# Releases Soffid 4 # 2025 december ## 2025-12-31 - **REST connector 4.0.3** - Get rid of Wink - **Windows connector 6.0.8** - Update LDAP classes - Fix configuration page - Fixes for version 4 - Use released pwshell - Fix initial configuration ## 2025-12-24 - **Recertification addon 4.0.3** - Fix query error - **Reports addon 4.0.6** - Add anonymous URL for charts - Update webservices addon - Add widgets - **Breakglass addon 2.0.0** - Upgrade for version 4 ## 2025-12-17 - **Consola 4.0.11** - Apply policy task is displayed for systems with automatic account creation - Add prometheus agent - **Syncserver 4.0.13** - Handle tasks created in version 3 - **Admin addon 4.0.3** - Improve scheduled task UI - Add new AI use cases - Fix export/import - Use gemini-2.5-pro for chatting - Update dependencies - Add missing dependency - **Addon bpm 4.0.6** - Fix null pointer when there is no grant # 2026 january ## 2026-01-07 - **Console 4.0.19** - Improve AI interface - Fix food sometimes does not appear - Improve startup performance - Fix multiline messages - Fix SSO Agent name - Improve boot performance - Fix welcome switch - Generate documentation - Fix multiline messages - Fix SSO Agent name - Improve boot performance - Fix welcome switch - Fix plugin parser - Fix compilation errors - Fix AI Frame - Fix upgrade to version 3 - Add missing dependency between services - Mobile CSSs - Fix custom object search - Make agent transition easier - Add to switch to generate documentation on demand - Nullify URL when URL is blank - Fix monitoring remote server status - Change PWA Name - Fix counter generator in multi-tenant setup - Ignore yauaa log - Change sync server icons - Upgrade zkdb - Remove unneeded log - Improve log performance - Reload data when the configuration log has changed - Exclude deleted accounts from effective roles calculation #625 - Improve log reader reponsiveness - Keep history of user-accounts #Soffid/addons/backup/12 - Fix. Restart sync server from plugins page #624 - Do not override log object #623 - Fix agents query by name #622 - Remove tasks when removing an agent #621 - Enable network intelligence on any product #618 - **Syncserver 4.0.16** - Fix reconcile engine for new accounts - Update console version - Fix wrong dao lookup - Add debug information - Remove Yauaa logging - **Federation addon 4.0.13** - Fix CSS attributes #52 - Apply form class - Fix CSS style in idp - Fix legacy ESSO startup - Fix invocation to old handler #50 - Change button to regenerate dynamic open id server key #49 - Fix scopes list #47 - **Admin addon 4.0.4** - New tests - Fix import process #5 - Fix page arrangement - Add timestamp to script log - Fix metadata exporter never ends - **Backup addon 4.0.4** - Fix primary groups are always dashed #11 - **Breakglass addon 2.0.1** - Fix tests - **Google Apps Connector 4.0.0** - Upgrade to version 4 - **Windows Connector 6.0.9** - Add possword policy - Fix account inital reconciliation - **Kebernetes Connector 1.0.1** - Initial version - Fix UI page ## 2026-01-14 - **Console 4.0.20** - Fix button to remove acconts in discovery page #599 - Add crud handler for entry points - Fix: frame is not hidden when embedded frame is recreated #600 - Fix account system cannot be null #597 - Fix method to remove accounts from vault - Fix method to move accounts accross folders - Do not display removed accounts in password vault - Upgrade zkdb - Method to undelete accounts #Soffid/addons/backup/17 - Do not fail when the user cannot remove accounts - Fix deleted user accounts are returned as valid user accounts #629 - Fix progress labels with values less than 0 - Fix ACL field fails when the user cannot query users or groups - **Recover password addon 4.0.6** - Reorder fields - Fix messages #20 ## 2026-01-21 - **Console 4.0.22** - Method to temporary grant/revoke usage of entry points - Do not cache configuration page - Do not display menu when no option is visible #644 - Allow roles to be granted more than once, with different holder groups #642 - Upgrade zkdb - Add account history object - Fix. Change query type in application entry points page #637 - Fix stack overflow #628 - Remove tasks when removing an agent - Glitch in password policies page #617 - Fix glitch in password policies UI #616 - Hide id of user type #615 - Upgrade zkdb to fix #610 - Hide threads field #604 - Fix shell plugin #603 - Fix monitor progress pct value - Do not commit automatically after changing the server name #596 - Raise toasts - Enable BPM for PAM licenses #595 - Use standard view for pam session servers #594 - **Syncserver 4.0.17** - Remove annoying log - Register cancelled tasks - Add exception message to log file - **Shell connector 4.0.1** - Fix removal of grants ## 2026-01-28 - **Console 4.0.23** - Allow access to local network in embedded iframe # 2026 february ## 2026-02-04 - **Console 4.0.29** - Fix tasks are not properly loaded #650 - Fix application link does not work - Set generated password non-editable - Fix entry point is set as "null" - Fix reservation without entry point - Display diagram in a popup window Soffid/addons/bpm#26 - Fix button size inside