v3.4.1

May 1, 2018

This release contains a critical bug fix:

• [IFMC-739] - Registration Authority unable to access operations page

v3.4

April 30, 2018

This release contains significant improvements for Delegated Administrators, in addition to other minor improvements and bug fixes. A Delegated Administrator may now create a Service Provider for later approval and submission by the Site Administrator.

Bug Fixes

• [IFMC-694] - Registration Authority unable to create InCommon registration link if the contact doesn't have a phone number defined

• [IFMC-696] - Delegated Administrator unable to create new SP
• [IFMC-697] - Delegated Administrator unable to edit SP
• [IFMC-711] - Authorization? method breaks when org is not present
• [IFMC-712] - Unable to access registration link
• [IFMC-714] - Unable to join via registration link
• [IFMC-716] - Unable to update SP

Enhancements

• [IFMC-368] - Implement an Expiring Certificates Section on the SA Dashboard

v3.3.2

April 24, 2018

This release contains bug fixes:

Bug Fixes

• [IFMC-580] - Unhandled exception: "An ActiveRecord::StaleObjectError occurred in login#login"
• [IFMC-700] - ActionView::Template::Error: No route matches {:action=>"create_inc_registration", :controller=>"admin"}
• [IFMC-706] - RA unable to reset user password
• [IFMC-710] - ActionView::Template::Error: undefined method `organization_id' for nil:NilClass

v3.3.1

April 12, 2018

This release contains minor internal bug fixes and improvements.

v3.3

April 11, 2018

This release contains improvements to certificate handling for Identity Providers, in addition to other minor enhancements, bug fixes, and internal improvements to the application code:

Bug Fixes

• [IFMC-232] - People may be missing required phone number

• [IFMC-323] - For all Page Titles / implement a Naming Convention for visually impaired Users / Section 508

• [IFMC-487] - Fix Metadata Display diff in RA approval queue

• [IFMC-577] - Received Something Went Wrong Message for RA Admin on Both Dev and Accept
• [IFMC-580] - Unhandled exception: "An ActiveRecord::StaleObjectError occurred in login#login"
• [IFMC-636] - ActionView::Template::Error: No route matches {:action=>"add_single_logout", :controller=>"manage", :org_id=>xxxxx} missing re...
• [IFMC-637] - ActionView::Template::Error: No route matches {:action=>"edit_idp", :controller=>"manage", :id=>nil, :org_id=>"xxxxx"} missing...
• [IFMC-671] - Delete Link for IdP is inactive

User Stories

• [IFMC-361] - Remove Certificate Access from Left Navigation
• [IFMC-366] - Implement Inline Signing Certificates for Adding Identity Providers
• [IFMC-367] - Implement Inline Signing Certificates for Identity Provider Updates
• [IFMC-408] - Implement New Edit IdP Digital Certificate Section
• [IFMC-409] - Add Warning Message for Certificate Modification in Service Provider
• [IFMC-641] - Refactor Routes -- Resourceful routing for Sa certificate routes
• [IFMC-653] - Resourceful Routes -- refactor base routes for Idps and Idp certificates
• [IFMC-655] - Controller Specs -- creating a new IdP

Improvements

• [IFMC-550] - Refactor Model Specs - Contact person Specs
• [IFMC-551] - Refactor Model Specs - AttrService Specs
• [IFMC-553] - Refactor Model Specs - AttrAuthority Specs
• [IFMC-561] - Refactor Manage Controller - Pull IdP actions into own Controller and rename
• [IFMC-680] - Handle inline certs when adding an Attribute Authority
• [IFMC-688] - Refactor login routes
• [IFMC-692] - refactor manage controller as sa controller

v3.2.4

March 29, 2018

This is a bug fix release. See the list of included bug fixes below.

Bug Fixes

• [IFMC-646] - Attempting to delete an SP returns the error "cannot be deleted, please ask your Site Admin to remove"
• [IFMC-685] - Rake db:setup fails creating development user with blank phone number

v3.2.1

January 30, 2018

This release contains minor enhancements, bug fixes, and internal improvements to the application code:

• Added user input validation for IdP contacts
• Improved error monitoring and alerting
• Restructured parts of the code to assist with development and testing
• Fixed a bug when deleting a contact person from an IdP
• Cleaned up old code and links

v3.2

November 20, 2017

This release introduces production self-service support for the SIRTFI entity attribute. For more information, see REFEDS SIRTFI documentation.

