Enrollment Flow Steps "Deny" and "Send Approval Notification" Removed
Registry v3.3.0 consolidates three Enrollment Flow Steps into the Approve step, eliminating the Deny and Send Approval Notification steps. Custom plugins that execute after Deny or Send Approval Notification should be updated to execute after Approve instead.
SSH Key Authenticator Plugin
SSH Key management has moved into an Authenticator Plugin. During the upgrade to v3.3.0, any CO that has SSH Keys attached to a CO Person will have an SSH Key Authenticator automatically instantiated, and existing keys will be attached to that Authenticator. COs that do not have any SSH Keys will need to instantiate an Authenticator before SSH keys can be managed.
SSH Keys are no longer managed directly from the CO Person Canvas, but are now available via the Authenticators link in the sidebar.
Authenticator Plugin Documentation
The guidance for when Authenticator Plugins should trigger provisioning has been corrected.
JobShell and Job Plugins
Registry v3.3.0 introduces Job Plugins, as executed by the Registry Job Shell. All existing deployments will likely need to update their cron configuration, as described in Registry Installation - Cron.