trees #591 - Fix password policies page #590 - Fix toast position #589 - Fix separator labels #588 - Fix method to reset remote servers - Upgrade zkdb - Upgrade zkdb-api - Initialize virtual attributes in sync server - Fix zoom button in property editor - Sort object mappings #655 - Add sleep method - Add index by user attribute value - Enlarge previous executions table #587 - Fixed counter generation #580 - Remove old WF to reconcile accounts #579 - Upgrade plugins #576 - Fix style of screen to change password #573 - setTimeout function - Fix error during datadiv initialization #571 - Upgrade rest plugin - Upgrade zkdb #569 - Hude agent tabs until the agent iss created #568 - Fix method to disable accounts #547 - Change messages source - Fix button to remove rols #530 - Fix field type in account metadata window - Javascript methods: setTimeout and sleep - Improve columns selector - **Syncserver 4.0.23** - Use service locator in remote proxies - Upgrade zkdb version - Fix null pointer in pre-update-password trigger - Update console version - Enable debugging for com.soffid classes - Add log manager for proxy agents - Improve method to remove accounts - Hide ProxyConnectionFactory logs - Improve loader process - Fix reconciliation without system name - Improve loader performance - Added debug information - Fix console sessions are dropped due to delays - **REST plugin 4.0.4** - Fix login encoding - Use load or select methods - **SQL server plugin 4.0.1** - Version number was missing - **PAM (only in Docker Hub) 1.4.82** - Do not remove static-data directory ## 2026-02-11 - **Console 4.0.33** - Fix group message #392 - Make error message more helpful - Default port for syslog+ssl is 6514 - Include script stack trace - Add webservice classes classifier - Add offline button in sync server monitoring - Fix page to query account's password - Fix method to propagate changes - Improve monitoring page - Enable remove button in single-selection tables - Remove method to compute policies when synchronizing objects - Change installer icon - Fix upgrade of domain values to version 4 - **Syncserver 4.0.25** - Fix authoritative loader engine - Fix tasks to synchronize objects - Improve mechanism to monitor tasks queue - Upgrade console version - Change version number to 4 in application link - Do not throw exception when the group is not allowed - **Federation addon 4.0.14** - Fix for the automatic deletion process of oauth tokens - Fix duplicated attribute - Fix class-loading problem when invoked from the identity provider - Use new "wait" icon #57 - Change style of cancel button #56 - Fix selector color #55 - Fix host tokens tab #Soffid/console/632 - Add option to remove authentication methods #611 - Fix initialization - Fix progressive profile method - Update OTP addon version #536 - Place CAS Settings in a separated section - Remove legacy method to register hosts - Hack for MFA authentication on Azure - New keytab parser - **SCIM addon 4.0.3** - Fix class not found: UserType - **XACML addon 4.0.6** - Fix legacy icons #6 - Properly expose entrypoint in XACML rules ## 2026-02-18 - **Console 4.0.37** - Fix magnifier icon in password vault - Improve method to guess account bound to a service - Fix account lookup - **Syncserver 4.0.27** - Change JVM parameters for Java 17 - Discard service 113/tcp ident - Ignore hosts without significant services - **Reports addon 4.0.7** - Change label in remove button #10 - Remove import button #8 - Remove import button #7 - Fix label for removal button #6 - Fix wrong message after removing report schedule #5 - Fix tab to upload reports #4 ## 2026-02-24 - **Console 4.0.38** - Fix open source publication process - **Syncserver 4.0.28** - Fix null pointer changing service account password - Always one shared thread - Improve logs - Fix reconcile without external ids - Remove unneeded log - Change attribute name from lastPasswordUpdate to lastPasswordSet - Do not CXF spring integration - **Federation addon 4.0.15** - Fix null pointer - Adapt porting of changes from version-3 - Fix porting - Add option to set custom audiences - SSO Behaviour - Add audience field - **Backup addon 4.0.5** - Hide user backup id in queries #6 - Change buttons style - Remove quick search mode - Remove button to select columns #4 - Remove duplicated buttons #3 - Fix excessive inheritance - **PAM (only in Docker Hub) 1.4.84** - SSH Server with user provided passwords - Improve logs - Update browser image - Fix compilation errors - Additional log # 2026 march ## 2026-03-04 - **Console 4.0.39** - Fix compatibility issue with HTML fields - Allow accounts to have the same name as a deleted one - Properly unwrap javascript dates - **Syncserver 4.0.30** - Fix method to retrieve account object - Fix interface is defined more than once - Improve exception detail - Upgrade version of iam-core - Fixes to convert localdate into Calendar or Date ## 2026-03-11 - **Console 4.0.42** - Improve migration process - Debug mail sessions #Soffid/cloud/federation-cloud/10 - Add method to fetch AD domains - **Syncserver 4.0.31** - Upgrade console dependency - Fix dumping log in stdout - **Federation addon 4.0.18** - Refresh configuration when needed - **Recover password addon 4.0.7** - Fix fill-in window style #17 - Fix error checking for null datataype #11 - Fix message generation #10 - Fix button message #9 - **Admin addon 4.0.5** - Fix dependency versions #8 - Use the right interpreter - **BPM addon 4.0.7** - Fix display of risks - Show BPM editor with PAM license - Menu handler in account reservation workflow - Fix editor display - Use correct colors for diagram #26 - Fix reorder fields #24 - Add button to remove attributes from attribute window - **LDAP connector 4.0.1** - Multiple bug fixes - **SAP connector 4.0.1** - Fix checkbox to manage roles - Remove eclipse file - Fix account reconciliation - **Windows connector 6.0.11** - Fix method to rename objects - Fix simple windows agent - Use server method to retrieve active directories - Update CI/CD method ## 2026-03-18 - **Console 4.0.46** - Improve migration process - Debug mail sessions - Add method to fetch AD domains - Change method to publish - Do not fail when a file does not exist - Ignore host not found - Fix error when host does not exist in PAM URL - Remove account attributes (migration issue) - Improve scheduled tasks form - Fix SQL syntax error - Migration issue. Set default dispatcher type - **Federation addon 4.0.19** - Fix double quote - Same challenge for each push authenticator - Accept gateway parameter for CAS login ## 2026-03-25 - **Console 4.0.47** - Fix renaming a role with the same name as a deleted one - Fix upgrade to version 4 - Improve exception message including javascript stack trace - Add password policy metadata for IA generation - Improve SEQUENCE generator. Add a primary key to the table - **Federation addon 4.0.20** - Verify signatures - x-forwarded-for does not contain commas - Propagates loa from third party idp - **Windows plugin 6.0.12** - Fixes a "Connection timeout" problem when trying to fetch accounts list - **PAM (only in Docker Hub) 1.4.86** - Upgrade chrome version - Add gke image - Kiosk mode for http and https - Accept pke keys in base64 - Always apply ips policies - Remove duplicated / - Avoid null pointer # 2026 april ## 2026-04-22 - **Console 4.0.53** - Fix error creating mappings - Prevent null pointer - Fix method to find deleted roles - Fix popup window with system raw attributes - Allow meatadata types page in AM license - Update LDAP & Windows plugin - Cleanup latest link - Fix infinite loop starting a discovery task - Prevent deadlock when changing an account password on the sync server - feat: Add global SAML logout option - Improve remote action log - Fix role deletion - Add entry point metadata - Publish issue service - Add missing class - Make last execution label more clear - Allow port in syslog server parameter - Option to not to store user credentials - Fix when the server is a standby server - Send syslog message size - Display error message when connecting to a sync server - Option to not to store user credentials - Allow manual launcher when passwords are not stored - Fix merge errors - Improve launching accounts without well-known password - Improve log file selector - Fix link creation for documentation - Fix link creation - Fix syncserver is marked as offline - Optimize creation of the search dictionary - **Syncserver 4.0.34** - Debug in BaseAgent - Update jaxb implementation - fix: Pipelines are not fully loaded - Change deployment URL - Publish syncserver on docker hub - Fix error processing duplicated OoB task - Force method to intialize trusted certificates from source - Log certificate failures - Upgrade console - Ignore stand-by servers in servers list - Decode username in remote request - Add jsoncpp dependency for role mining - Fix error in passwordless agents - Fix transaction to change service passwords - Method to ignore standby servers - **Federation addon 4.0.23** - fix: refresh token expiration date can ben null - feat: Options to customize user registration process - Fix null pointer - New method to register users - feat: Registration process can be the initial step of a progressive profile - feat: support the response\_mode=form\_post - feat: Ability to configure refresh token timeout - Usage of expiration token timeout - Method to fetch all esso settings at onec - Fix null pointer - Update expires attribute in refresh token - Fixes fields without datatype - Fix generation of refresh token expiration claim - **Role mining addon 4.0.1** - Fix Null pointer - Application is not required - Update war plugin - New performance engine - Adapt CI/CD - Update repositories - Remove duplicated entry in pom.xml - User C++ image - **SCIM addon 4.0.4** - Fix patch of account object - **LDAP plugin 4.0.4** - Multiple bug fixes - Fix login - Method to configure the LDAPS security level - **PAM (only in Docker Hub) 1.4.88** - New image for http session in mode kiosk and not-kiosk - Option to open a wireguard tunnel - feat: option to maximize screen - fix: Click up windows key after losing focus - Fix keypad subtract key - Fix transfer of file with UTF-8 characters in its name - Fix session is closed after ten seconds