This release combines features from the roadmap for Version 3.1 and 3.2 into a single 3.2 release

• Restyle of the Site Administrator view of IdPs and SPs, including collapsible sections

• Ability for a Site Administrator to add the SIRTFI attribute to an IdP or SP

  • NOTE: Due to a long-standing issue in the Federation Manager, when you add the SIRTFI entity attribute to your metadata, you will not see the change reflected in the metadata preview. You should continue to submit metadata and you will see the entity attribute added to your metadata in production. We will address this issue in a future release.

• IdP and SP Edit pages styled similarly to the view pages

• Improved accessibility for forms

• Breadcrumb improvements

Enhancements

• [IFMC-444] - Implement Selecting a SIRTFI Entity Attribute when Adding an Identity Provider
• [IFMC-445] - Implement Selecting a SIRTFI Entity Attribute when Adding a Service Provider
• [IFMC-446] - Implement the Creation of the Metadata for the SIRTFI Entity Attribute Added by a Site Administrator
• [IFMC-449] - Implement Modifying a SIRTFI Entity Attribute when Updating an Identity Provider
• [IFMC-450] - Implement Modifying a SIRTFI Entity Attribute when Updating a Service Provider
• [IFMC-451] - Implement the Display of the SIRTFI Entity Attribute Section for an Identity Provider
• [IFMC-452] - Implement the Display of the SIRTFI Entity Attribute Section for a Service Provider
• [IFMC-468] - Remove the SIRTFI Entity Attribute from the RA Entity Attribute Options (this feature was intentionally not implemented so that the RA may remove the SIRTFI attribute from an entity if need arises)

Bug Fixes

• [IFMC-527] - Updating an IdP adds empty KeyDescriptor elements

v3.0.2

October 10, 2017

This is a patch release that addresses a bug affecting Registration Authority staff when reviewing metadata updates.

• [IFMC-458] - Add a form for notes update, remove async update

v3.0.1

October 5, 2017

This is a patch release that resolves two bugs affecting Registration Authority staff when updating data in the Federation Manager.

• [IFMC-420] - Unable to add notes to entities in the approval queue

• [IFMC-421] - Text height exceeds height of input control

v3

September 19, 2017

This major release includes site-wide style updates and updates for the Site Admin dashboard.

• Introduce a "Dashboard" for Site Admins to more easily see the status of their metadata submissions, add and modify metadata

• Update twitter bootstrap CSS framework to version 4. This version uses flexbox as the default for row/column styles. Flexbox isn't supported in IE versions < 11. See: https://caniuse.com/#feat=flexbox

• Add responsive CSS for smaller screens: collapse menus, stack panels, etc.

• Update navigation, footer, login/logout styles to better match mock-up padding and structure.

• Add Identity Provider, Service Provider, and Steward Metadata tables to Site Admin dashboard to give quick insight and editing capabilities

• Update auth organization lookup to ignore sub orgs with same name

• Fix identity provider / service provider update bugs causing page to crash after submitting form

Site Administrator Dashboard

v2.1.1

August 15, 2017

This release resolves issues with:

• adding roles for users in organizations other than their own organization
• saving the status of an organization and correctly showing which organizations are active

v2.1

August 8, 2017

This release of the InCommon Federation Manager brings sweeping visual changes to the Site Admin portion of the site, which should provide a drastically improved user experience for InCommon customers. Major improvements include:

• Modern Styling. The entire Site Admin interface has received a visual refresh from top to bottom. In addition to aesthetic improvements, many elements have been rearranged to make it easier to read and digest the information at hand.

• Accessibility. Headings, form fields, form labels, and visual contrast have all been completely redesigned for better operation with screen readers and other accessibility devices.

• Usability. Required fields are now accurately and consistently identified. Several labels have been adjusted to be more accurate and descriptive.

