WSO2 Identity Server 7.1.0 M5

The WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 7.1.0 M5!

How to run

1. Extract the downloaded zip file.
2. Go to the bin directory in the extracted folder.
3. Run the wso2server.sh file if you are on a Linux/Mac OS or run the wso2server.bat file if you are on a Windows OS.

What's new

Fixes & features

A list of all the new features and bug fixes shipped with this release can be found in the following location:

• Features and fixes

Known Issues

All the open issues related to WSO2 Identity Server are reported at the following location:

• Reported issues

Contribute to WSO2 Identity Server

Mailing Lists

Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussions related to the product in the architecture mailing list. If you have any questions regarding the product you can use our StackOverflow forum to raise them as well.

• IAM Developer List: iam-dev@wso2.org
• User Forum: StackOverflow

Discord Channels

Join us via discord for even better communication. You can talk to our developers directly regarding any issues, or concerns about the product. We encourage you to start discussions or join any ongoing discussions with the team, via our discord channels.

• General discussions: General Channel
• Help: Help Channel
• New releases: Product Updates Channel

Reporting Issues

We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server GIT Issues.

Important: Please be advised that security issues must be reported to security@wso2.com, not as GitHub issues, in order to reach the proper audience. We strongly advise following the WSO2 Security Vulnerability Reporting Guidelines when reporting security issues.

For more information about WSO2 Identity Server, please see https://wso2.com/identity-and-access-management or visit the WSO2 Oxygen Tank developer portal for additional resources.

~ The WSO2 Identity and Access Management Team ~

WSO2 Identity Server 7.1.0 M4

The WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 7.1.0 M4!

How to run

1. Extract the downloaded zip file.
2. Go to the bin directory in the extracted folder.
3. Run the wso2server.sh file if you are on a Linux/Mac OS or run the wso2server.bat file if you are on a Windows OS.

What's new

Fixes & features

A list of all the new features and bug fixes shipped with this release can be found in the following location:

• Features and fixes

Known Issues

All the open issues related to WSO2 Identity Server are reported at the following location:

• Reported issues

Contribute to WSO2 Identity Server

Mailing Lists

Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussions related to the product in the architecture mailing list. If you have any questions regarding the product you can use our StackOverflow forum to raise them as well.

• IAM Developer List: iam-dev@wso2.org
• User Forum: StackOverflow

Discord Channels

Join us via discord for even better communication. You can talk to our developers directly regarding any issues, or concerns about the product. We encourage you to start discussions or join any ongoing discussions with the team, via our discord channels.

• General discussions: General Channel
• Help: Help Channel
• New releases: Product Updates Channel

Reporting Issues

We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server GIT Issues.

Important: Please be advised that security issues must be reported to security@wso2.com, not as GitHub issues, in order to reach the proper audience. We strongly advise following the WSO2 Security Vulnerability Reporting Guidelines when reporting security issues.

For more information about WSO2 Identity Server, please see https://wso2.com/identity-and-access-management or visit the WSO2 Oxygen Tank developer portal for additional resources.

~ The WSO2 Identity and Access Management Team ~

WSO2 Identity Server 7.1.0 M3

The WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 7.1.0 M3!

How to run

1. Extract the downloaded zip file.
2. Go to the bin directory in the extracted folder.
3. Run the wso2server.sh file if you are on a Linux/Mac OS or run the wso2server.bat file if you are on a Windows OS.

What's new

Fixes & features

A list of all the new features and bug fixes shipped with this release can be found in the following location:

• Features and fixes

Known Issues

All the open issues related to WSO2 Identity Server are reported at the following location:

• Reported issues

Contribute to WSO2 Identity Server

Mailing Lists

Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussions related to the product in the architecture mailing list. If you have any questions regarding the product you can use our StackOverflow forum to raise them as well.

• IAM Developer List: iam-dev@wso2.org
• User Forum: StackOverflow

Discord Channels

Join us via discord for even better communication. You can talk to our developers directly regarding any issues, or concerns about the product. We encourage you to start discussions or join any ongoing discussions with the team, via our discord channels.

• General discussions: General Channel
• Help: Help Channel
• New releases: Product Updates Channel

Reporting Issues

We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server GIT Issues.

Important: Please be advised that security issues must be reported to security@wso2.com, not as GitHub issues, in order to reach the proper audience. We strongly advise following the WSO2 Security Vulnerability Reporting Guidelines when reporting security issues.

