Release notes

2.4.0

This release adds external SAML authentication for Management Center, clearer environment identification, safer LDAP search limits, and more accurate pending-change indicators. The list below covers all five issues delivered in the 2.4.0 iteration.

---

Authentication and environment awareness

External SAML authentication (managementcenter#648)

Added an option to authenticate Management Center administrators through an external SAML identity provider instead of the local username and password flow. The selected mode applies to every installed Management Center application and persists across upgrades.

See Management authentication for configuration, authorization, recovery, and metadata guidance.

Configurable environment text (managementcenter#774)

Added configurable environment or instance text to the Management Center header. Administrators can use it to distinguish production, test, customer, or server instances when working across multiple environments.

Environment-text placement and empty state (managementcenter#777)

Positioned the configured environment text immediately before the status indicator while keeping the header controls right-aligned. Missing, null, empty, or whitespace-only values display no environment text, and the hostname is not used as a fallback.

See Application deployment for configuration details.

Configuration safety and feedback

LDAPSearch result limit (managementcenter#775)

Added max_results to the LDAPSearch editor so administrators can limit the maximum number of LDAP entries returned by a search. The field accepts positive integers, defaults to 1000, and remains separate from expected_item_count validation.

See Pipes and flows for the stored configuration format.

Accurate Applications change indicator (frontend#360)

Stopped SAMLSPBroker changes from showing an orange pending-change indicator on the Applications tab, where that authenticator is not listed. Pending changes continue to be indicated in the configuration area where the object can be found and managed.

2.3.0

This development iteration improves Access application setup, pipe and flow editing, administrative traceability, and platform reliability. The list below covers all 24 issues that reached Done in the project's Current view.

---

Access applications and configuration

SAML AttributeValue type control (frontend#334)

Added Include attribute value type (xsi:type) to SAML Application and SAML Profile assertion settings. It defaults to enabled and can be disabled for service providers that require untyped AttributeValue elements.

OIDC claims from the selected provider (managementcenter#752)

Restricted OIDC RP claim selection to claims exposed by the selected OP for ID tokens, access tokens, and UserInfo. Existing unsupported claims remain visible with clear validation feedback instead of being silently removed.

Minimal SAML defaults (managementcenter#756)

Removed hidden SAML defaults from newly created SAML SP applications and SAML Profiles so only required or explicitly selected values are stored.

Reusable app tags (managementcenter#758)

Added suggestions from existing app tags while still allowing administrators to enter a new tag.

Safer Default listener configuration (managementcenter#759)

Changed the fresh-install Access Default listener so fingerprint.enabled defaults to false; fingerprinting can still be enabled explicitly per listener.

Visible app-tag inheritance and overrides (managementcenter#732)

Made SAML Application app-tag inheritance explicit. Administrators can see inherited profile tags, switch to an application override, and return to inheritance without changing other profile settings.

Guided OIDC machine-to-machine setup (managementcenter#726)

Added guided OIDC machine-to-machine setup for client_credentials, including the relying party, managed client-credentials pipe, discovery metadata, and a choice of JWT or opaque access tokens.

See Access applications for the administrator-facing behavior.

Pipes and flows

LDAPSearch attribute editor (managementcenter#576)

Replaced the legacy LDAPSearch attribute editor with a tag-style editor that stores a comma-separated string. Binary attributes use the ;binary suffix, and the legacy multivalue option is no longer written by the UI.

LDAPAdd attribute editor (managementcenter#577)

Replaced the LDAPAdd attribute editor with the same tag-style, comma-separated format.

LDAPModify property editors (managementcenter#578)

Replaced the LDAPModify add, replace, and delete property editors with the same tag-style, comma-separated format.

Consistent pipe metrics view (managementcenter#769)

Renamed the pipe runtime view button to Metrics, aligned its toggle behavior with the other view buttons, and displayed valve names in the metrics list.

Flow visibility in Launchpad (managementcenter#768)

Added a Hide in Launchpad setting to the Flow General tab, backed by hide_in_launchpad.

SubPipe usage view (managementcenter#733)

Added a Used by view for SubPipes with deep links to referencing pipes and, for Access, the related authenticator where it can be resolved.

See Pipes and flows for configuration details and known limits.

