# NextGen: Signicat Identity Broker

# 2 June 2022

  • Fixed polymorphic signature validation issues
  • Fixed remember TOTP text when set to 1 day
  • Various (internal) bugfixes & improvements

# 30 May 2022

  • Added IRMA preproduction connection
  • Various (internal) bugfixes & improvements

# 23 May 2022

  • Various (internal) bugfixes & improvements

# 17 May 2022

  • Various (internal) bugfixes & improvements

# 29 April 2022

  • Updated text on the OwnIdP TOTP onboarding page
  • Various (internal) bugfixes & improvements

# 19 April 2022

  • Various (internal) bugfixes & improvements

# 6 April 2022

  • Fixed bug related to eH service catalog updates
  • Added eID names to the OIDC well-known supported scopes
  • Updated navigation of the Configuration application
    • SP Connections and eID connections have gotten their own pages
    • Less used options moved under an 'Advanced' heading in the menu
  • Various (internal) bugfixes & improvements

# 1 April 2022

  • Added support for Rabobank as iDIN acquirer
  • Various (internal) bugfixes & improvements

# 22 March 2022

  • Added warning for when CIAM account password is about to expire
  • Added template for default SAML LoA contract
  • Various (internal) bugfixes & improvements

# 14 March 2022

  • Changing CIAM account password can be forced during login flow
  • Various (internal) bugfixes & improvements

# 9 March 2022

  • Various (internal) bugfixes & improvements

# 3 March 2022

  • Improved WCAG compliance on IdP selection screen
  • Various (internal) bugfixes & improvements

# 1 March 2022

  • Fixed TLS downgrade when adding BeID
  • Fixed: allowing ':' character in URLs
  • Various (internal) bugfixes & improvements

# 21 February 2022

  • Updated IdP simulator names (UI only)
  • Various (internal) bugfixes & improvements

# 10 February 2022

  • Various (internal) bugfixes & improvements

# 8 February 2022

  • Various (internal) bugfixes & improvements

# 1 February 2022

  • SP connections can now also be searched based on EntityID and/or OIN (search is only available when a lot of SP connections are configured)
  • Various (internal) bugfixes & improvements

# 27 January 2022

  • Various (internal) bugfixes & improvements

# 14 January 2022

  • Various (internal) bugfixes & improvements

# 7 January 2022

  • Fixed: Saml Form SP Connection Overrides AssertionConsumerServiceIndex
  • Various (internal) bugfixes & improvements

# 30 December 2021

  • Various (internal) bugfixes & improvements

# 23 December 2021

  • Small UI/text updates
  • Various (internal) bugfixes & improvements

# 14 December 2021

  • Fix for eHerkenning & eIDAS history in configuration dashboard
  • Various (internal) bugfixes & improvements

# 10 December 2021

  • Patched log4j vulnerability (implementation was not exploitable)

# 9 December 2021

  • Fix OIDC SP well known endpoint
  • Fix for certificate handling (after migration)

# 2 December 2021

  • Various (internal) bugfixes & improvements

# 22 November 2021

  • Various (internal) bugfixes & improvements

# 19 November 2021

  • Various (internal) bugfixes & improvements

# 11 November 2021

  • Various (internal) bugfixes & improvements

# 2 November 2021

  • Various (internal) bugfixes & improvements

# 25 October 2021

  • Added extra validation in IRMA authentication
  • Various (internal) bugfixes & improvements

# 14 October 2021

  • Various UI improvements
  • Various (internal) bugfixes & improvements

# 11 October 2021

  • Various (internal) bugfixes & improvements

# 5 October 2021

  • Improved account linking flow when multiple organisations exists with the same KvK number
  • Various UI & text improvements
  • Various (internal) bugfixes & improvements

# 29 September 2021

  • Various UI improvements
  • Various (internal) bugfixes & improvements

# 10 September 2021

  • Add additional attributes to UZI pas IdP response
  • Various (internal) bugfixes & improvements

# 30 August 2021

  • Updated styling of upload fields in configuration management application
  • Various (internal) bugfixes & improvements

# 26 August 2021

  • Fixed double encoding on DigiD app2app
  • Updated styling of information boxes in configuration management application
  • Various (internal) bugfixes & improvements

# 19 August 2021

  • Fixed OIDC PKCE flow SP logo upload for DigiD app2app
  • Added UTC indication to time on error pages
  • HTTP connections are no longer allowed on preproduction
  • Various (internal) bugfixes & improvements