For more information about WSO2 Identity Server, please see https://wso2.com/identity-and-access-management or visit the WSO2 Oxygen Tank developer portal for additional resources.

~ The WSO2 Identity and Access Management Team ~

WSO2 Identity Server 7.1.0 M1

The WSO2 Identity and Access Management team is pleased to announce the release of Identity Server 7.1.0 M1!

How to run

1. Extract the downloaded zip file.
2. Go to the bin directory in the extracted folder.
3. Run the wso2server.sh file if you are on a Linux/Mac OS or run the wso2server.bat file if you are on a Windows OS.

What's new

Fixes & features

A list of all the new features and bug fixes shipped with this release can be found in the following location:

• Features and fixes

Known Issues

All the open issues pertaining to WSO2 Identity Server are reported at the following location:

• Reported issues

Contribute to WSO2 Identity Server

Mailing Lists

Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussions related to the product in the architecture mailing list. If you have any questions regarding the product you can use our StackOverflow forum to raise them as well.

• IAM Developer List: iam-dev@wso2.org
• User Forum: StackOverflow

Discord Channels

Join us via discord for even better communication. You can talk to our developers directly regarding any issues, or concerns about the product. We encourage you to start discussions or join any ongoing discussions with the team, via our discord channels.

• General discussions: General Channel
• Help: Help Channel
• New releases: Product Updates Channel

Reporting Issues

We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server GIT Issues.

Important: Please be advised that security issues must be reported to security@wso2.com, not as GitHub issues, in order to reach the proper audience. We strongly advise following the WSO2 Security Vulnerability Reporting Guidelines when reporting security issues.

For more information about WSO2 Identity Server, please see https://wso2.com/identity-and-access-management or visit the WSO2 Oxygen Tank developer portal for additional resources.

~ The WSO2 Identity and Access Management Team ~

WSO2 Identity Server 7.0.0

WSO2 Identity and Access Management team is pleased to announce the WSO2 Identity Server 7.0.0.

What is new in this release

WSO2 Identity Server 7.0.0 is the latest WSO2 Identity Server release and is the successor of WSO2 Identity Server 6.1.0. It contains the following new features and enhancements:

New Features

• Refreshing look and feel for the console UI
  The console just got a major upgrade with our brand-new, lightning-fast Oxygen UI to be consistent with the experience of Asgardeo UI! Beta console UI (accessible via /console) introduced in the 5.11.0 version is now available for production usage for administrative and developer tasks.

  With this upgrade concepts like service providers, identity providers, and inbound/outbound authentication that have been used in the carbon-based management console have changed to ‘applications’ and ‘connections’ respectively. Identity Server 7.0.0 includes application templates for SPA, web applications with server-side rendering, mobile applications, and M2M applications along with various authentication options to pick and choose from connections that include social login, MFA, passwordless, etc.

• Productized support for B2B CIAM use cases
  Identity Server now enables secure access for your B2B business customers with flexible organization management capabilities. B2B CIAM is the identity foundation that helps organizations that work with business customers, franchises, distributors and suppliers get their apps and services to market quickly and securely.

• Authentication API that facilitates implementing app-native authentication
  When developing applications (especially native/mobile apps) developers look at implementing their login flows within the apps themselves where they target more UX.

  To cater to this requirement, API-based authentication capability is introduced which will provide the app developer the capability to implement a complete authentication capability within the application.

• OAuth 2.0 specifications
  Identity Server now supports following OAuth 2.0 specifications designed to protect APIs exposing high-value and sensitive (personal and other) data.

  • JWT Secured Authorization Response Mode
  • Pushed Authorization Requests

• Compliant with FAPI 1.0 Baseline and Advanced profiles

• First-class support for securing API resources
  Identity Server now offers comprehensive support for the API Authorization via RBAC.

• Command line utility to manage Identity Server configurations in CI/CD workflows

• FIPS 140-2 Compliance

• HYPR for passwordless and biometric authentication
  Identity Server now provides the HYPR connector as an authentication option for the applications.

Enhanced Features

• Branding and i18n support for end-user facing UIs and email templates
• Email and SMS OTP for passwordless login
• Idle account identification API
• Client-Id as an input parameter to perform OIDC RP-Initiated logout
• Use a different browser to open the email magic link and log in to the app

Deprecated features

Refer to the about this release section in the product documentation to find the deprecated from WSO2 IS 7.0.0 onwards. These features will be removed in a future release and we expect you to move to recommended solutions.

Fixes and Improvements

See the complete list of issues fixed in the latest WSO2 IS 7.0.0 release.

