Releases Soffid 4 2025 december 2025-12-31 REST connector 4.0.3 Get rid of Wink Windows connector 6.0.8 Update LDAP classes Fix configuration page Fixes for version 4 Use released pwshell Fix initial configuration 2025-12-24 Recertification addon 4.0.3 Fix query error Reports addon 4.0.6 Add anonymous URL for charts Update webservices addon Add widgets Breakglass addon 2.0.0 Upgrade for version 4 2025-12-17 Consola 4.0.11 Apply policy task is displayed for systems with automatic account creation Add prometheus agent Syncserver 4.0.13 Handle tasks created in version 3 Admin addon 4.0.3 Improve scheduled task UI Add new AI use cases Fix export/import Use gemini-2.5-pro for chatting Update dependencies Add missing dependency Addon bpm 4.0.6 Fix null pointer when there is no grant 2026 january 2026-01-07 Console 4.0.19 Improve AI interface Fix food sometimes does not appear Improve startup performance Fix multiline messages Fix SSO Agent name Improve boot performance Fix welcome switch Generate documentation Fix multiline messages Fix SSO Agent name Improve boot performance Fix welcome switch Fix plugin parser Fix compilation errors Fix AI Frame Fix upgrade to version 3 Add missing dependency between services Mobile CSSs Fix custom object search Make agent transition easier Add to switch to generate documentation on demand Nullify URL when URL is blank Fix monitoring remote server status Change PWA Name Fix counter generator in multi-tenant setup Ignore yauaa log Change sync server icons Upgrade zkdb Remove unneeded log Improve log performance Reload data when the configuration log has changed Exclude deleted accounts from effective roles calculation #625 Improve log reader reponsiveness Keep history of user-accounts #Soffid/addons/backup/12 Fix. Restart sync server from plugins page #624 Do not override log object #623 Fix agents query by name #622 Remove tasks when removing an agent #621 Enable network intelligence on any product #618 Syncserver 4.0.16 Fix reconcile engine for new accounts Update console version Fix wrong dao lookup Add debug information Remove Yauaa logging Federation addon 4.0.13 Fix CSS attributes #52 Apply form class Fix CSS style in idp Fix legacy ESSO startup Fix invocation to old handler #50 Change button to regenerate dynamic open id server key #49 Fix scopes list #47 Admin addon 4.0.4 New tests Fix import process #5 Fix page arrangement Add timestamp to script log Fix metadata exporter never ends Backup addon 4.0.4 Fix primary groups are always dashed #11 Breakglass addon 2.0.1 Fix tests Google Apps Connector 4.0.0 Upgrade to version 4 Windows Connector 6.0.9 Add possword policy Fix account inital reconciliation Kebernetes Connector 1.0.1 Initial version Fix UI page 2026-01-14 Console 4.0.20 Fix button to remove acconts in discovery page #599 Add crud handler for entry points Fix: frame is not hidden when embedded frame is recreated #600 Fix account system cannot be null #597 Fix method to remove accounts from vault Fix method to move accounts accross folders Do not display removed accounts in password vault Upgrade zkdb Method to undelete accounts #Soffid/addons/backup/17 Do not fail when the user cannot remove accounts Fix deleted user accounts are returned as valid user accounts #629 Fix progress labels with values less than 0 Fix ACL field fails when the user cannot query users or groups Recover password addon 4.0.6 Reorder fields Fix messages #20 2026-01-21 Console 4.0.22 Method to temporary grant/revoke usage of entry points Do not cache configuration page Do not display menu when no option is visible #644 Allow roles to be granted more than once, with different holder groups #642 Upgrade zkdb Add account history object Fix. Change query type in application entry points page #637 Fix stack overflow #628 Remove tasks when removing an agent Glitch in password policies page #617 Fix glitch in password policies UI #616 Hide id of user type #615 Upgrade zkdb to fix #610 Hide threads field #604 Fix shell plugin #603 Fix monitor progress pct value Do not commit automatically after changing the server name #596 Raise toasts Enable BPM for PAM licenses #595 Use standard view for pam session servers #594 Syncserver 4.0.17 Remove annoying log Register cancelled tasks Add exception message to log file Shell connector 4.0.1 Fix removal of grants 2026-01-28 Console 4.0.23 Allow access to local network in embedded iframe   2026 february 2026-02-04 Console 4.0.29 Fix tasks are not properly