# 9 August 2021

  • Icon for DigiD App2App is now configurable
  • Added additional information to message log for failed account linking flows
  • Added support for Transient NameID on SP connection
  • Fixed: Setting icon for custom OIDC connection
  • Various (internal) bugfixes & improvements

# 22 July 2021

  • Various (internal) bugfixes & improvements

# 19 July 2021

  • Made distinction between authentication and authorization (lookup) connections more explicit in message log
  • Various (internal) bugfixes & improvements

# 16 July 2021

  • TOTP issuer label is configurable (by technical support)
  • Various (internal) bugfixes & improvements

# 14 July 2021

  • Updated Favicon
  • Fixed navigation from connection to message log
  • Various (internal) bugfixes & improvements

# 9 July 2021

  • Fixed logout not working in all scenario's
  • Made Facebook Response URL readonly
  • Various (internal) bugfixes & improvements

# 5 July 2021

  • Account linking: Allow onboarding via a 'consumer idp' for bussiness flow
  • Various (internal) bugfixes & improvements

# 1 July 2021

  • Fixed bug with regard to navigating to message log with filters
  • Removed certificate login option from CIAM login screen
  • Removed LoA1 references for eHerkenning
  • Updated font to match new styling
  • Various (internal) bugfixes & improvements

# 30 June 2021

  • Updated styling to match new Signicat style
  • Various (internal) bugfixes & improvements

# 29 June 2021

  • Updated 'Remember me' texts on CIAM login screen to be more clear
  • Return CIAM externalID to SP
  • Add tooltip for long organisation names in CIAM organisation selection screen
  • Various (internal) bugfixes & improvements

# 24 June 2021

  • Added URL validation on all URL input fields
  • Various (internal) bugfixes & improvements

# 18 June 2021

  • Various (internal) bugfixes & improvements

# 17 June 2021

  • Added protocol logo's in Service Provider section
  • Various (internal) bugfixes & improvements

# 16 June 2021

  • Added validation for the email input (on certificate expiration notifications)
  • Various (internal) bugfixes & improvements

# 15 June 2021

  • Various (internal) bugfixes & improvements

# 10 June 2021

  • Service catalog management made available when eH/eIDAS connection is active
  • Various (internal) bugfixes & improvements

# 8 June 2021

  • Improved readability of message log
  • Various (internal) bugfixes & improvements

# 4 June 2021

  • Navigation of message log improved
  • Message log messages are displayed in more readable format
  • Various (internal) bugfixes & improvements

# 1 June 2021

  • Various (internal) bugfixes & improvements

# 27 May 2021

  • Set maximum number of records on download of message log
  • Various (internal) bugfixes & improvements

# 19 May 2021

  • Made maximum number of days to remember device for TOTP configurable
  • Various (internal) bugfixes & improvements

# 18 May 2021

  • Added requested LoA to Broker Services
  • Various (internal) bugfixes & improvements

# 12 May 2021

  • Fixed: eH Service catalog issue
  • Various (internal) bugfixes & improvements

# 10 May 2021

  • Fixed: S-IAM connection cannot be deleted
  • Signing certificates can be deleted from the UI
  • Various (internal) bugfixes & improvements

# 7 May 2021

  • Fixed revocation list issue with Digitaal Paspoort IdP
  • Various (internal) bugfixes & improvements

# 5 May 2021

  • Show custom error response if S-IAM user wants to login with inactive account
  • Improved some NL translations in TOTP screens
  • Added SCIM requests and responses (Broker - S-IAM) to message log
  • Various (internal) bugfixes & improvements

# 29 April 2021

  • Added Digital Passport to IdP simulator
  • Added possibility to add 2FA to external (OpenToken) IdP
  • Various (internal) bugfixes & improvements

# 22 April 2021

  • SP connection name added to certificate expiration email
  • Previously deleted MFA connections made visible in the message log
  • Added Norwegian BankID
  • Various (internal) bugfixes & improvements

# 19 April 2021

  • Audit log of access to message log made visible.
  • Added MFA explicitly to the message log
  • Added BSNk structure version to service catalog management
  • Itsme service codes made more flexible
  • Various (internal) bugfixes & improvements

# 7 April 2021

  • Return MFA issuer in response to SP
  • Various (internal) bugfixes & improvements

# 1 April 2021

  • Use Accept-Language from browser to set broker locale
  • Digitaal Paspoort: Return email as subject
  • Various (internal) bugfixes & improvements