Administration and user feedback

Clear session and connection states (managementcenter#740)

Added blocking session-expired and connection-lost states. Management Center now asks the administrator to sign in again or restore the connection instead of allowing edits that cannot be saved.

Administrative event log (managementcenter#727)

Added Eventlog MC for Management Center-initiated start, stop, login, failed-login, logout, and configuration events, including timestamp, administrator, readable details, and filtering.

See Session and connection state and Administrative event log.

Runtime and platform reliability

Control compatibility with the Vert.x 5 runtime (fortified-mgmt-control#45)

Updated the Control management module for the Vert.x 5-compatible Management Center runtime released as 2026.39.

Reliable startup overrides (fortified-mgmt#69)

Fixed startup key=value overrides so values ending in non-word characters are accepted and values containing = are preserved.

Vert.x 5-compatible REST dependency (fortified-mgmt#67)

Replaced the internal Vert.x 4-era REST fork with the upstream Vert.x 5-compatible com.zandero:rest.vertx:1.3.0 dependency.

HTTP route cleanup on module stop (fortified-mgmt#36)

Released HTTP routes when a managed module stops, preventing stopped modules from continuing to answer on their previous endpoints.

Vert.x 5 runtime upgrade (fortified-mgmt#60)

Upgraded the Management Center runtime to Vert.x 5.1.3 and the consolidated Fortified ID platform dependency chain.

Managed-module integration tests (fortified-mgmt#63)

Added a dedicated integration-test module and enabled the managed-module stop regression tests in CI.

Broader regression coverage (fortified-mgmt#64)

Added tests for previously uncovered REST resources, authentication redirects, server startup, application priming, customer extraction, and logging behavior.

Closed without a product change

SAML view label report (managementcenter#608)

The reported SAML view label problem could not be reproduced and was already absent when verified; no documentation or product behavior changed.

Superseded dependency update (fortified-mgmt-control#16)

The requested separate foss-commons and foss-platform version update was obsolete because Control had already moved to the consolidated fortifiedid:foss BOM; no additional product change was required.

2.2.0

This release focuses on improving day-to-day administration in Management Center for Access and Control. It adds a standalone Expression Builder, improves Access application management, extends typed configuration for SAML and RadiusPAP, makes Control creation and category workflows more consistent, and fixes several regressions found during 2.2.0 release candidate testing.

---

Key Highlights

• Added a standalone Expression Builder for building, testing, and validating expressions used in fields such as exec_if, item_include_expr, exec_if_expr, and include_expr.
• Improved the Access Applications view with clearer create actions, better search and filtering, and a more scannable overview of application metadata.
• Added UI support for SAML assertion encryption algorithm configuration and a direct SAML Metadata link for SAML IdP configuration.
• Improved Control object creation and category handling so Flows, Steps, Schedules, Forms, and API Endpoints behave more consistently.
• Added a dedicated RadiusPAP valve configuration panel and improved pipe testing and JSON editing behavior.
• Fixed Linux service control handling and several visual or runtime regressions in Access and Control.

Delivered in this iteration

Access Configuration and Applications

• Improved the Access Applications view so administrators can create OIDC RP, SAML SP, and SAML Profile objects more directly from the applications workspace.
• Added search and filtering support in the Applications view for easier scanning by name, type, profile, app tags, and related pipes.
• Added support for configuring the SAML assertion encryption algorithm when assertion encryption is enabled.
• Added a direct SAML Metadata link on SAML IdP configuration to make metadata endpoints easier to find and share.
• Added support for deleting pipes that were created from an application or profile, including confirmation before removal.
• Fixed a visual regression where the MC Access login page could lose its colors after installing a 2.2.0 release candidate.
• Completed investigation work for central logout and session revoke handling in Fortified Access, including Management Center as a likely administration entry point.

Control, API Endpoints, and Categories

• Added Category support for API Endpoints in Control so they can be organized like Flows and Schedules.
• Made category handling more consistent across Forms, Schedules, and API Endpoints, including category management from the object view.
• Updated API Endpoint creation so API endpoint path, Display name, and Description can be entered directly in the create dialog.
• Improved Flow creation so Display name and Description can be entered when the Flow is created.
• Improved Step creation so Display name and Description can be entered when the Step is created.
• Made API Endpoint updates more tolerant of imported or seeded configuration where the folder name and internal id differ.
• Updated the Portal enablement example in Control to show a full URL instead of only /portal.
• Fixed a Control startup issue that could occur after creating a new Flow in a 2.2.0 release candidate.
• Fixed a Control panel styling issue where a panel could lose its background and become difficult to read.
• Fixed the Control Management and Overview pages so they no longer show only an empty green page.

