Release notes - Publisher

Release date: 2 December 2024

Notable changes:

• [CSP-5141/5149] - enhanced the buttons and lists for applications and connections

Release date: 15 October 2024

Notable changes:

• [CSP-5016] - Support for PKCE added to Keystone
• [CSP-5184] - Make service more fault tolerant to IdP metadata not being available
• [CSP-4097, 5063] - Improvements to SP account management

Release date: 2 October 2024

Notable changes:

• [CSP-5177] - The recent activity tab in the dashboard did not display data
• [CSP-5155] - Entities were not being retrieved from cache

Release date: 4 September 2024

Notable changes:

• [CSP-4885] - Removed redundant Matomo and Google Analytics code from the SP dashboard
• [CSP-5157] - Some domains were unable to download reports
• [CSP-5148] - Selecting a report date range longer than a year would sometimes omit data 

Release date: 14 August 2024

Notable changes:

• [CSP-4744] - Added ability to specify a display name for 1:1 connections
• [CSP-4937/38] -  UI updates to 1:1 connections

Release date: 8 August 2024

Notable changes:

• [CSP-4841] - Default discovery method for new Keystone apps now set to Wayfinder
• [CSP-4840] - 1:1 connections (additional identity providers) now defaults to on for new connections

Release date: 6 August 2024

Notable changes:

• [CSP-4626] - Add validation for UUIDs
• [CSP-4773] - Improve formatting of reports
• [CSP-4983] - Reporting highlights added to dashboard

Release date: 31 July 2024

Notable changes:

• [CSP-4956] - New ruleset added to Keystone to pass all received SAML attributes as claims with the same name

Release date: 25 July 2024

Notable changes:

• [CSP-5087] - The connections dropdown under Application > Configuration is now ordered
• [CSP-5085] - Rectify issues with the confirm contact details pop-up

Release date: 9 July 2024

Notable changes:

• [CSP-5000] - was possible to create duplicate applications if you clicked the save button twice, really fast

Release date: 5 June 2024

Notable changes:

• [CSP-5021] - Add SP report viewer role to admin page
• [CSP-4803 / 4682] - Release new report viewer role to the SP dashboard allowing a non-technical user to safely access the reporting functions but not the configuration options.

Release date: 9 May 2024

Notable changes:

• [CSP-4887] - Update to the menu navigation - Accounts now on the side.
• [CSP-4912] - Update to the display of admin accounts ahead of some planned improvements

Release date: 9 April 2024

Notable changes:

• [CSP-4993] - Enhanced reporting options now available to external apps (e.g. Shibboleth). See: Reporting

Release date: 29 January 2024

Notable changes:

• [CSP-4650] - Additional validation on redirector domains

Release date: 22 January 2024

Notable changes:

• [CSP-4405] - Metadata updates for external apps would sometimes not persist

Release date: 1 November 2023

Notable changes:

• [CSP-4641] - uploading invalid metadata would log the wrong error  

Release date: 4 October 2023

New functionality:

• New reporting options are now available to Keystone customers including usage statistics from other federations and 1:1 connections. See: Reporting 

Release date: 31 August 2023

Notable changes:

• [CSP-4684] - It was possible to upload SP metadata with an empty ServiceDescription element 

Release date: 16 August 2023

Notable changes:

• [WAYF-672] - Embedded Wayfinder was slow when local storage was unavailable
• [CSP-4556] - Add a file-size check to the additional identity provider option
• [CSP-4576] - The activity stream would show a rejected publication request immediately upon submission

Release date: 26 July 2023

Notable changes:

• [CSP-4657] - the log a query button in the dashboard didn't work.

Release date: 13 July 2023

Notable changes:

• [CSP-4602] - overlong entityIDs would stop the external app addition flow without an error message.

Release date: 29 June 2023

Notable changes:

• [WAYF-672] - embedded Wayfinder loaded slowly when users blocked 3rd party cookies.

Release date: 6 June 2023

Notable changes:

• [CSP-4359] - Display entityID of external apps (e.g. Shibboleth) in the applications list.

