EngineBlock 4.7.2

Push Metadata improvements.

• Downgrade notice about multivalued attributes to info
• Remove libxml_disable_entity_loader() call #180
• error while pushing metadata #212
• Metadata Push: DisplayName missing #223
• Added metadata push test client on /api/connections/test.
• PEP error display improvements.
• Minor language improvements.

EngineBlock 4.6.4

Push Metadata improvements.

• Downgrade notice about multivalued attributes to info
• Remove libxml_disable_entity_loader() call #180
• error while pushing metadata #212
• Metadata Push: DisplayName missing #223
• Added metadata push test client on /api/connections/test.

EngineBlock 4.7.1

Bring back VO support, executed before policy enforcement.

EngineBlock 4.7.0

EngineBlock is now a eXtensible Access Control Markup Language (XACML) Policy Enforcement Point (PEP).
If the metadata for a Service Provider specifies that a Policy Decision Point (PDP) should be consulted
then EB will send an Access Request to the PDP and enforce the result.

This release also completely removes Virtual Organization support.
If a /vo: part is passed in the URL EB will halt with an error.

Notable issues resolved with this release:

• Prod IdP allowed to login to Test SP when using a trusted_gateway #200
• Deprecate urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified #96
• SR changes not reflected in metadata #53
• Use of IdP-specific endpoint by non-connected SPs #94
• Error pages show feedback information (timestamp, SP, IdP, etc) again.
• The Functional Tests of OpenConext Engine Test Stand now work again.
• Removed obsolete asset pipeline

EngineBlock 4.6.3

• Repair delete button in previous IdP list.

EngineBlock 4.6.2

• Really fix: In Firefox, ensure clicking "Press enter to select" area leads to IdP #196
• Bugfix for Tuple (entity_id,type) should be UNIQUE in sso_provider_roles #160.
• Improved Dutch text for IdP error
• Improved logging: Downgrade removing EB from candidate IdPs list to info (not a significant event)
• Improved image alt tags

EngineBlock 4.5.5

Bugfix release for push metadata.

• Bugfix for Tuple (entity_id,type) should be UNIQUE in sso_provider_roles #160.

EngineBlock 4.6.1

Improvements to new Material UI.

• On the WAYF, search in IdP keywords in a case-insensitive manner.
• Open TOS in new browser window as to not disturb WAYF.
• Remove not so useful 'go back' from waiting page.
• Ensure clicking "Press enter to select" location forwards to IdP.
• Remove old-style logging in Material theme footer.
• When removing a previous-choice IdP, move it to the regular IdP list.
• Center consent approve and reject buttons on mobile devices.
• Remove excessive DOM reading and writing during every mouse move.

EngineBlock 4.6.0

Logging enhancements and removed outbound response caching.

• Improve logging performed during single sign-on
• Log raw SAML HTTP requests when additional logging is requested
• Research logging efficacy after various types of PHP errors and exceptions
• Reconcile "system log" and "session log"
• EB 4.4 reissues cached responses on Authn requests from any SP #179

EngineBlock 4.5.4

Bugfix release.

• Bugfix for EB 4.4 does not set correct member/guest status #174 fix.