Pipes, Expressions, and JSON Editing

• Added a standalone Expression Builder for expression fields such as exec_if, item_include_expr, exec_if_expr, and include_expr.
• Added a dedicated RadiusPAP valve UI panel with fields for username, password, otp, destination, and request_attrs.
• Fixed pipe testing so values in the system scope, such as ${system.customer_home}, can be expanded correctly.
• Made JSON editing for an individual valve behave consistently with JSON editing for the full pipe.

Runtime, Installer, and UI Fixes

• Fixed Linux service status and start or stop handling for managed services when systemctl output was combined with grep and pipefail.
• Improved visual consistency and readability in Control panels and Access login pages.
• Fixed release candidate regressions that affected Control startup and Control overview rendering.

2.1.0

This release focuses on configuration workflows in Control, Access, Forms, Portal, and Password Reset. It adds new typed configuration views, improved schedule, flow, and step editing, runtime observability for pipes, and a broad set of fixes that make generated configuration safer and easier to manage.

---

Key Highlights

• Added Control support in Management Center, including the Control product area, correct product imagery, improved subtitle styling, and fixes for Control flow discovery.
• Added and refined schedule management, including schedule editing, pipe handling in the left navigation, cleaner scheduler layout, corrected custom text behavior, and aligned schedule navigation and documentation links.
• Added dedicated UI panels for flow and step configuration, including flow-level fields, Requires roles, documentation links, and a tabbed step editor for general settings, controls, and advanced layout JSON.
• Added a broad set of typed configuration views for Access authenticators and OIDC or SAML-related configuration, reducing the need to edit raw JSON.
• Added runtime and discovery APIs for pipe metrics and known Control UI controls.
• Added Password Reset rule policy management so multiple password rule policies can be configured and one policy can be selected as default.

Delivered in this iteration

Control, Forms, Schedules, and Flows

• Added the new Control area in Management Center and corrected the missing Control image.
• Fixed Control flow discovery so default Control flows are found and can be opened correctly.
• Added schedule editing with create, update, delete, and pipe association support.
• Moved scheduler pipe handling to the left navigation and made scheduler pipes use display_name instead of the internal id where available.
• Removed redundant scheduler fields from the UI and improved layout for scheduler settings, including stable placement for run on start, parallel, and custom text fields.
• Updated the schedule top-level row to match the visual pattern used by API Endpoints and corrected the schedule documentation link.
• Added a dedicated flow configuration panel so common flow fields can be edited without going directly to JSON.
• Added UI support for Requires roles on Forms flows.
• Corrected documentation links for flows and flow steps and added documentation support for individual steps.
• Added a tabbed step editor with general step settings, control CRUD, and an advanced layout JSON editor.
• Added an API for listing known Control UI controls using the same discovery pattern as known valves.
• Fixed DataGridUpdate behavior so searches do not execute prematurely and added a dedicated search field for adding new entries.

Access Configuration

• Added dedicated typed configuration views for Passkey, CertificateAuth, UserNameAndPassword, ExternalFlow, UserLookup, IwaAuthentication, OTPValidator, SSOAuthenticator, AuthController, EnrichIdentity, Impersonate, ImpersonateWithSearch, FrejaWithUserInput, FrejaWithQRCode, SithsWithQr, NiasOnOtherDevice, NiasOnSameDevice, StaticSAML, SAMLSPBroker, OIDCRP, OIDCAuthCodeFlow, and OIDCImplicitFlow.
• Updated the OidcRpAuthenticator UI with support for acr_values, cancel_on_errors, and cancel_on_error_description_patterns.
• Updated the default values used when creating OIDCRP Auth.
• Added support for application-specific authorization configuration on applications.
• Added a panel for selector work based on the Access selector implementation.
• Updated selector handling so label is used as the display name when managing authenticators and when using the right-hand configuration view.
• Fixed BankID test mode so it writes the correct config.mode value.
• Fixed BankID selector handling so adding a BankID authenticator creates a valid selector option with a label.
• Fixed chain editing so newly added authenticators are written to the correct JSON location.
• Fixed OTP validator handling so unexpected pre_pipe behavior no longer creates confusion in the UI.
• Locked SAML Trusted Application authorization editing when the application is linked to a SAML Profile.
• Corrected the values shown in SAML Attribute NameFormat dropdowns and the SAML NameID format dropdown.
• Fixed HttpClient configuration so non_proxy_hosts is saved in a runtime-compatible array format.
• Added an error in HttpClientSelectionWidget when the referenced HttpClient is missing.
• Corrected the category used for NoOp so the add flow and left navigation are consistent.

