2026 june

New releases 2026 June

Soffid 4

Console 4.0.64 (from 58)

Pagination has been added to the “Issues” page.

The new feature introduced last month has been updated so that users with the SOFFID_ADMIN role can view the full error trace. New feature

The performance of the “My applications” page has been improved, as in some cases it took too long to calculate the elements to be displayed. A new cache has been added to improve the user experience.

When a generic error occurred, it was not recorded in the log.

The performance of the search bar at the top has been improved, as in some cases it took too long to determine which items should be displayed.

We now have new options for sending logs to SIEM platforms. New feature

On “My Applications” page, if a user had access to an application via his user (no role or group), the application would not appear.

The pages from the “Identity self service” module (“My requests”, “My applications”, etc.) have been added to the Soffid search feature.

There was an error when generating the Soffid menu for some users, depending on their licence settings and associated products.

The Soffid notification engine (blue pop-ups in the top right-hand corner) has been adjusted from 10 to 30 seconds.

From now on, the geolocation service and the use of AI in scripts will be enabled by default if the AM or IRC modules have been activated. Consequently, the “Network Intelligence” page has been removed.. New feature

On the “Detected browsers” page, the “Locked” and “Removed” attributes are now optional.

On the “My account” page, the styles of the “Set password” and “Query password” pop-ups have been updated.

On the “Users” page, the attributes were not displaying correctly in read-only mode.

Syncserver 4.0.39 (from 35)

During the initialisation of an agent, the logs were being written to another log file.

On the “Syncserver monitoring” page, the “Agents task” list did not display the details or errors for the tasks.

The check to verify whether a role existed in a target system was not always carried out on a case-insensitive basis.

Updating the Kerberos settings would sometimes result in data being overwritten.

Federation addon 4.0.36 (from 29)

In the Soffid wizard, the AM option for provisioning OTPs was failing.

Some old IDP sessions were not being deleted; the deletion process has been modified so that they can now be removed.

New parameter for selecting the Soffid Authenticator dataset. New feature

New set of flower images for the Soffid Authenticator

New set of fish images for the Soffid Authenticator

Skip authentication error when the SAML SP asks for specific auth method

Some errors have been resolved where a service provider had no Level of Assurance selected.

Attributes of “transient id” type were not being sent correctly, even though this option was selected in the service provider.

Refresh tokens were not being generated correctly.

If the Kerberos token did not validate correctly, the browser used to display a 500 error; now it is ignored and the browser asks for a username and password.

Add HTTP-Redirect as a valid response method for SAML Logout

Bypass MFA authentication in MicrosoftOnline.

SAP plugin 4.0.3 (from 2)

Do not unlock disabled accounts after setting the password

ESSO 3.5.50-enterprise (from 45) [Soffid 4 & Soffid 3]

Allows caching of shared account passwords, to allow privilege escalation when identity provider is offline.

Due to a Windows Explorer issue that arose in June, menu generation has been disabled.

Soffid 3

Console 3.6.75 (from 74)

When creating an entry point, the ACLs from the parent folder are now inherited. New feature

Syncserver 3.6.49 (from 47)

Run logoff process in standby servers to improve the syncserver performance.

When renaming a deactivated account in Soffid, the synchronisation task was not generated correctly.

Federation addon 3.6.92 (from 90)

The holder group can now be used in the service providers’ UID selection script. New feature

On CAS type service providers, the script for specifying the UID value was not working.

When logging in via the IDP, if the user’s progressive profile was requested and a workflow had been configured, the workflow was not running correctly.

Windows plugin 5.4.32 (from 31)

When the login account was not in the format “domain/account” an internal error occurred.

In the Kerberos login, the domain name identification has been improved so that it can be identified regardless of whether it contains upper-case letters, lower-case letters or accents.

When creating a new user in Active Directory with a temporary password, sometimes, depending on the speed of the sub-tasks, a temporary password could be set as permanent.