loaded #650 Fix application link does not work Set generated password non-editable Fix entry point is set as "null" Fix reservation without entry point Display diagram in a popup window Soffid/addons/bpm#26 Fix button size inside trees #591 Fix password policies page #590 Fix toast position #589 Fix separator labels #588 Fix method to reset remote servers Upgrade zkdb Upgrade zkdb-api Initialize virtual attributes in sync server Fix zoom button in property editor Sort object mappings #655 Add sleep method Add index by user attribute value Enlarge previous executions table #587 Fixed counter generation #580 Remove old WF to reconcile accounts #579 Upgrade plugins #576 Fix style of screen to change password #573 setTimeout function Fix error during datadiv initialization #571 Upgrade rest plugin Upgrade zkdb #569 Hude agent tabs until the agent iss created #568 Fix method to disable accounts #547 Change messages source Fix button to remove rols #530 Fix field type in account metadata window Javascript methods: setTimeout and sleep Improve columns selector Syncserver 4.0.23 Use service locator in remote proxies Upgrade zkdb version Fix null pointer in pre-update-password trigger Update console version Enable debugging for com.soffid classes Add log manager for proxy agents Improve method to remove accounts Hide ProxyConnectionFactory logs Improve loader process Fix reconciliation without system name Improve loader performance Added debug information Fix console sessions are dropped due to delays REST plugin 4.0.4 Fix login encoding Use load or select methods SQL server plugin 4.0.1 Version number was missing PAM (only in Docker Hub) 1.4.82 Do not remove static-data directory 2026-02-11 Console 4.0.33 Fix group message #392 Make error message more helpful Default port for syslog+ssl is 6514 Include script stack trace Add webservice classes classifier Add offline button in sync server monitoring Fix page to query account's password Fix method to propagate changes Improve monitoring page Enable remove button in single-selection tables Remove method to compute policies when synchronizing objects Change installer icon Fix upgrade of domain values to version 4 Syncserver 4.0.25 Fix authoritative loader engine Fix tasks to synchronize objects Improve mechanism to monitor tasks queue Upgrade console version Change version number to 4 in application link Do not throw exception when the group is not allowed Federation addon 4.0.14 Fix for the automatic deletion process of oauth tokens Fix duplicated attribute Fix class-loading problem when invoked from the identity provider Use new "wait" icon #57 Change style of cancel button #56 Fix selector color #55 Fix host tokens tab #Soffid/console/632 Add option to remove authentication methods #611 Fix initialization Fix progressive profile method Update OTP addon version #536 Place CAS Settings in a separated section Remove legacy method to register hosts Hack for MFA authentication on Azure New keytab parser SCIM addon 4.0.3 Fix class not found: UserType XACML addon 4.0.6 Fix legacy icons #6 Properly expose entrypoint in XACML rules 2026-02-18 Console 4.0.37 Fix magnifier icon in password vault Improve method to guess account bound to a service Fix account lookup Syncserver 4.0.27 Change JVM parameters for Java 17 Discard service 113/tcp ident Ignore hosts without significant services Reports addon 4.0.7 Change label in remove button #10 Remove import button #8 Remove import button #7 Fix label for removal button #6 Fix wrong message after removing report schedule #5 Fix tab to upload reports #4 2026-02-24 Console 4.0.38 Fix open source publication process Syncserver 4.0.28 Fix null pointer changing service account password Always one shared thread Improve logs Fix reconcile without external ids Remove unneeded log Change attribute name from lastPasswordUpdate to lastPasswordSet Do not CXF spring integration Federation addon 4.0.15 Fix null pointer Adapt porting of changes from version-3 Fix porting Add option to set custom audiences SSO Behaviour Add audience field Backup addon 4.0.5 Hide user backup id in queries #6 Change buttons style Remove quick search mode Remove button to select columns #4 Remove duplicated buttons #3 Fix excessive inheritance PAM (only in Docker Hub) 1.4.84 SSH Server with user provided passwords Improve logs Update browser image Fix compilation errors Additional log 2026 march 2026-03-04 Console 4.0.39 Fix compatibility issue with HTML fields Allow