Documentation

The product documentation for this version is available at https://is.docs.wso2.com/en/7.0.0

Contribute to WSO2 Identity Server

Mailing Lists
Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussions related to the product in the architecture mailing list. If you have any questions regarding the product you can use our StackOverflow forum to raise them as well.

Developer List: iam-dev@wso2.org
Architecture List: architecture@wso2.org
User Forum: StackOverflow

Reporting Issues

We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server GIT Issues.

Important: And please be advised that security issues must be reported to security@wso2.com, not as GitHub issues, in order to reach the proper audience. We strongly advise following the WSO2 Security Vulnerability Reporting Guidelines when reporting the security issues.

~ The WSO2 Identity and Access Management Team ~

WSO2 Identity Server 7.0.0 RC7

We are pleased to announce the seventh release candidate of WSO2 Identity Server 7.0.0.

What is new in this release

WSO2 Identity Server 7.0.0 is the latest WSO2 Identity Server release and is the successor of WSO2 Identity Server 6.1.0. It contains the following new features and enhancements:

New Features

• Refreshing look and feel for the console UI
  The console just got a major upgrade with our brand-new, lightning-fast Oxygen UI to be consistent with the experience of Asgardeo UI! Beta console UI (accessible via /console) introduced in the 5.11.0 version is now available for production usage for administrative and developer tasks.

  With this upgrade concepts like service providers, identity providers, and inbound/outbound authentication that have been used in the carbon-based management console have changed to ‘applications’ and ‘connections’ respectively. Identity Server 7.0.0 includes application templates for SPA, web applications with server-side rendering, mobile applications, and M2M applications along with various authentication options to pick and choose from connections that include social login, MFA, passwordless, etc.

• Productized support for B2B CIAM use cases
  Identity Server now enables secure access for your B2B business customers with flexible organization management capabilities. B2B CIAM is the identity foundation that helps organizations that work with business customers, franchises, distributors and suppliers get their apps and services to market quickly and securely.

• Authentication API that facilitates implementing app-native authentication
  When developing applications (especially native/mobile apps) developers look at implementing their login flows within the apps themselves where they target more UX.

  To cater to this requirement, API-based authentication capability is introduced which will provide the app developer the capability to implement a complete authentication capability within the application.

• OAuth 2.0 specifications
  Identity Server now supports following OAuth 2.0 specifications designed to protect APIs exposing high-value and sensitive (personal and other) data.

  • JWT Secured Authorization Response Mode
  • Pushed Authorization Requests

• Compliant with FAPI 1.0 Baseline and Advanced profiles

• First-class support for securing API resources
  Identity Server now offers comprehensive support for the API Authorization via RBAC.

• Command line utility to manage Identity Server configurations in CI/CD workflows

• FIPS 140-2 Compliance

• HYPR for passwordless and biometric authentication
  Identity Server now provides the HYPR connector as an authentication option for the applications.

Enhanced Features

• Branding and i18n support for end-user facing UIs and email templates
• Email and SMS OTP for passwordless login
• Idle account identification API
• Client-Id as an input parameter to perform OIDC RP-Initiated logout
• Use a different browser to open the email magic link and log in to the app

Deprecated features

Refer to the about this release section in the product documentation to find the deprecated from WSO2 IS 7.0.0 onwards. These features will be removed in a future release and we expect you to move to recommended solutions.

Fixes and Improvements

See the complete list of issues fixed in the latest WSO2 IS 7.0.0 release.

Documentation

The product documentation for this version is available at https://is.docs.wso2.com/en/7.0.0

Contribute to WSO2 Identity Server

Mailing Lists
Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussions related to the product in the architecture mailing list. If you have any questions regarding the product you can use our StackOverflow forum to raise them as well.

Developer List: iam-dev@wso2.org
Architecture List: architecture@wso2.org
User Forum: StackOverflow

Reporting Issues

We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server GIT Issues.

Important: And please be advised that security issues must be reported to security@wso2.com, not as GitHub issues, in order to reach the proper audience. We strongly advise following the WSO2 Security Vulnerability Reporting Guidelines when reporting the security issues.

~ The WSO2 Identity and Access Management Team ~

WSO2 Identity Server 7.0.0 RC6

We are pleased to announce the sixth release candidate of WSO2 Identity Server 7.0.0.

