Latest Version of privacyIDEA ADFS Plugin available
We are pleased to announce that the privacyIDEA ADFS Provider is now available in version 1.4.0.
New Features
Version 1.4.0 supports the features introduced in privacyIDEA 3.13:
- PUSH Code to Phone
- Enroll via Multichallenge Optional
- Enroll via Multichallenge for Smartphone Containers
Password Management
- The Service Pass is now stored in encrypted form (Windows DPAPI). Existing plaintext values are automatically migrated upon first access.
- The ACL of the configuration registry key has been hardened. The Service Pass is no longer readable by non-admin users.
Security Measures
- The new settings `forward_client_ip` and `forward_client_user_agent` enable the forwarding of the client IP and user agent to privacyIDEA for server-side policy decisions.
- If SSL/TLS certificate validation is disabled, a warning is written to the Windows Application Event Log each time the service starts.
- Outdated TLS versions (TLS 1.1 and older) are rejected. The provider automatically falls back to TLS 1.2/1.3.
A complete overview of all changes can be found in the changelog on GitHub.
Availability
The current version of the plugin is available on GitHub: https://github.com/privacyidea/adfs-provider/releases/tag/v1.4.0
If you are interested in using the ADFS Plugin, please contact us via sales@netknights.it
