layer is active (Conformance) **March 21 2024** * **NG-LDAP Provider:** Various improvements to logging and user config. **March 20 2024** * Allow loading certs from Windows store in CyberArk CCP **March 20 2024** * Support api.App in loginSE and isLoggedInSE for proxy apps **March 20 2024** * Support api.App in createHeaderSE for proxy apps **March 20 2024** * Support api.App in loadAttrsSE for proxy apps **March 20 2024** * **NG-LDAP Provider:** Update Stability to Beta **March 20 2024** Internal improvements and maintenance updates. **March 20 2024** * **NG-LDAP Provider:** Fix context within SEs **March 19 2024** * **Service Extensions:** Add missing Cache WithTTL option to SE symbols **March 18 2024** Internal improvements and maintenance updates. **March 18 2024** * **NG-LDAP Provider:** Improve logging **March 18 2024** * **NG-LDAP Provider:** Handle Unbind **March 16 2024** * **NG-LDAP Provider:** Add SASL/GSS-SPNEGO/NTLM handling into the connection handler **March 15 2024** Internal improvements and maintenance updates. **March 15 2024** Internal improvements and maintenance updates. **March 15 2024** * Update error returned when end\_session\_endpoint isn't configured **March 15 2024** Internal improvements and maintenance updates. **March 14 2024** * Okta OIDC connector resilience **March 14 2024** Internal improvements and maintenance updates. **March 14 2024** * Implement CyberArkCCP **March 13 2024** Internal improvements and maintenance updates. **March 13 2024** * **NG-LDAP Provider:** Map user config to runtime parameters **March 13 2024** Internal improvements and maintenance updates. **March 12 2024** * Ensure appropriate errors are returned instead of http.ServeMux panic **March 12 2024** * **NG-LDAP Provider:** Attach secure connection handler to server **March 12 2024** * **NG-LDAP Provider:** Add NTLM Handler (Part 2) **March 12 2024** * Azure connector resilience **March 12 2024** Internal improvements and maintenance updates. **March 11 2024** * **NG-LDAP Provider:** Add NTLM Handler (Part 1) **March 11 2024** * **NG-LDAP Provider:** Handle Extended StartTLS **March 11 2024** Internal improvements and maintenance updates. **March 11 2024** * **Security:** Resolved CWE-409 **March 11 2024** * **NG-LDAP Provider:** Handle Search **March 8 2024** * **NG-LDAP Provider:** Handle Simple Bind **March 8 2024** * Expose service extension utility to enable WebLogic integration **March 8 2024** Internal improvements and maintenance updates. **March 8 2024** * **NG-LDAP Provider:** Add Simple Bind skeleton **March 7 2024** * Pass query params from logoutURL to postLogoutRedirectURL **March 7 2024** * **NG-LDAP Provider:** Add first packet processing layer **March 7 2024** * **NG-LDAP Provider:** Fix panic on Orchestrator shutdown **March 7 2024** * **NG-LDAP Provider:** Add initial connection skeleton **March 7 2024** * Add capability to choose idp for authn with LogicNode **March 7 2024** Internal improvements and maintenance updates. **March 7 2024** Internal improvements and maintenance updates. **March 7 2024** Internal improvements and maintenance updates. **March 7 2024** * **NG-LDAP Provider:** Add initial server connection logic **March 6 2024** * Add LogicNode as path to enhancing IDP logic **March 4 2024** * **NG-LDAP Provider:** Add SASL Security Layer (Security Sensitive) **March 2 2024** Internal improvements and maintenance updates. **February 29 2024** * **NG-LDAP Provider:** Add initial OIDs and message structure **February 29 2024** Internal improvements and maintenance updates. **February 29 2024** * **NG-LDAP Provider:** Add runtime params **February 29 2024** Internal improvements and maintenance updates. **February 27 2024** * **NG-LDAP Provider:** Add end-user config **February 27 2024** * Add Service Extension symbols to enable AVP use case **February 26 2024** Internal improvements and maintenance updates. **February 26 2024** * **NG-LDAP Provider:** Add initial Service Extension signatures and parsing logic **February 23 2024** Internal improvements and maintenance updates. **February 23 2024** Internal improvements and maintenance updates. **February 22 2024** * Parse Auth request properly to generate proper state param **February 21 2024** * Move nested policy so that it can be reused across constructs **February 21 2024** Internal improvements and maintenance updates. **February 21 2024** * **NG-LDAP Provider:** Implement minimal lifecycle **February 21 2024** Internal improvements and maintenance updates. **February 20 2024** * Add LDAP provider to root of the config **February 16 2024** * Create an initial structure for the next generation of the LDAP Provider **February 14 2024** Internal improvements and maintenance updates. **February 10 2024** Internal improvements and maintenance updates. **February 8 2024** * Add configuration options to MSI installer and fix upgrade behavior **February 8 2024** * Support loading service extension assets as a file system **February 6 2024** * Add offline\_access to scopes\_supported in OIDC well-known endpoint **February 2 2024** * Implement Context interface for service extensions **January 31 2024** * Support retrieving App name from some v2 Service Extensions **January 30 2024** * Expose orchestrator cache to service extensions **January 19 2024** * Add client\_id to claims in access token **January 18 2024** * Support login options in service extensions **January 18 2024** * Resolved CVE-2023-49295 **January 9 2024** * Fixes refresh token length configuration **January 4 2024** * Closes HTTP response body in connectors **January 4 2024** * Omit the attempt to substitute env var if the line starts with '#' **January 3 2024** * Close response body when making token request **January 2 2024** * Resolved CVE-2023-48795