Password Reset, Portal, and Shared Configuration

• Added a Password Reset rule policy interface for rule_policies, including policy creation, policy IDs, per-policy rules, exactly one default policy, validation, and compatibility with legacy rules configuration.
• Fixed Portal card editing so unsaved Required Roles input from one card does not remain visible when switching to another card.
• Updated the SMTP valve view, including migration from legacy *_parameter fields and support for ignore_smtp_timeout.
• Updated module defaults so only InformationEndpoint keeps the group property where applicable, using group: "last".
• Updated the default customer folders for Access, Control, Portal, and Password Reset to align group handling and included modules.
• Corrected the default op_default.json logout endpoint shipped with Access.

Runtime, Installer, and UI Improvements

• Added a Management Center runtime API for pipe metrics that returns structured metrics per pipe and valve.
• Added the Management Center version number to the /disco page.
• Fixed a Windows installer issue where product selection did not work correctly.
• Increased the width of the display_name input when editing pipes.
• Added the active application name directly in the Pipe Configuration tab to reduce context switching.
• Improved subpipe handling so subpipes appear in the left navigation and can be created or deleted using the same interaction patterns as other resources.
• Adjusted the unsaved and undeployed node indicator logic so unsaved state takes precedence.
• Fixed pipe test handling so globals can be expanded correctly.
• Reordered the JSON and Test buttons in the pipe view so JSON is shown on the far right.
• Added matching brackets in Monarch to make long expressions easier to read and edit.
• Cleared the right-hand configuration panel after deleting a valve.
• Added a warning when closing a modal with unsaved changes.
• Updated the Control subtitle styling to align better with the other products.

2.0.0

This release focuses on configuration workflows in Control, Access, Forms, and Portal, with new typed configuration views, improved schedule and flow editing, better runtime observability for pipes, and a broad set of usability fixes across the Management Center UI.

---

Key Highlights

• Added schedule management in Forms configuration, including CRUD support, navigation updates, and multiple scheduler usability fixes
• Added a broad set of dedicated form-based configuration views for Access authenticators and OIDC or SAML-related configuration
• Added a runtime API for pipe metrics per pipe and valve
• Improved flow editing with a dedicated flow panel and corrected documentation links for flows, flow steps, and schedules
• Delivered a broad set of UI improvements for pipes, forms, modal handling, Monaco editing, installers, and default configuration content

Delivered in this iteration

Configuration and Editing

• Added schedule editing in Forms configuration with create, update, delete, and pipe association support
• Added several Control scheduler refinements, including better placement of pipes in the left navigation, removed redundant components, layout cleanup for run on start and parallel, improved custom text handling, and fixes for flow discovery in Control
• Updated the schedule navigation row to align visually with API Endpoints and added the correct documentation link
• Added a dedicated UI panel for flow configuration so common flow fields can be edited without going directly to raw JSON
• Corrected the documentation link in the flow step view
• Added documentation support for individual flow steps
• Added dedicated typed configuration views for Passkey, CertificateAuth, UserNameAndPassword, ExternalFlow, UserLookup, IwaAuthentication, OTPValidator, SSOAuthenticator, AuthController, EnrichIdentity, Impersonate, ImpersonateWithSearch, FrejaWithUserInput, FrejaWithQRCode, SithsWithQr, NiasOnOtherDevice, NiasOnSameDevice, StaticSAML, SAMLSPBroker, OIDCRP, OIDCAuthCodeFlow, and OIDCImplicitFlow
• Updated the UI for OidcRpAuthenticator with support for acr_values, cancel_on_errors, and cancel_on_error_description_patterns
• Updated the SMTP valve view, including migration from legacy *_parameter fields and support for ignore_smtp_timeout
• Updated the default values used when creating OIDCRP Auth
• Added support for application-specific authz configuration on applications