• Bug Fixes. Several exceptions involving cases and unexpected inputs have been resolved. 

v2

May 23, 2017

While most users will not see any difference to the application, please rest assured that the InCommon staff is using the improved user interface which you should start to see with the version 2.1 release. We chose to deploy and adopt the staff-facing UI first - to ensure that we are satisfied with the work before exposing the changes to our customers. Major improvements include:

1. Moved Federation Manager codebase into Internet2’s GitHub Enterprise account to allow flexible developer collaboration and ease automation for deployments

2. Added Twitter Bootstrap semantics to the RA interface in preparation for future design/workflow changes

3. Added Docker containerization utilities in preparation for our own containerized deployment of the application

4. Provisioning changes will enable us to easily populate a staging version of the application with needed user accounts

5. Changes to the application infrastructure to integrate with our cloud-based continuous integration pipeline and staging environment

6. Integrated error messages in staging with Slack so developers and architects can quickly see issues that arise in that environment

7. Dependency updates

8. Performance improvements (elimination of duplicate database calls, etc.)

Earlier Releases

August 8, 2016

The IdP mdui:DisplayName IdPs can be edited. It's editable for existing IdPs or new IdPs after being saved.

November 20, 2015

Site Administrators can choose not to export their metadata to eduGAIN on February 15, 2016:

Similarly, Site Administrators and Delegated Administrators can choose to export their SP metadata to eduGAIN on February 15, 2016 (screen shot not shown here).

Requested Attributes in SP metadata can optionally carry the isRequired="true" XML attribute:

Note: SAML1-formatted Requested Attributes are deprecated (and will be removed from SP metadata the next time the entity descriptor is touched). Only SAML2-formatted Requested Attributes are supported.

Site Administrators can choose to not be shown on discovery interfaces by default.

August 5, 2015

Fixed the bug showing the diff incorrectly on the metadata detail page.

November 11, 2014

Disabled entering the attribute values for the eduPersonScopedAffiliation. The free text input box won't appear even if "eduPersonScopedAffiliation" is selected from the pull down menu for the Requested Attributes.

Before: 

After: 

June 23, 2014

The value of the <md:OrganizationDisplayName> element was copied to the <mdui:DisplayName> element in all IdP entity descriptors that do not contain an <mdui:DisplayName> element. (There were 110 such entity descriptors.) Moving forward, all IdPs in the InCommon Federation will be REQUIRED to have an <mdui:DisplayName> element in metadata. Eventually this field will be editable by site administrators and vetted for reasonableness by the InCommon RA.

June 24, 2013

1. A delegated administrator is notified when their metadata is submitted by a site administrator.
2. A delegated administrator can also be a site administrator (and vice versa).
3. Updated the UI to remind the user that delegated administration is for SP metadata.
4. Repaired broken links to the spaces wiki.
5. Added the ability to remove a certificate with a 1024-bit key from the upload/staging area (there are no 1024-bit keys in metadata).

April 30, 2013

1. SingleLogoutService endpoints can be added to SP metadata (see the SLO Endpoints wiki topic).
2. A security contact can be added to metadata (see the Contacts in Metadata wiki topic).
3. The number of certificates per SP entity is now limited to two (see the Certificate Migration wiki topic).
4. The SHA-1 fingerprint of each certificate is displayed via the web interface.
5. The use XML attribute on key descriptors (see the Key Usage wiki topic) may be manipulated during key migration in SP metadata (see screen shots below).

April 15, 2014

Added "Google Sign In" to the discovery interface for delegated administrators.

(This new feature is experimental and therefore has not been announced beyond this obscure note. If you want to try Google login to the delegated administration interface, drop us a line at admin at incommon dot org.)

April 9, 2013

1. SingleLogoutService endpoints can be added to IdP metadata. 
2. The discovery interface for delegated administrators now uses the Shibboleth embedded DS.
3. A notification email is sent to all site administrators when a site admin approves a metadata update request submitted by a delegated administrator.

January 28, 2013

Certificates in SP metadata no longer need to be uploaded to the system beforehand since they are now managed completely inline. Click the link "Service Provider Metadata Wizard" and then "Add a New Service Provider" to see the new interface.