accounts to have the same name as a deleted one Properly unwrap javascript dates Syncserver 4.0.30 Fix method to retrieve account object Fix interface is defined more than once Improve exception detail Upgrade version of iam-core Fixes to convert localdate into Calendar or Date 2026-03-11 Console 4.0.42 Improve migration process Debug mail sessions #Soffid/cloud/federation-cloud/10 Add method to fetch AD domains Syncserver 4.0.31 Upgrade console dependency Fix dumping log in stdout Federation addon 4.0.18 Refresh configuration when needed Recover password addon 4.0.7 Fix fill-in window style #17 Fix error checking for null datataype #11 Fix message generation #10 Fix button message #9 Admin addon 4.0.5 Fix dependency versions #8 Use the right interpreter BPM addon 4.0.7 Fix display of risks Show BPM editor with PAM license Menu handler in account reservation workflow Fix editor display Use correct colors for diagram #26 Fix reorder fields #24 Add button to remove attributes from attribute window LDAP connector 4.0.1 Multiple bug fixes SAP connector 4.0.1 Fix checkbox to manage roles Remove eclipse file Fix account reconciliation Windows connector 6.0.11 Fix method to rename objects Fix simple windows agent Use server method to retrieve active directories Update CI/CD method 2026-03-18 Console 4.0.46 Improve migration process Debug mail sessions Add method to fetch AD domains Change method to publish Do not fail when a file does not exist Ignore host not found Fix error when host does not exist in PAM URL Remove account attributes (migration issue) Improve scheduled tasks form Fix SQL syntax error Migration issue. Set default dispatcher type Federation addon 4.0.19 Fix double quote Same challenge for each push authenticator Accept gateway parameter for CAS login 2026-03-25 Console 4.0.47 Fix renaming a role with the same name as a deleted one Fix upgrade to version 4 Improve exception message including javascript stack trace Add password policy metadata for IA generation Improve SEQUENCE generator. Add a primary key to the table Federation addon 4.0.20 Verify signatures x-forwarded-for does not contain commas Propagates loa from third party idp Windows plugin 6.0.12 Fixes a "Connection timeout" problem when trying to fetch accounts list PAM (only in Docker Hub) 1.4.86 Upgrade chrome version Add gke image Kiosk mode for http and https Accept pke keys in base64 Always apply ips policies Remove duplicated / Avoid null pointer     2026 april 2026-04-22 Console 4.0.53 Fix error creating mappings Prevent null pointer Fix method to find deleted roles Fix popup window with system raw attributes Allow meatadata types page in AM license Update LDAP & Windows plugin Cleanup latest link Fix infinite loop starting a discovery task Prevent deadlock when changing an account password on the sync server feat: Add global SAML logout option Improve remote action log Fix role deletion Add entry point metadata Publish issue service Add missing class Make last execution label more clear Allow port in syslog server parameter Option to not to store user credentials Fix when the server is a standby server Send syslog message size Display error message when connecting to a sync server Option to not to store user credentials Allow manual launcher when passwords are not stored Fix merge errors Improve launching accounts without well-known password Improve log file selector Fix link creation for documentation Fix link creation Fix syncserver is marked as offline Optimize creation of the search dictionary Syncserver 4.0.34 Debug in BaseAgent Update jaxb implementation fix: Pipelines are not fully loaded Change deployment URL Publish syncserver on docker hub Fix error processing duplicated OoB task Force method to intialize trusted certificates from source Log certificate failures Upgrade console Ignore stand-by servers in servers list Decode username in remote request Add jsoncpp dependency for role mining Fix error in passwordless agents Fix transaction to change service passwords Method to ignore standby servers Federation addon 4.0.23 fix: refresh token expiration date can ben null feat: Options to customize user registration process Fix null pointer New method to register users feat: Registration process can be the initial step of a progressive profile feat: support the response_mode=form_post feat: Ability to configure refresh token timeout Usage of expiration token timeout Method to fetch all esso settings at onec Fix null pointer