Runtime and Service Improvements

• Added a Management Center runtime API for pipe metrics that returns structured metrics per pipe and valve
• Added the Management Center version number to the /disco page
• Fixed a Windows installer issue where product selection did not work correctly

UI and Usability Improvements

• Increased the width of the display_name input when editing pipes
• Added the new Control area and fixed the missing Control image
• Updated selector handling so label is used as the display name in authenticator management views
• Adjusted the unsaved and undeployed node indicator logic so unsaved state takes precedence
• Fixed pipe test handling so globals can be expanded correctly
• Reordered the JSON and Test buttons in the pipe view so JSON is shown on the far right
• Added matching brackets in Monarch to make long expressions easier to read and edit
• Cleared the right-hand configuration panel after deleting a valve
• Added a warning when closing a modal with unsaved changes
• Fixed chain editing so newly added authenticators are written to the correct JSON location
• Fixed OTP validator handling so unexpected pre_pipe behavior no longer creates confusion in the UI
• Updated the Control subtitle styling to align better with the other products

Forms and Data Grid Improvements

• Fixed the DataGridUpdate search workflow so searches behave more consistently and do not trigger premature execution
• Added a dedicated search field for adding new entries in DataGridUpdate

Default Configuration Updates

• Updated module defaults so only InformationEndpoint keeps the group property where applicable
• Updated the default customer folders for Access, Control, Portal, and Password Reset to align group handling and included modules
• Updated the default Password Reset customer folder so only InformationEndpoint keeps the group property, using group: "last"
• Corrected the default op_default.json logout endpoint shipped with Access

Additional Updates

• Improved subpipe handling in the UI so subpipes appear in the left navigation and can be created or deleted using the same interaction patterns as other resources
• Added the active application name directly in the Pipe Configuration tab to reduce context switching
• Fixed Portal card editing so unsaved Required Roles input from one card does not remain visible when switching to another card

1.3.1

This release focuses on enhancing the management experience across all products, with significant additions for Password Reset integration, improved SAML and OIDC configuration workflows, and numerous quality-of-life improvements.

---

Key Highlights

• Complete Password Reset integration with dedicated UI and configuration management
• Enhanced SAML Profile support with improved application management
• Automatic display name generation for pipes, steps, and flows
• Improved OIDC RP and OP configuration workflows
• Standardized terminology across all products ("Authenticators", "Credential Validators")
• Bug fixes and UI consistency improvements

New Features

Password Reset Management

Complete Password Reset Integration

Management Center now includes full support for managing Password Reset deployments, bringing the same powerful configuration capabilities available for Access, Portal, and Forms to password management workflows.

• Dedicated Password Reset UI - New management interface specifically designed for Password Reset configuration
• Password Rules Configuration - API and UI for managing password complexity rules and validation policies
• Self-Reset Pipe Management - Configure and manage self-service password reset workflows
• Delegated Reset Configuration - Set up and manage delegated password reset scenarios for helpdesk use
• ADResetClient Module - Added missing ADResetClient module for Active Directory password write-back operations
• Installer Integration - Password Reset now included in the unified Management Center installer
• Documentation Updates - Complete documentation for ports, configuration, and deployment

Configuration Updates:

• Updated default logout endpoint URL: ${globals.host_uri}pwdreset/logged_out/
• Added display names for default Password Reset pipes
• Updated Discovery page to include Password Reset service

SAML Profile Management

Enhanced SAML Application Workflows

Significant improvements to SAML Profile creation and management make it easier to manage multiple applications sharing common SAML configurations.

• Profile Creation and Management - Create SAML Profiles to share configuration across multiple applications
• Profile Selector - New UI component for selecting profiles when configuring SAML applications
• Application View Integration - Profiles now appear in the application listing view
• Profile Association Display - See which applications are using each SAML Profile
• Improved Pipe Creation - Pipe creation for SAML SP and Profile objects moved to dedicated view for better workflow

Visual Improvements:

• New icons for SAML Profiles matching the visual style of OIDC RP icons
• Tags now properly displayed on profiles and RPs
• Application view sorted by display name for easier navigation
• Updated search placeholder text for better clarity

OIDC Improvements

Enhanced OpenID Connect Configuration

Multiple improvements to the OIDC configuration experience make it easier to set up and manage OpenID Connect integrations.