# 26 March 2021

  • Added configuration to determine which certificate to use for signing, when multiple valid certificates are available.
  • Various (internal) bugfixes & improvements

# 18 March 2021

  • Various (internal) bugfixes & improvements

# 17 March 2021

  • Added option to change the OIDC client secret on a SP connection
  • Various (internal) bugfixes & improvements

# 12 March 2021

  • Added broker services, this can be used to filter available IdPs and provide default scopes to IdPs, based on the SP connection or request
  • Various (internal) bugfixes & improvements

# 11 March 2021

  • Various (internal) bugfixes & improvements

# 5 March 2021

  • Add message to user when he is temporarily blocked (using Signicat IAM login)
  • Various (internal) bugfixes & improvements

# 3 March 2021

  • Various (internal) bugfixes & improvements

# 1 March 2021

  • Assertion of IdP send in SP response (via SAML)
  • Made message log retention period configurable (default 3 months)
  • Various (internal) bugfixes & improvements

# 18 February 2021

  • Added consent popup for lowering TLS version on adding BeID authentication provider
  • Attributes within attribute filter are sorted alphabetically
  • Added support for iOS usage of universal links
  • Updated DigiD logo
  • Various (internal) bugfixes & improvements

# 16 February 2021

  • Create Level of Assurance contract from template (DigiD & eHerkenning avialable). This can also be done from the SP connection screen if no contract exists
  • Import functionality or attribute filters & LoA contracts
  • Various (internal) bugfixes & improvements

# 11 February 2021

  • Added Cleverbase as IdP
  • Various (internal) bugfixes & improvements

# 4 February 2021

  • Added UZI-pas as IdP
  • Add broker domain information to certificate expiration email
  • Various (internal) bugfixes & improvements

# 1 February 2021

  • Various (internal) bugfixes & improvements

# 22 January 2021

  • Added: Option to automatically send (SP) certificate expiration notifications
  • Various (internal) bugfixes & improvements

# 13 January 2021

  • Various (internal) bugfixes & improvements

# 12 January 2021

  • Various (internal) bugfixes & improvements

# 8 January 2021

  • Added support for transient subject identifier for OIDC SP connections
  • Added multi lingual support in the configuration interface (Dutch & English)
  • Various (internal) bugfixes & improvements

# 4 January 2021

  • iDIN QR code login possible via iDIN connection (requires additional configuration, please contact technical support)
  • Allow username and email as login with CIAM account
  • Various (internal) bugfixes & improvements

# 22 December 2020

  • Bugfix for eHerkenning service catalog
  • Various (internal) bugfixes & improvements

# 14 December 2020

  • Bugfix: Fixing login issues on Broker configuration for certain users

# 10 December 2020

  • Return Itsme address as separate attributes if multple attributes are returned by Itsme
  • eHerkenning/eIDAS: Added the option do download the BSNk decryption keys
  • Various (internal) bugfixes & improvements

# 8 December 2020

  • Added LoA level 2+ to LoA contracts
  • Bugfixes:
    • Return CIAM organisation attributes to SP
    • Fix cancel button on LoA contract page
  • Various (internal) bugfixes & improvements

# 3 December 2020

  • Rebranding from Connectis styling to Signicat styling
  • OIDC SP SLO backchannel logout added
  • Preparations for iDIN QR code login
  • Added export functionality for shared configuration items
  • Added support for past/deleted connections in message log
  • eHerkenning service catalog:
    • Add field validations
    • Automate service catalog certificate when broker decryption in turned on
  • Bugfixes:
    • CIAM cancel response did not appear in the log
    • CIAM organisation attributes are now returned to SP
    • Fix download link in message log
    • Fix Service Catalog download button
    • Make it possible to set OIDC SP maxSession validitry in minutes
  • Various (internal) bugfixes & improvements

# 17 November 2020

  • Added 'Show Usage' functionality for shared configuration items
  • OIDC: Support for IdP initiated Logout
  • Various (internal) bugfixes & improvements

# 12 November 2020

  • Added more flexibility (units of time) to 'duration' settings
  • eHerkenning: in case of eIDAS-inbound service, automatically add EB idp scoping
  • Various (internal) bugfixes & improvements

# 10 November 2020

  • eHerkenning: add response attribute to attributeLabel mappings (for OIDC SP connections)
  • Various (internal) bugfixes & improvements

