- Be more consistent with use of pf.runtime.http.maxRequestBodySize.
- Correct spelling of pf.runtime.http.maxRequestBodySize.
- Update some configuration parameter names for Pingfederate 11.
- Added OAuth2 Dynamic Client Registration configuration
- Adds a few more configuration knobs:
jetty_max_form_content_size
jetty_max_form_keys
oauth_return_scope_always
- Support to install (optionally CA-signed) TLS server cert.
- Bugfix: Attempting to set
pingfederate::oauth_jdbc_access_ddl_cmd
did not work.
- Added OAuth2 Client Auth support for no secret (NONE) and Private Key JWT.
- pf-admin-api renames the input
file.json
tofile.json.fail
on error.
- Added defaults for MS sqlserver
oauth_jdbc_type
. - Added
oauth_jdbc_nexus
which allows installing the jdbc JAR file viaarchive::nexus
andoauth_jdbc_maven
which installs from a maven repository URL viaarchive
.
- Added
oauth_oidc_policy_scope_attr_map
which allows customizing which claims are returned by given scopes
- Change several arrays of hashes to hash of hashes to facilitate hiera yaml key merging:
- social_adapter
- oauth_client
- Support for Facebook cloud identity connector 2.0
- updates to README
- change
oauth_jdbc_augeas
to use dataStores.id instead of parsing jndi from the JSON file. - PF version >= 9: configure CORS via oauth API instead of webdefault.xml
- correct oauth/clients creation to happen after oauth_jdbc configuration change.
- give up on trying to fix random toggling of embedded whitespace in XML comment.
- workaround mistmatch between pingfederate's gid in RPM vs. system which caused augtool to fail on xfer_attrs.
- pf editing puppet-managed XML was changing the "do not edit" comment, causing an unneccessary service restart in some cases.
- pf-admin-api POST -> PUT behavior
- Add oauth client configuration
- Make pf-admin-api default timeout=20
- Add configurable
oauth_oidc_id_userinfo
- Bugfix: deep-merged
saml2_idp_default
not used where it should have been.
- Add configurable
oauth_scope_fail_no_selection
- Make pf.log.dir configurable.