• Improved Discovery Metadata - Added id_token_alg_values_supported to Implicit Flow discovery metadata
• Better Default Handling - Fixed default keystore display in UI for new OP configurations
• RP Template Improvements - Corrected pipe_id handling in RP templates
• Claims Editor Enhancement - Expanded JSON editor for claims configuration
• Documentation Links - Fixed documentation links for RP configurations

Parameter Updates:

• Removed sign_ prefix from Authentication and Implicit Flow parameters for consistency
• Updated parameter naming conventions across OIDC configurations

---

Improvements

Display Name Management

Automatic Display Name Generation

The system now automatically generates meaningful display names for pipes, steps, and flows, improving readability and making it easier to identify components at a glance.

• Flow Display Names - Automatically generated when creating new flows
• Step Display Names - Auto-generated for steps within flows
• Pipe Display Names - Meaningful names for pipes based on their purpose:
  • Authenticator pipes get descriptive names based on authentication method
  • SAML SP pipes get names derived from the SP configuration
  • SAML Profile pipes use profile-based naming
  • OIDC RP pipes use RP-based naming
  • Default Password Reset pipes include service-specific names

UI Consistency:

• Display names now used consistently throughout the UI
• Primary display uses display_name field instead of technical ID
• Fallback to technical ID when display_name is not available

Configuration Management

Default Configuration Updates

Standardized default configurations across all products for consistency and better out-of-the-box experience.

• Access - Updated default configurations for improved SAML and OIDC workflows
• Portal - Refreshed default settings aligned with other products
• Forms - Updated flow and pipe defaults
• Password Reset - New default configuration optimized for common use cases

Configuration Improvements:

• Fixed TokenAuthentication valve default value that caused startup issues
• Removed unnecessary service file from Forms Windows deployment
• Updated HTTP listener creation with improved defaults
• Better cascade handling for HTTP listener deletion

User Interface Enhancements

Terminology Standardization

Updated terminology across the interface for consistency and clarity:

• "OPTIONS" changed to "CREDENTIAL VALIDATORS"
• "OIDC" changed to "OIDC RP" where appropriate
• Consistent use of "Authenticators" throughout Access configuration

Visual Improvements:

• Added icons throughout configuration interfaces for Access, Portal, and Forms
• Improved dropdown list visual styling with proper borders
• Fixed scrollbar behavior when adding new modules
• Reduced unnecessary spacing for more compact displays
• Better metadata component positioning
• Enhanced tab retention during updates

Navigation Improvements:

• Expandable navigation headings in left panel (now consistent across all products)
• Orange indicator properly shows unsaved changes across all contexts
• "Changes saved but not deployed" indicator positioning improved
• Fixed tab focus retention during RJSF form updates

---

Bug Fixes

OIDC Fixes

• Fixed RP creation failures
• Corrected path generation when editing OP objects from MC
• Fixed discovery functionality
• Resolved Implicit Flow tokens tab issues
• Fixed NPE when deleting OP set as default
• Corrected order field handling for new OIDC Chain entries
• Fixed RP JSON editor data persistence

SAML Fixes

• Fixed default metadata file value appearing when creating new SAML SP
• Corrected IdP value selection when creating new SAML SP or Profile
• Fixed pipe name showing "undefined" when created for SAML SP
• Resolved attribute settings handling for SAML applications
• Fixed field population when SAML Profile is selected

JSON Editor Fixes

• Standardized JSON editor behavior across Access, Forms, and Portal
• Fixed "Discard changes" functionality in pipe JSON mode
• Added proper validation to prevent updating with invalid JSON
• Consistent behavior for all JSON editing contexts

General Fixes

• Fixed filter clearing not resetting search field
• Corrected application update API to consolidate multiple calls into single request
• Fixed expansion/collapse behavior for nested categories
• Resolved "Change user" button visibility issues
• Fixed documentation links opening in same window
• Corrected module documentation link targets

---

API Enhancements

New Endpoints

• SAML Profile API - Complete CRUD operations for SAML Profiles
• System Variables API - Retrieve system variables for configuration
• Flow Management - Enhanced flow deletion and listing APIs

API Improvements

• Consolidated application listing into single API call for better performance
• Improved request handling for setting OP to null in RP configurations
• Better error handling for module creation and deletion
• Enhanced cascade deletion for dependent resources