Update expires attribute in refresh token Fixes fields without datatype Fix generation of refresh token expiration claim Role mining addon 4.0.1 Fix Null pointer Application is not required Update war plugin New performance engine Adapt CI/CD Update repositories Remove duplicated entry in pom.xml User C++ image SCIM addon 4.0.4 Fix patch of account object LDAP plugin 4.0.4 Multiple bug fixes Fix login Method to configure the LDAPS security level PAM (only in Docker Hub) 1.4.88 New image for http session in mode kiosk and not-kiosk Option to open a wireguard tunnel feat: option to maximize screen fix: Click up windows key after losing focus Fix keypad subtract key Fix transfer of file with UTF-8 characters in its name Fix session is closed after ten seconds 2026 may New releases 2026 May Welcome everyone. We are pleased to inform you that Soffid new releases are now available and we have updated our download page with new versions of the Soffid components. Please note that in Soffid 4 , you will only find the Console and Syncserver on our enterprise download page . Starting with this version 4, Addons and Connectors must be downloaded directly from the internal marketplace on the Licence and plugins page. For more information, please consult our online documentation . Below is the list of the components and changes made since the previous version was published. Soffid 4 Console 4.0.58 (from 54) Searches were not working on the custom object pages, nor via the SCIM web service. The database update service from version 3 to version 4 was not working for the SQL Server database. The database update service from version 3 to version 4 failed when an agent did not have the Usage attribute defined. When the Console was configured as the service provider for Soffid’s identity provider, it generated unused SAML paths in the metadata.xml file. One of the indexes in the account table had an incorrect name (it was not being applied). Some indexes in the database were not being created because their names exceeded the permitted length. Users of the SCIM web service must now have the new “webservice:user” authorisation. New feature An error that had already been handled in the code, indicating that a host searched for by IP address could not be found, has been ignored in the log. Users who do not have the SOFFID_ADMIN role will no longer see the details of errors in the Console; instead, an identifier will be displayed so that administrators can look it up in the log. New feature The SCIM web service was displaying folders to which the SCIM user did not have access. New headers have been added to improve the security of web requests. The console log has been shortened when the syncserver is not active. Syncserver 4.0.35 (from 34) New feature to clear the account password when the account is disabled and set the last password when the account is enabled again. New feature Federation addon 4.0.29 (from 24) New feature to set a custom list of holder groups for each service provider. New feature When a user attempted to log in via ESSO and the login failed, if the “esso-failed-login” issue type was enabled, the issue would not be created and would not be logged. In the Identity Provider configuration, in the attribute “TLS PublicKey”, the “Upload PKCS12 file” button did not move forward to the PIN step. The PAM session would not start if the account belonged to the identity provider Hide certain OIDC attributes in an OpenID POST response, as they were not part of the standard. When a user was created in Soffid via self-provisioning by the Identity Provider, an error was thrown if the user had no additional attributes. When a user connected to the Identity Provider via ESSO, if the machine had an IP address that could not be resolved by the DNS resolver, an error occurred. For users who use ESSO and permission elevation, shared accounts are now cached on the Windows machine to speed up access and prevent service disruption when there is no internet connection. The Kerberos login has been modified because it sometimes fails. The service providers' impersonation functionality failed because a library update was missing. New headers have been added to improve the security of web requests. LDAP plugin 4.0.5 (from 4) A maximum number of results has been added (it is a very high value). REST plugin 4.0.6 (from 4) The “Simple token” authentication option has been migrated to Soffid 4 New libraries have been added to properly support