What is new in this release

WSO2 Identity Server 7.0.0 is the latest WSO2 Identity Server release and is the successor of WSO2 Identity Server 6.1.0. It contains the following new features and enhancements:

New Features

• Refreshing look and feel for the console UI
  The console just got a major upgrade with our brand-new, lightning-fast Oxygen UI to be consistent with the experience of Asgardeo UI! Beta console UI (accessible via /console) introduced in the 5.11.0 version is now available for production usage for administrative and developer tasks.

  With this upgrade concepts like service providers, identity providers, and inbound/outbound authentication that have been used in the carbon-based management console have changed to ‘applications’ and ‘connections’ respectively. Identity Server 7.0.0 includes application templates for SPA, web applications with server-side rendering, mobile applications, and M2M applications along with various authentication options to pick and choose from connections that include social login, MFA, passwordless, etc.

• Productized support for B2B CIAM use cases
  Identity Server now enables secure access for your B2B business customers with flexible organization management capabilities. B2B CIAM is the identity foundation that helps organizations that work with business customers, franchises, distributors and suppliers get their apps and services to market quickly and securely.

• Authentication API that facilitates implementing app-native authentication
  When developing applications (especially native/mobile apps) developers look at implementing their login flows within the apps themselves where they target more UX.

  To cater to this requirement, API-based authentication capability is introduced which will provide the app developer the capability to implement a complete authentication capability within the application.

• OAuth 2.0 specifications
  Identity Server now supports following OAuth 2.0 specifications designed to protect APIs exposing high-value and sensitive (personal and other) data.

  • JWT Secured Authorization Response Mode
  • Pushed Authorization Requests

• Compliant with FAPI 1.0 Baseline and Advanced profiles

• First-class support for securing API resources
  Identity Server now offers comprehensive support for the API Authorization via RBAC.

• Command line utility to manage Identity Server configurations in CI/CD workflows

• FIPS 140-2 Compliance

• HYPR for passwordless and biometric authentication
  Identity Server now provides the HYPR connector as an authentication option for the applications.

Enhanced Features

• Branding and i18n support for end-user facing UIs and email templates
• Email and SMS OTP for passwordless login
• Idle account identification API
• Client-Id as an input parameter to perform OIDC RP-Initiated logout
• Use a different browser to open the email magic link and log in to the app

Deprecated features

Refer to the about this release section in the product documentation to find the deprecated from WSO2 IS 7.0.0 onwards. These features will be removed in a future release and we expect you to move to recommended solutions.

Fixes and Improvements

See the complete list of issues fixed in the latest WSO2 IS 7.0.0 release.

Documentation

The product documentation for this version is available at https://is.docs.wso2.com/en/7.0.0

Contribute to WSO2 Identity Server

Mailing Lists
Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussions related to the product in the architecture mailing list. If you have any questions regarding the product you can use our StackOverflow forum to raise them as well.

Developer List: iam-dev@wso2.org
Architecture List: architecture@wso2.org
User Forum: StackOverflow

Reporting Issues

We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server GIT Issues.

Important: And please be advised that security issues must be reported to security@wso2.com, not as GitHub issues, in order to reach the proper audience. We strongly advise following the WSO2 Security Vulnerability Reporting Guidelines when reporting the security issues.

~ The WSO2 Identity and Access Management Team ~

WSO2 Identity Server 7.0.0 RC5

We are pleased to announce the fifth release candidate of WSO2 Identity Server 7.0.0.

What is new in this release

WSO2 Identity Server 7.0.0 is the latest WSO2 Identity Server release and is the successor of WSO2 Identity Server 6.1.0. It contains the following new features and enhancements:

New Features

• Refreshing look and feel for the console UI
  The console just got a major upgrade with our brand-new, lightning-fast Oxygen UI to be consistent with the experience of Asgardeo UI! Beta console UI (accessible via /console) introduced in the 5.11.0 version is now available for production usage for administrative and developer tasks.

  With this upgrade concepts like service providers, identity providers, and inbound/outbound authentication that have been used in the carbon-based management console have changed to ‘applications’ and ‘connections’ respectively. Identity Server 7.0.0 includes application templates for SPA, web applications with server-side rendering, mobile applications, and M2M applications along with various authentication options to pick and choose from connections that include social login, MFA, passwordless, etc.

• Productized support for B2B CIAM use cases
  Identity Server now enables secure access for your B2B business customers with flexible organization management capabilities. B2B CIAM is the identity foundation that helps organizations that work with business customers, franchises, distributors and suppliers get their apps and services to market quickly and securely.

• Authentication API that facilitates implementing app-native authentication
  When developing applications (especially native/mobile apps) developers look at implementing their login flows within the apps themselves where they target more UX.