Release date: 12 April 2023

Notable changes:

• [CSP-3811] - Keystone metadata now available via URL. See: Connections   

Release date: 27 February 2023

Notable changes:

• [CSP-3979] - Keystone apps' metadata now lists the OpenAthens service desk as the technical contact   
• [CSP-4452] - Application restrictions added to the audit stream

Release date: 23 February 2023

Notable changes:

• [CSP-4430] - Improvements to the required / optional attribute specification tab   
• [CSP-4437] - Improvements to the subscription management specification tab

Release date: 2 February 2023

Notable changes:

• [CSP-4381] - 1-2-1 connections to Azure failed at metadata validation   
• [CSP-4362] - Size limits on images were not properly enforced
• [CSP-4446] - App restrictions were not enforced as expected

Release date: 5 December 2022

Notable changes:

• [CSP-3668] - Update the embedded Wayfinder script to work when referrer header was not sent   
• [CSP-4356] - Client secret now obscured in the SP dashboard (extra step to show) 

Release date: 8 November 2022

Notable changes:

• [CSP-4207] - Uploading metadata for an external application would not honour the <md:Organization> block 

Release date: 15 August 2022

Notable changes:

• [CSP-3678, 4277] - 1-2-1 connection metadata under additional identity providers can now be viewed and updated 

Release date: 2 August 2022

Notable changes:

• [CSP-4126] - When adding privacy policies, the UI now default to English instead of Arabic in the language selector 

Release date: 11 April 2022

Notable changes:

• [CSP-4002/8] - Pre-live resources now appear in a test federation

Release date: 10 August 2021

Notable changes:

• [CSP-3982] - SIgnatureMethod and DigestMethod now included in Keystone metadata
• [CSP-4026] - Keystone now automatically handles pairwise IDs when sent

Release date: 1 June 2021

Notable changes:

• [CSP-4007] - Keystone now automatically passes an IdPs errorURL attribute if present. See:  The errorURL attribute and what it is for

Release date: 9 February 2021

New functionality:

• [ACT-91,93,94,153] - You can now add support contacts and specify details about how subscribers can ask for SAML access to be enabled   See: Edit an application 

Release date: 17 December 2020

New functionality:

• [ACT-65] - Attribute Consuming Services and privacy policies can now be included in metadata for both Keystone and external applications to help libraries configure release policies without having to contact your support team. See: Edit an application 

Notable bug fixes:

• [CSP-3932] - Escape key did not work in pop-up modals after clicking inside modal
• [CSP-3945] - Restricting access based on user roles in the Dashboard could break some OIDC applications

Release date: 7 October 2020

Notable bug fixes and changes:

• [CSP-1748] - Logo validation was reporting the wrong size
• [CSP-3170] - User restrictions extended to OIDC apps 

Release date: 19 July 2020

Notable bug fixes and changes:

• An initial (beta) release of the reporting function is now available - see: Reporting

Release date: 24 June 2020

Notable bug fixes and changes:

• [WAYF-393] - entity categories can now be set to appear in metadata via the connections tab (Keystone apps)
• [CSP-3850] - fixed broken documentation link 
• [CSP-3903] - where multiple applications share a connection, you can now choose which provides details to the metadata. See Using a connection for multiple OIDC applications
• [CSP-3801] - improvements to how changes to links are audited 

Release date: 28 May 2020

Notable bug fixes and changes:

• [MDP-8569] - Metadata now includes names of sub-organisations where they have distinct scope values. See: OpenAthens federation metadata extensions

1 April 2020

Minor changes and bugfixes (publisher dashboard)

• [CSP-3782] - Improvements to certificate display

10 January 2020

Minor changes and bugfixes (publisher dashboard)

• [CSP-3792] - updated validation on the embedded Wayfinder domain field to accept the new, longer, top level domains such as .network

18 December 2019

Minor changes and bugfixes (publisher dashboard)

• [CSP-2181] - The ACS index value from external apps' metadata was not honoured
• [CSP-3680] - Error handling within modals could lead to changes being committed by the cancel button

16 December 2019

Minor changes and bugfixes (Wayfinder)

• [WAYF-220] - Hidden organisations made visible by debug mode are now marked as such
• [WAYF-256] - Searches including certain non-latin characters could cause an error
• [WAYF-258] - Searched containing too many characters could cause an error
• [WAYF-351] - Searching via email address was not working for some SP entities

25 September 2019

Minor changes (Wayfinder)

• [WAYF-179] - The order of remembered organisations could be inconsistent in certain circumstances
• [WAYF-250] - The embeddable version of Wayfinder did not display long organisation names well

7 August 2019

Minor changes

• [CSP-3542] - The accounts menu item and the signout button have moved: dashboard accounts are now accessed via the cog, and sign out is via the user's name. Both in the top right. 

10 July 2019

Significant changes

• [CSP-3592] - Certificate thumbprints are now also available as a SHA-256 hash
• [CSP-3594] - Added a preset rule to output targeted ID in the format idpEntityId!spEntityId!targetedId to ease migration to Keystone from older technologies

1 July 2019

Significant changes

• Support for OpenAthens SP ended
• OpenAthens SP will stop working on or around 29 May 2020 - See OpenAthens SP end of life notice

14 March 2019

Significant changes

• OpenAthens Keystone users can now have the option to embed Wayfinder in their sites