non-standard HTTP methods such as PATCH. SAP plugin 4.0.2 (from 1) Changes to support to set the domain password when enabling an account. New feature Shell plugin 4.0.2 (from 1) The “Test” button in the “Attribute mappings” for this agent did not work in Soffid 4 Deleting files caused an infinite loop in Soffid 4, resulting in an error On the Exchange agent's “Basics” page, the “Exchange version” attribute had a syntax error, and an error message was displayed when attempting to save. Windows plugin 6.0.14 (from 12) During Kerberos authentication, the Active Directory agent could not find the account, even though it existed. When Active Directory had child domains, the agent could not find the accounts. The process for connecting to Active Directory via HTTP has been updated because it was sometimes causing errors. CSV plugin 4.0.0 (new) Migration to Soffid 4 of the agent “Customizable CSV file”. New feature PAM (only in Docker Hub) 1.4.90 (from 88) The handling of clicks in HTTP browsing has been improved. Web sessions now operate using the TZ (GMT) time zone. The launch of Google Chrome-style HTTP sessions was failing because variables containing hyphens were not being handled correctly. During a PAM session, if the network connection was lost, the PAM session would terminate; the reconnection method has been improved to minimise this behaviour. The rendering engine has been switched to XWindows because it produces more reliable results and offers better performance. Security fix: the ORC pattern used for screen text reading did not have sufficiently restrictive permissions. When a PAM session was started in kiosk mode, some environments such as AKS did not allow the use of internal sandboxes; now, their use is automatically configured depending on whether or not they are permitted. In RDP-type PAM sessions, if a connection cannot be established, it will retry by forcing TLS authentication. In PAM sessions, if you switched applications very quickly after using the ‘Get clipboard’ option, an error would occur or an incorrect value would be retrieved. Soffid 3 Console 3.6.74 (from 73) Security error: permission elevation in Windows connections allowed more permissions to be granted than the user actually had. Allow quick searches using file type attributes (searches are activated in the metadata page) or within the workflow searches. Syncserver 3.6.47 (from 46) Error when attempting to configure a sync server that was already configured. When renaming a user account that was disabled, this change was not being synchronised. The service exposed for the ESSO module has been modified to sort devices by their identifier. Federation addon 3.6.90 (from 89) When an external identity provider returned the “Level of authorisation” attribute, the attribute calculator did not record the correct value in Soffid. BPM addon 3.2.5 (from 4) Some texts have been translated. LDAP plugin 2.8.6 (from 5) The pagination configured in the LDAP agent’s “Query page size” attribute was not being applied. Thank you very much for your time, and see you next month! Best regards, The Soffid Team ©Copyright Soffid 2025 This email was sent to << Test Email Address >> why did I get this? unsubscribe from this list update subscription preferences SOFFID · Carretera De Valldemossa Km 7 · PALMA DE MALLORCA, Illes Balears 07010 · Spain 2026 june New releases 2026 June Welcome everyone. We are pleased to inform you that Soffid new releases are now available and we have updated our download page with new versions of the Soffid components. Please note that in Soffid 4 , you will only find the Console and Syncserver on our enterprise download page . Starting with this version 4, Addons and Connectors must be downloaded directly from the internal marketplace on the Licence and plugins page. For more information, please consult our online documentation . Below is the list of the components and changes made since the previous version was published. Soffid 4 Console 4.0.64 (from 58) Pagination has been added to the “Issues” page. The new feature introduced last month has been updated so that users with the SOFFID_ADMIN role can view the full error trace. New feature The performance of the “My applications” page has been improved, as in some cases it took too long to calculate the elements to be displayed. A new cache has been added to improve the user experience. When a generic error occurred, it was not recorded in the log. The performance of the