  To cater to this requirement, API-based authentication capability is introduced which will provide the app developer the capability to implement a complete authentication capability within the application.

• OAuth 2.0 specifications
  Identity Server now supports following OAuth 2.0 specifications designed to protect APIs exposing high-value and sensitive (personal and other) data.

  • JWT Secured Authorization Response Mode
  • Pushed Authorization Requests

• Compliant with FAPI 1.0 Baseline and Advanced profiles

• First-class support for securing API resources
  Identity Server now offers comprehensive support for the API Authorization via RBAC.

• Command line utility to manage Identity Server configurations in CI/CD workflows

• FIPS 140-2 Compliance

• HYPR for passwordless and biometric authentication
  Identity Server now provides the HYPR connector as an authentication option for the applications.

Enhanced Features

• Branding and i18n support for end-user facing UIs and email templates
• Email and SMS OTP for passwordless login
• Idle account identification API
• Client-Id as an input parameter to perform OIDC RP-Initiated logout
• Use a different browser to open the email magic link and log in to the app

Deprecated features

Refer to the about this release section in the product documentation to find the deprecated from WSO2 IS 7.0.0 onwards. These features will be removed in a future release and we expect you to move to recommended solutions.

Fixes and Improvements

See the complete list of issues fixed in the latest WSO2 IS 7.0.0 release.

Documentation

The product documentation for this version is available at https://is.docs.wso2.com/en/7.0.0

Contribute to WSO2 Identity Server

Mailing Lists
Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussions related to the product in the architecture mailing list. If you have any questions regarding the product you can use our StackOverflow forum to raise them as well.

Developer List: iam-dev@wso2.org
Architecture List: architecture@wso2.org
User Forum: StackOverflow

Reporting Issues

We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server GIT Issues.

Important: And please be advised that security issues must be reported to security@wso2.com, not as GitHub issues, in order to reach the proper audience. We strongly advise following the WSO2 Security Vulnerability Reporting Guidelines when reporting the security issues.

~ The WSO2 Identity and Access Management Team ~

WSO2 Identity Server 7.0.0 RC4

We are pleased to announce the fourth release candidate of WSO2 Identity Server 7.0.0.

What is new in this release

WSO2 Identity Server 7.0.0 is the latest WSO2 Identity Server release and is the successor of WSO2 Identity Server 6.1.0. It contains the following new features and enhancements:

New Features

• Refreshing look and feel for the console UI
  The console just got a major upgrade with our brand-new, lightning-fast Oxygen UI to be consistent with the experience of Asgardeo UI! Beta console UI (accessible via /console) introduced in the 5.11.0 version is now available for production usage for administrative and developer tasks.

  With this upgrade concepts like service providers, identity providers, and inbound/outbound authentication that have been used in the carbon-based management console have changed to ‘applications’ and ‘connections’ respectively. Identity Server 7.0.0 includes application templates for SPA, web applications with server-side rendering, mobile applications, and M2M applications along with various authentication options to pick and choose from connections that include social login, MFA, passwordless, etc.

• Productized support for B2B CIAM use cases
  Identity Server now enables secure access for your B2B business customers with flexible organization management capabilities. B2B CIAM is the identity foundation that helps organizations that work with business customers, franchises, distributors and suppliers get their apps and services to market quickly and securely.

• Authentication API that facilitates implementing app-native authentication
  When developing applications (especially native/mobile apps) developers look at implementing their login flows within the apps themselves where they target more UX.

  To cater to this requirement, API-based authentication capability is introduced which will provide the app developer the capability to implement a complete authentication capability within the application.

• OAuth 2.0 specifications
  Identity Server now supports following OAuth 2.0 specifications designed to protect APIs exposing high-value and sensitive (personal and other) data.

  • JWT Secured Authorization Response Mode
  • Pushed Authorization Requests

• Compliant with FAPI 1.0 Baseline and Advanced profiles

• First-class support for securing API resources
  Identity Server now offers comprehensive support for the API Authorization via RBAC.

• Command line utility to manage Identity Server configurations in CI/CD workflows

• FIPS 140-2 Compliance

• HYPR for passwordless and biometric authentication
  Identity Server now provides the HYPR connector as an authentication option for the applications.