---

Technical Details

Module Updates

New Modules:

• ADResetClient - Active Directory password reset client
• ExternalFlow - External flow authentication support

Missing Modules Added:

• OIDC module now available in configuration
• SAML & OIDC modules properly displayed on configuration start page
• Three missing Forms modules added to UI

Deployment Improvements

• Named EXE files for better service identification
• Updated install_service.ps1 with registry value parameters for upgrades
• Fixed hardcoded memory values in install_service.ps1
• Improved service upgrade process

Performance Optimizations

• Reduced unnecessary API calls in application views
• Optimized module refresh behavior
• Cached version check results for better performance
• Improved entity load operations

---

Breaking Changes

Java 25 Upgrade

Management Center now requires Java 25. Please review the upgrade documentation for migration instructions:

• Updated runtime requirements
• Configuration adjustments may be needed
• See documentation for detailed upgrade steps

---

Upgrade Notes

Password Reset

If you're adding Password Reset to an existing Management Center installation:

1. Installer - Use the unified installer which now includes Password Reset
2. Configuration - Default configuration files are provided
3. Modules - ADResetClient module is now included
4. Ports - Review documentation for required port configurations

SAML Profiles

If you're using SAML applications:

1. Profile Support - Consider using SAML Profiles for applications sharing common configuration
2. Display Names - Review auto-generated display names and customize as needed

OIDC

If you're using OpenID Connect:

1. Parameter Names - Review configurations for updated parameter naming (removed sign_ prefix)
2. Discovery - New discovery metadata fields automatically included
3. Display Names - OIDC RP pipes now have meaningful auto-generated names

Display Names

For existing flows, steps, and pipes:

1. Display names are auto-generated for new items
2. Existing items without display names will continue to use technical IDs
3. Consider adding display names to existing items for better readability

1.3.0

This release primarily focuses on enhancing the administrative interface to make day-to-day administration simpler, clearer, and more efficient. Improvements have been made to usability, structure, and workflows, with the goal of reducing complexity and helping administrators perform common tasks more quickly and with greater confidence. Overall, the update provides a more streamlined and intuitive experience for administrative users, laying a stronger foundation for future improvements.

Key highlights include:

• Improved configuration and management of OIDC PR and OP.
• Simplified IdP configuration and setup.
• A more streamlined approach to connecting and configuring multiple applications, reducing manual steps and configuration effort.

1.2.0

Updated scripts for upgrading products on Windows

This update applies only to installations on Windows.

The updated script addresses two issues:

1. Memory settings — Any custom memory configuration was previously reset to the default value during an upgrade.
2. Startup working directory — The startup working directory was not updated correctly from the installed version.

When upgrading each product in Management Center (Access, Forms, and Portal), a PowerShell script is used. This script must be replaced with the updated version provided in this ZIP file for each respective product.

1. Navigate to: drive:\Program Files\FortifiedID\mgmt-center\data\customer<product>\bin
2. Replace the existing install_service.ps1 file with the corresponding file from this ZIP archive.

Download update.zip below for the updated scripts.

update.zip

1.2.0

Available for linux

Installation now supports Linux distributions including Debian, Red Hat, and Ubuntu. The required service manager is systemd (systemctl).

Java version update

When using windows JAVA 25 is shipped as default

Forms is now included

Adding Fortified ID Forms application under the "managed umbrella". A default set up is included in the forms mc installation for showcasing the capabilities of Fortified ID Forms application.

Updated UI panels

Several new panels and logic enhancements have been added, making configuration more streamlined and user-friendly.

OIDC UI improvements

Creating and editing OIDC OP (OpenID Provider) and RP (Relying Party) configurations has been significantly improved, offering a more intuitive interface, better validation, and streamlined workflows.

Resource UI improvements

Categorisation of resources provides a clearer overview and improved management of grouped resources.

1.1.0

Creation of all entities

UI now allows for creation of entities such as IDP, authenticators & modules.

UI panels for pipes

First iteration of simplified UI for 105 valves.

Quick setup of second SAML logical IDP

Creation SAML 2.0 IDP creates basic setup. Gets you going i minutes.

Portal added under the MC umbrella

Portal is now managed using Management Center. Can be used either as separate container or included in windows installer.

Documentation links

Links to documentation is added to MC components.

General UI updates

1.0.0

First release