AuthorisationService Release Notes

The following items on the list encompass breaking changes, features, and fixes that are relevant for the major release.

Release 23.4.18

Dependencies and Component Updates

The following central components will be shipped in the noted version, along with relevant product and service dependencies:

Microsoft Azure AD (aka Entra ID) integration

The AuthorisationService (AS) can integrate into a Microsoft Azure Active Directory (AAD, aka Microsoft Entra ID). Similar to the LDAP integration, AS will use KeyCloak to synchronize users and groups with AAD. Synchronized users and groups will also be generated in VidiCore.

For more information: Microsoft Azure AD / Entra ID integration [C IG]

This feature was first introduced in AuthorisationService 23.3.6 and is now available for the first time in a major release.

If the feature was used with a 23.3-based version and a configuration was done in the field “Single Logout Service URL”, it should be removed and set to an empty configuration.

Keycloak metrics

The Keycloak metrics are now enabled in the AS deployment. For further information on the available metrics please refer to: https://www.keycloak.org/server/configuration-metrics

Changed parameter “SyncTimeout”

The parameter “SyncTimeout” in the appsettings was changed from the section “Vidispine” to the section “Keycloak” and renamed to “SyncTimeoutInSeconds”.

Sync cron job timeout behavior

In some situations, the sync cron job for LDAP or AAD could be stuck forever. A new timeout of 1 hour is introduced which aborts the sync job. Due to technical reasons, the job is marked as successful for the pod.

If sync issues occur, it is needed to check the corresponding log files.

Fixes