Release Notes 1.16.0¶

CEP 1.16.0 adds new features and resolves a rare issue.

What’s New?¶

Improved FIDO2 Validation Checks¶

The new black- and whitelit parameters allow for the configuration of blacklists for AAGIUDs that users are prohibited from enrolling in, as well as whitelists for AAGIUDs that users are permitted to enroll in.

The CEP_FIDO2_ADDITIONAL_SECURITY_CHECK parameter allows addional security checks on the FIDO MDS database.

The new parameter CEP_FIDO2_SHOW_SECURITY_CHECK allows for the configuration of a security check that users can use to test the compatibility of their keys. This test performs the same checks configured for enrollments.

Implementation of CEP_LDAP_UNLOCK_EVENT¶

The CEP allows users to unlock their AD accounts using a special AA event. More

Implementation of CEP_TOTP_SEED_CLIPBOARD¶

Users are now able to manually copy the TOTP seed to the clipboard for easy pasting into their authenticator app. More

Additional Translation Attributes From LDAP/AD Repositories¶

The CEP now supports using attributes from repositories for additional translation attributes from LDAP/AD repositories. More

Resolved Issues¶

Issues

In rare situations, random key generation failed during container startup, preventing the final startup from completing.
Disabling the compromised password check using the CEP_COMPROMISED_PASSWORD_CHECK parameter had no effect.
A copy-and-paste issue for HOTP and TOTP methods has been fixed. Serial numbers and tokens can now be pasted into the form fields.