AuthorisationService Release Notes

The following items on the list encompass breaking changes, features, and fixes that are relevant for the major release.

Release 23.2.26

Support Azure AD as Identity Provider

AuthService 23.2 supports Azure AD as Identity Provider. As for local LDAP, the configuration can be done in ConfigPortial in the Identity Provider section.

Similar to using LDAP, AuthService syncs all users and groups from Azure AD in the search scope to the KeyCloak database and VidiCore.

This feature will not be part of the initial 23.2 release. It will be delivered later in a patch release.

Use internal Endpoint Between AuthorisationService and Keycloak

AuthorisationService can now use the cluster-internal endpoint for all communication to Keycloak. This requires setting the Frontend URL in the deployment for both realms (Vidispine and Master).

Token Expiration Times Extended

The values for SSO Session Idel and SSO Session Max are set to 10 hours now. Several time values for token expiration are set to higher values in the default configuration to avoid early unintended logouts of clients.

CORS Configuration

To allow CORS configuration, a list of URLs can be configured in the deployment.

Known Issues

Searching for usernames in the Keycloak Dashboard including backslash ('\') will lead to empty results. To avoid this, users should be searched using a double backslash ('\\').

Fixes