search bar at the top has been improved, as in some cases it took too long to determine which items should be displayed. We now have new options for sending logs to SIEM platforms. New feature On “My Applications” page, if a user had access to an application via his user (no role or group), the application would not appear. The pages from the “Identity self service” module (“My requests”, “My applications”, etc.) have been added to the Soffid search feature. There was an error when generating the Soffid menu for some users, depending on their licence settings and associated products. The Soffid notification engine (blue pop-ups in the top right-hand corner) has been adjusted from 10 to 30 seconds. From now on, the geolocation service and the use of AI in scripts will be enabled by default if the AM or IRC modules have been activated. Consequently, the “Network Intelligence” page has been removed.. New feature On the “Detected browsers” page, the “Locked” and “Removed” attributes are now optional. On the “My account” page, the styles of the “Set password” and “Query password” pop-ups have been updated. On the “Users” page, the attributes were not displaying correctly in read-only mode. Syncserver 4.0.39 (from 35) During the initialisation of an agent, the logs were being written to another log file. On the “Syncserver monitoring” page, the “Agents task” list did not display the details or errors for the tasks. The check to verify whether a role existed in a target system was not always carried out on a case-insensitive basis. Updating the Kerberos settings would sometimes result in data being overwritten. Federation addon 4.0.36 (from 29) In the Soffid wizard, the AM option for provisioning OTPs was failing. Some old IDP sessions were not being deleted; the deletion process has been modified so that they can now be removed. New parameter for selecting the Soffid Authenticator dataset. New feature New set of flower images for the Soffid Authenticator New set of fish images for the Soffid Authenticator Skip authentication error when the SAML SP asks for specific auth method Some errors have been resolved where a service provider had no Level of Assurance selected. Attributes of “transient id” type were not being sent correctly, even though this option was selected in the service provider. Refresh tokens were not being generated correctly. If the Kerberos token did not validate correctly, the browser used to display a 500 error; now it is ignored and the browser asks for a username and password. Add HTTP-Redirect as a valid response method for SAML Logout Bypass MFA authentication in MicrosoftOnline. SAP plugin 4.0.3 (from 2) Do not unlock disabled accounts after setting the password ESSO 3.5.50-enterprise (from 45) [Soffid 4 & Soffid 3] Allows caching of shared account passwords, to allow privilege escalation when identity provider is offline. Due to a Windows Explorer issue that arose in June, menu generation has been disabled. Soffid 3 Console 3.6.75 (from 74) When creating an entry point, the ACLs from the parent folder are now inherited. New feature Syncserver 3.6.49 (from 47) Run logoff process in standby servers to improve the syncserver performance. When renaming a deactivated account in Soffid, the synchronisation task was not generated correctly. Federation addon 3.6.92 (from 90) The holder group can now be used in the service providers’ UID selection script. New feature On CAS type service providers, the script for specifying the UID value was not working. When logging in via the IDP, if the user’s progressive profile was requested and a workflow had been configured, the workflow was not running correctly. Windows plugin 5.4.32 (from 31) When the login account was not in the format “domain/account” an internal error occurred. In the Kerberos login, the domain name identification has been improved so that it can be identified regardless of whether it contains upper-case letters, lower-case letters or accents. When creating a new user in Active Directory with a temporary password, sometimes, depending on the speed of the sub-tasks, a temporary password could be set as permanent. Thank you very much for your time, and see you next month! Best regards, The Soffid Team ©Copyright Soffid 2025 This email was sent to << Test Email Address >> why did I get this? unsubscribe from this list update subscription preferences SOFFID · Carretera De Valldemossa Km 7 · PALMA DE MALLORCA, Illes Balears 07010 · Spain