Enhanced Features

• Branding and i18n support for end-user facing UIs and email templates
• Email and SMS OTP for passwordless login
• Idle account identification API
• Client-Id as an input parameter to perform OIDC RP-Initiated logout
• Use a different browser to open the email magic link and log in to the app

Deprecated features

Refer to the about this release section in the product documentation to find the deprecated from WSO2 IS 7.0.0 onwards. These features will be removed in a future release and we expect you to move to recommended solutions.

Fixes and Improvements

See the complete list of issues fixed in the latest WSO2 IS 7.0.0 release.

Documentation

The product documentation for this version is available at https://is.docs.wso2.com/en/7.0.0

Contribute to WSO2 Identity Server

Mailing Lists
Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussions related to the product in the architecture mailing list. If you have any questions regarding the product you can use our StackOverflow forum to raise them as well.

Developer List: iam-dev@wso2.org
Architecture List: architecture@wso2.org
User Forum: StackOverflow

Reporting Issues

We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server GIT Issues.

Important: And please be advised that security issues must be reported to security@wso2.com, not as GitHub issues, in order to reach the proper audience. We strongly advise following the WSO2 Security Vulnerability Reporting Guidelines when reporting the security issues.

~ The WSO2 Identity and Access Management Team ~

WSO2 Identity Server 7.0.0 RC3

We are pleased to announce the third release candidate of WSO2 Identity Server 7.0.0.

What is new in this release

WSO2 Identity Server 7.0.0 is the latest WSO2 Identity Server release and is the successor of WSO2 Identity Server 6.1.0. It contains the following new features and enhancements:

New Features

• Refreshing look and feel for the console UI
  The console just got a major upgrade with our brand-new, lightning-fast Oxygen UI to be consistent with the experience of Asgardeo UI! Beta console UI (accessible via /console) introduced in the 5.11.0 version is now available for production usage for administrative and developer tasks.

  With this upgrade concepts like service providers, identity providers, and inbound/outbound authentication that have been used in the carbon-based management console have changed to ‘applications’ and ‘connections’ respectively. Identity Server 7.0.0 includes application templates for SPA, web applications with server-side rendering, mobile applications, and M2M applications along with various authentication options to pick and choose from connections that include social login, MFA, passwordless, etc.

• Productized support for B2B CIAM use cases
  Identity Server now enables secure access for your B2B business customers with flexible organization management capabilities. B2B CIAM is the identity foundation that helps organizations that work with business customers, franchises, distributors and suppliers get their apps and services to market quickly and securely.

• Authentication API that facilitates implementing app-native authentication
  When developing applications (especially native/mobile apps) developers look at implementing their login flows within the apps themselves where they target more UX.

  To cater to this requirement, API-based authentication capability is introduced which will provide the app developer the capability to implement a complete authentication capability within the application.

• OAuth 2.0 specifications
  Identity Server now supports following OAuth 2.0 specifications designed to protect APIs exposing high-value and sensitive (personal and other) data.

  • JWT Secured Authorization Response Mode
  • Pushed Authorization Requests

• Compliant with FAPI 1.0 Baseline and Advanced profiles

• First-class support for securing API resources
  Identity Server now offers comprehensive support for the API Authorization via RBAC.

• Command line utility to manage Identity Server configurations in CI/CD workflows

• FIPS 140-2 Compliance

• HYPR for passwordless and biometric authentication
  Identity Server now provides the HYPR connector as an authentication option for the applications.

Enhanced Features

• Branding and i18n support for end-user facing UIs and email templates
• Email and SMS OTP for passwordless login
• Idle account identification API
• Client-Id as an input parameter to perform OIDC RP-Initiated logout
• Use a different browser to open the email magic link and log in to the app

Deprecated features

Refer to the about this release section in the product documentation to find the deprecated from WSO2 IS 7.0.0 onwards. These features will be removed in a future release and we expect you to move to recommended solutions.

Fixes and Improvements

See the complete list of issues fixed in the latest WSO2 IS 7.0.0 release.

Documentation

The product documentation for this version is available at https://is.docs.wso2.com/en/7.0.0

Contribute to WSO2 Identity Server

Mailing Lists
Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussions related to the product in the architecture mailing list. If you have any questions regarding the product you can use our StackOverflow forum to raise them as well.

Developer List: iam-dev@wso2.org
Architecture List: architecture@wso2.org
User Forum: StackOverflow

Reporting Issues

We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server GIT Issues.

Important: And please be advised that security issues must be reported to security@wso2.com, not as GitHub issues, in order to reach the proper audience. We strongly advise following the WSO2 Security Vulnerability Reporting Guidelines when reporting the security issues.

~ The WSO2 Identity and Access Management Team ~