2026 september

New releases 2026 September

Soffid 4

Console 4.0.75 (from 72)

On the Information systems page, it was not possible to delete an information system when there were roles marked as deleted.

A new method has been added to suggest roles that can be assigned to a user. New feature

In the network discovery process, the detection of service accounts now also supports user@domain.com

When setting up a new application via the Soffid wizard, it wasn’t asking for a username and password, so I couldn’t complete the process.

Using the delta changes feature, when retrieving an account, its previous status was not being fetched correctly.

It sometimes displayed an error when checking whether a password was synchronised, even though no such password existed.

On the PAM session recording page, the styling of the video container has been improved.

On the agents page, a generic method has been added to identify the Boolean columns in the tables, in order to enable data filtering.

On the Roles page (and in the Information systems page), it was not possible to delete a role if it contained any outstanding notifications.

The authorisations for users accessing the Soffid web service were not being refreshed; there is now a cache that is updated regularly.

Syncserver 4.0.48 (from 43)

When it was running on IdP across more than one instance, communication issues would sometimes arise.

The deltas generated during synchronisation and reconciliation were not being saved in the database.

Do not search AD accounts in another AD.

The synchronisation of temporary permissions was failing, both when adding and removing them.

To avoid overloading the remote sync servers with too many Java threads, the number has been limited to a maximum of 100 concurrent threads.

Several nullPointerExceptions that did not add any value to the log have been removed.

Audit information has been added when granting temporary permissions from a PAM policy

When an attempt to update a role failed, if it had inherited roles, those roles were updated, leaving the role inconsistent.

To improve communication with remote sync servers, response timeouts have been added for requests.

Federation addon 4.0.41 (from 40)

During user authentication, display an error message in the log file when the idp is not trusted.

A button has been added to the attribute policies page to simulate the attributes generated for a user and a service provider. New feature

Captcha feature has been added to the self-registration page.

If there are several external identity providers, a script has been added to the external identity providers to determine whether they are valid for authentication. New feature

The UID generated by Soffid via the SP script was not being sent to some legacy CAS web services.

Admin addon 4.0.6.1 (from 4.0.6)

The Soffid metrics service has been modified so that it analyses active threads every 10 seconds, rather than waiting for them to finish. New feature

BPM addon 4.0.10 (from 7)

A new method has been added to suggest roles that can be assigned to a user. New feature

Delegation to another user was not working properly, depending on the user's permissions.

When editing a workflow: an annoying error pop-up has been fixed when the XML diagram is still empty.

The process for revoking delegation did not work in multi-tenant environments.

Mining addon 4.0.2 (from 1)

A new method has been added to suggest roles that can be assigned to a user. New feature

LDAP plugin 4.0.8 (from 6)

An error in the log that appeared when starting the LDAP agent when no authentication method had yet been selected has been rectified.

The externalId attribute was not being saved in Soffid.

REST plugin 4.0.8 (from 7)

In requests with a token, the “Content-Type” header was not being sent correctly.

Shell plugin 4.0.6 (from 3)

On Red Hat Linux systems, permissions were not being removed correctly.

Some linux scripts were failing when a parameter had no value.

On Red Hat Linux systems, the temporary assignment of permissions was not working correctly.

Windows plugin 6.0.20 (from 16)

When creating and assigning a password to a new user, if the password-change task is completed more quickly, the user is now created first and then updated by the other task.

When trying to delete a Soffid group that was no longer in the AD, an error message appeared, but no action was required.

From now on, disabled scheduled tasks in Windows will be ignored.

Improvements to the logs.

ESSO 3.5.55-enterprise (from 52) [Soffid 4 & Soffid 3]

The Ubuntu Resolute 26.x version has been added.

The “Incorrect password” event has been added to the Windows event viewer.

Further debugging information has been added to the ESSO Windows service.

Once an account has been used to elevate permissions via the PAM Desktop feature, the system will automatically suggest the same user on the next login.

The version for Ubuntu Xenial 16.x has been removed; from this version onwards, it is no longer available.

PAM (only in Docker Hub) 1.4.91 (from 90)

The Chrome addon has been updated.

Chrome logs are now saved to a file.

Some logs were not being updated correctly.

Accounts without a URL were causing an error.

The socket errors appearing in the log have been ignored.

The Chrome certificates have been updated.

Performance has been improved when downloading and decoding video from a session.

The use of the clipboard in the launcher has been drastically improved. It is now possible to copy and paste various formats in both directions: plain and rich text, as well as images and graphics. New feature

Soffid 3

Console 3.6.77 (from 76)

The removal of a user group was not being validated with the correct authorisation.

The authorisations for users accessing the Soffid web service were not being refreshed; there is now a cache that is updated regularly.

On the Roles page (and in the Information systems page), it was not possible to delete a role if it contained any outstanding notifications.

Federation addon 3.6.96 (from 94)

The “Hide root page” attribute has been added to the IdP to prevent the authentication page from being displayed. New feature

The LOA was being activated even though the status was “UNDEFINED”.

Secret store will accept secrets without account and system.

Oracle plugin 2.2.7 (from 2.2.6.17)

The access management trigger contained a formatting error and was not generated correctly.

OS400 plugin 2.2.9 (from 8)

Occasionally, when the agent lost its connection, it was unable to reconnect.