# 9 November 2020

  • SP URL can be added to the SP configuration
  • Small UI updates for consistency
  • Various (internal) bugfixes & improvements

# 3 November 2020

  • eHerkenning: Added check if requested service exists in the service catalog
  • Message log: Added possibility to search by part of the error code id
  • OIDC SP: Added revocation endpoint
  • Various (internal) bugfixes & improvements

# 29 October 2020

  • Allow http redirect URLs on OIDC SP configuration
  • Added filter option on CIAM company selection during login
  • Improve speed of DNSSEC check
  • Improvements for OIDC SP session management
  • Message log: shows error id in table
  • Various (internal) bugfixes & improvements

# 20 October 2020

  • Added BeID support (x509 certificate)
    • Only certificate information can be returned
  • Added Spanish FNMT certificate support (x509)
  • Improvements for OIDC SP session management
    • Introduce refresh token validity & max session validity
    • Implement refresh token request
    • Remove authorization code once it is used
  • Added Belgian OrganizationId Lookup support
  • Added initial support for eH/eIDAS Service Catalog management
  • Added support for AttributeConsumingService in SAML SP metadata
  • Various (internal) usability improvements
    • Show nice error, with back button, when no X509 certificate supplied
  • Various bugfixes:
    • Fix Enable/Disable connection for DigiD
    • Fix cancel behavior on Broker Settings screen
    • Webpage becomes unresponsive when entering invalid OpenID provider URI
    • OIDC SP: Refresh is broken

# 1 October 2020

  • Added Digital Passport login support
  • Added other iDIN DISP connections support
  • IdP Simulator: added eIDAS support
  • Added SP connection validations
  • Added auditing of IdP simulator requests and responses
  • Added setting for requiring authentication for usage of SP simulator
  • Various (internal) bugfixes & improvements

# 23 September 2020

  • IdP Simulator: added eHerkenning support
  • Improved loading speed of history
  • Various (internal) bugfixes & improvements

# 22 September 2020

  • Internal cleanup of unused components

# 21 September 2020

  • Added Itsme support
  • IdP Simulator: add button to trigger an error
  • Obtain OIN from PKIo certificate for eHerkenning connections
  • Various (internal) bugfixes & improvements

# 15 September 2020

  • eHerkenning/eIDAS: connection fails if there is no attributeConsumingServiceIndex
  • eHerkenning/eIDAS: Support for specifying a default service index
  • Bugfix: SAML SP redirect binding is broken
  • Various (internal) bugfixes & improvements

# 11 September 2020

# 10 September 2020

  • Added support for DigiD (SAML)
  • Added support for eHerkenning / eIDAS
  • Added support for disabling connections
  • Added Audit message log download option
  • IdP Simulator: added DigiD support
  • IdP Simulator: added iDIN support
  • Added validation for IdP connections
  • Added Metadata contact information
  • Added support for Encrypted Attributes in SAML SP connection
  • Added support for requestedLoA on OIDC SP connections
  • Added support for OIDC IdP frontchannel logout
  • SP simulator: Always use forceAuthn on Test button
  • Various (internal) bugfixes & improvements

# 20 August 2020

  • Add support for customer information to SAML metadata
  • Various (internal) bugfixes & improvements

# 17 August 2020

  • Support showing iDIN Bank selection screen
  • Added filtering to configuration history
  • Added support for OIDC IdP connection setup via URL
  • Added support for OIDC IdP frontchannel logout
  • Added support for uploading certificates on SP SAML form
  • Show certificate information in Metadata Form (for SAML SP connections)
  • Added support for Idp initiated logout requests
  • Added DNSSEC check for relevant IdPs
  • Added PKIo certificate check for relevant IdPs
  • Various (internal) bugfixes & improvements

# 4 August 2020

  • Added support for permissions restricting functionality
  • Various (internal) bugfixes & improvements

# 31 July 2020

  • Added iDIN support (DISP connections)
  • Added support for (internal) federation management

# 28 July 2020

  • Small (internal) bugfix

# 27 July 2020

  • Added link from connection configuration to pre-filtered MessageLog
  • Various (internal) bugfixes & improvements

# 22 July 2020

  • Various (internal) bugfixes & improvements

# 17 July 2020

  • Added notification for SP connection certificate expiration
  • Added logo from theming session to broker (login) screens
  • Various (internal) bugfixes & improvements

# 14 July 2020

  • Various (internal) bugfixes & improvements

# 7 July 2020

Last updated: 4/11/23, 2:27:56 PM UTC