Release 90.2: Improved OpenID Connect SSO support

Thursday, November 3rd 2022 by Factor House

Release Info

Kpow can be found on Dockerhub

docker pull operatr/kpow:90.2

View our Docker quick start here.

Kpow v90.2 is a minor release featuring improved OpenID Connect SSO support.

See the full Kpow Changelog.

OpenID Connect

Kpow provides a number of integrations for common SSO / Authentication providers.

In release 90.2 we extend support for generic OpenID Connect integration by providing a new OPENID_ISSUER environment variable.

Example Usage

Kpow validates the issuer presented in the authentication token as a part of the OpenID / OAuth2 SSO handshake process.

The default behaviour for most providers is to present the issuer field as a url that matches the base of your configured authentication uri.

Some providers present the issuer field in a different format, for example as a urn. You now have the option of specifying the expected issuer value like so:

OPENID_ISSUER=urn:com:corp:api:oauth2:v1

Where no OPENID_ISSUER field is set, Kpow will use the default uri validation.

Changelog v90.2

  • Extend generic OpenID Connect SSO support with OPENID_ISSUER configuration
  • Fix Staged Mutations UI/UX bugs

Get this release on Dockerhub, on the AWS Marketplace, on ArtifactHub (Helm Charts), or Download as a JAR File.

Pull the latest Kpow Docker Container

docker pull operatr/kpow:90.2

Download the latest Kpow Java JAR

https://releases.operatr.io/kpow-2022-11-03-23-10.jar?AWSAccessKeyId=AKIAXNNKGCAKDUQSTKG4&Signature=7zw77KFjSXL7zZJQGZu%2FZDgHD6Q%3D&Expires=1683029496

Download the Kpow Java 8 JAR (uses Jetty 9, we recommend updating to Java 11+ and using our standard JAR)

https://releases.operatr.io/kpow-2022-11-03-23-12.jar?AWSAccessKeyId=AKIAXNNKGCAKDUQSTKG4&Signature=u%2FuZ8NHwDOymWAbunkADQiBXVKw%3D&Expires=1683029621

Tags:

OpenID
SSO