Skip to content

Fortified IDDocs

Release notes

This highlights the most important items. For in-depth details, contact Fortified ID.

Version 3.3.0

Section titled “Version 3.3.0”

Documentation

Section titled “Documentation”

Improved product overview and guidance for Fortified ID Password Reset

The Password Reset documentation has been expanded and restructured to make it easier to understand what Fortified ID Password Reset is, what it can be used for, and where to start depending on the reader's goal.

The updated documentation now includes clearer overview content such as .., #delegated-password-reset, and #different-password-policies. The get-started, modules, management-ui, ui, and on-behalf-of pages have also been positioned more clearly as entry points for different reader needs.

These updates are intended to make the documentation more approachable for both business-oriented readers and technical readers, while giving a clearer picture of the scenarios that Fortified ID Password Reset supports.

Version 3.1.2

Section titled “Version 3.1.2”

New Features

Section titled “New Features”

Multiple Password Policies

  • Added support for multiple named password policies in the same Password Reset installation
  • A default policy can be configured
  • The active password policy can now be selected per user session

Upgrade Notes

Section titled “Upgrade Notes”
  • Existing configurations using a single rules section continue to work

Version 3.1.1

Section titled “Version 3.1.1”

New Features

Section titled “New Features”

Header Text Display

  • Added header_text parameter to the API for customizable header display
  • New component displays configurable text to the left of the avatar in the UI
  • Text is right-aligned and grows to the left
  • Supports language files for multilingual deployments
  • If header_text is not set, no additional text is displayed

Session Variables in Rules

  • Added support for session variables in rules.json regex evaluation
  • Session attributes (e.g., ${session.givenName}, ${session.familyName}) can now be used in regex patterns
  • Enables dynamic blocking rules based on logged-in user information
  • Example: "regex": "^((?!(?i:${session.givenName})).)*$" now works as expected

Extra Attribute Support

  • Added extra_attribute_1 attribute for SAML SP applications
  • Can be used by applications that require additional user attributes
  • Available for all SAML SP configurations

Improvements

Section titled “Improvements”

Configuration Updates

  • Updated pwdreset.json module with two new configuration parameters:
    • "overlay_dir": "${system.customer_home}/overlay/"
    • "logout_endpoint_url": "${globals.logout_endpoint_url}"

Logging Optimisation

  • Cleaned up default logging configuration in pipe files:
    • pwdreset.json: Removed all default logging (no request/session logging)
    • self_reset.json: Kept only request logging (removed session logging)
    • delegated_reset.json: Kept only request logging (removed session logging)
  • Reduces log verbosity while maintaining essential audit trails

Configuration Cleanup

  • Removed unnecessary parameter from globals.json for Password Reset
  • Streamlined configuration for better maintainability

Bug Fixes

Section titled “Bug Fixes”

EntraID Module

  • Fixed missing EntraID module in Password Reset distribution
  • EntraID password changes now supported for Microsoft Entra ID (formerly Azure AD)

InformationEndpoint Update

  • Updated InformationEndpoint module to version 2024.77 or higher
  • Now supports overlay configuration consistent with other modules
  • Resolved compatibility issues with newer configuration patterns

Technical Details

Section titled “Technical Details”

Dependencies:

  • InformationEndpoint: 2024.77+
  • Platform: 2024.77+
  • Includes EntraID module support

Configuration Changes:

  • Session variables are now resolved at runtime in rules.json
  • New overlay directory configuration for easier customization
  • Logout endpoint URL can be configured globally

API Changes:

  • Added header_text field to API responses
  • Added extra_attribute_1 to SAML attribute list

Upgrade Notes

Section titled “Upgrade Notes”
  1. Session Variables in Rules:
    • If you use custom rules.json files, you can now leverage session variables
    • Update your rules to use ${session.<attribute>} syntax for dynamic evaluation
  2. Configuration Files:
    • Review and update pwdreset.json if you need overlay or logout endpoint customization
    • Check globals.json for removed parameters (automatic cleanup)
  3. Logging:
    • Default pipe logging has been reduced
    • If you need more verbose logging, add configuration explicitly in your pipes
  4. EntraID Support:
    • EntraID module is now included by default
    • No additional configuration needed unless using EntraID password operations

Known Issues

Section titled “Known Issues”

None reported for this release.

Support

Section titled “Support”

For questions or issues, please contact Fortified ID support or visit our GitHub repository.

3.1.0

Section titled “3.1.0”
  • Prepared to become part of the management center
  • CVE updates