You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@syncope.apache.org by "Francesco Chicchiriccò (Confluence)" <no...@apache.org> on 2019/09/12 08:30:00 UTC

[CONF] Apache Syncope > Jazz

There's **1 new edit** on this page  
---  
|  
---  
|  | [![page icon](cid:page-
icon)](https://cwiki.apache.org/confluence/display/SYNCOPE/Jazz?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1568277000295&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=view
"page icon")  
---  
[Jazz](https://cwiki.apache.org/confluence/display/SYNCOPE/Jazz?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1568277000295&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=view
"Jazz")  
|  |  |  |  | ![](cid:avatar_78b9d98d15f2e9b7250a2887bcf9b144) |  | Francesco
Chicchiriccò edited this page  
---  
|  
|  | Here's what changed:  
---  
|

#  |
![](https://cwiki.apache.org/confluence/s/en_GB/8100/6ef1ce95c788ac159314a8fa6387047b8d1cc9fb/_/images/icons/macrobrowser/dropdown/toc.png)
Table of Contents  
---  
| maxLevel | 1  
---|---  
style | decimal  
2.0.14 (September 12th, 2019)

##  Issues

###  Bug

  * [[SYNCOPE-1467](https://issues.apache.org/jira/browse/SYNCOPE-1467)] - RDN not allowed when an attribute of the group present also in the DN is changed
  * [[SYNCOPE-1472](https://issues.apache.org/jira/browse/SYNCOPE-1472)] - Resource association is duplicated on database after update, assign or link operations
  * [[SYNCOPE-1475](https://issues.apache.org/jira/browse/SYNCOPE-1475)] - Activiti modeler is not rendered on Google Chrome
  * [[SYNCOPE-1476](https://issues.apache.org/jira/browse/SYNCOPE-1476)] - Error while creating Enum schema from Admin Console
  * [[SYNCOPE-1477](https://issues.apache.org/jira/browse/SYNCOPE-1477)] - jQuery UI's spinner not rendered
  * [[SYNCOPE-1480](https://issues.apache.org/jira/browse/SYNCOPE-1480)] - Elasticsearch:dynrealm assignment not updated on condition change
  * [[SYNCOPE-1481](https://issues.apache.org/jira/browse/SYNCOPE-1481)] - Invalid values when saving a membership attribute of type date
  * [[SYNCOPE-1484](https://issues.apache.org/jira/browse/SYNCOPE-1484)] - syncope-ide-netbeans submodule fails to find netbeans dependency
  * [[SYNCOPE-1485](https://issues.apache.org/jira/browse/SYNCOPE-1485)] - Reindex of elasticsearch ends with memory error in case of huge amount of data
  * [[SYNCOPE-1487](https://issues.apache.org/jira/browse/SYNCOPE-1487)] - Build Instructions do not say that the "patch" program is needed
  * [[SYNCOPE-1488](https://issues.apache.org/jira/browse/SYNCOPE-1488)] - Change to MVM Env for JDK > 8.00
  * [[SYNCOPE-1492](https://issues.apache.org/jira/browse/SYNCOPE-1492)] - Build Instructions are missing an EVN (DOCKER_HOST) needed for mvn -Ppostgres-it
  * [[SYNCOPE-1493](https://issues.apache.org/jira/browse/SYNCOPE-1493)] - Mapping unique schema as remote key never matches internal objects

###  Improvement

  * [[SYNCOPE-1468](https://issues.apache.org/jira/browse/SYNCOPE-1468)] - Allow for configurable org.quartz.jobStore.misfireThreshold
  * [[SYNCOPE-1473](https://issues.apache.org/jira/browse/SYNCOPE-1473)] - Provide a PropagationActions to maintain a conservative membership policy management

###  Task

  * [[SYNCOPE-1464](https://issues.apache.org/jira/browse/SYNCOPE-1464)] - Upgrade to Apache Netbeans Maven dependencies

#  2.0.13 (April 19th, 2019)

**Apache Syncope 2.0.13 Jazz**  is a maintenance release.

![](https://cwiki.apache.org/confluence/s/en_GB/8100/6ef1ce95c788ac159314a8fa6387047b8d1cc9fb/_/plugins/servlet/confluence/placeholder/macro-
icon?name=info) Info  
---  
| title | Upgrade procedure  
---|---  
  
Upgrading from 2.0.12? There are [some
notes](/confluence/pages/viewpage.action?pageId=112821067) about this process.  
  
##  Issues

###  Bug

  * [[SYNCOPE-1428](https://issues.apache.org/jira/browse/SYNCOPE-1428)] - APIs to read by key return 404 instead of 401 for not authenticated calls
  * [[SYNCOPE-1429](https://issues.apache.org/jira/browse/SYNCOPE-1429)] - Wildcard case-insesitive queries do not work with Elasticsearch
  * [[SYNCOPE-1430](https://issues.apache.org/jira/browse/SYNCOPE-1430)] - ItemTransformer for Date schemas throws NPE
  * [[SYNCOPE-1438](https://issues.apache.org/jira/browse/SYNCOPE-1438)] - "changePwdDate" field is not initialized when create a new user with the specified password
  * [[SYNCOPE-1439](https://issues.apache.org/jira/browse/SYNCOPE-1439)] - User membership attributes not updated
  * [[SYNCOPE-1440](https://issues.apache.org/jira/browse/SYNCOPE-1440)] - Pagination of Users/Groups doesn't work as expected with Elasticsearch
  * [[SYNCOPE-1442](https://issues.apache.org/jira/browse/SYNCOPE-1442)] - Inactive Job with cron expression set is executed anyway
  * [[SYNCOPE-1443](https://issues.apache.org/jira/browse/SYNCOPE-1443)] - Changing Display Rows number in Reconciliation Resource Panel doesn't work
  * [[SYNCOPE-1450](https://issues.apache.org/jira/browse/SYNCOPE-1450)] - Audit: sensitive information not masked by default during update
  * [[SYNCOPE-1452](https://issues.apache.org/jira/browse/SYNCOPE-1452)] - Notification about is not deleted after update
  * [[SYNCOPE-1453](https://issues.apache.org/jira/browse/SYNCOPE-1453)] - MappingItem with "mustChangePassword" field cannot be provisioned and updated during import
  * [[SYNCOPE-1454](https://issues.apache.org/jira/browse/SYNCOPE-1454)] - Avoid duplicated Propagation Tasks
  * [[SYNCOPE-1457](https://issues.apache.org/jira/browse/SYNCOPE-1457)] - NonAlphaNumeric policy pattern matches the "Not word" character class

###  Improvement

  * [[SYNCOPE-1433](https://issues.apache.org/jira/browse/SYNCOPE-1433)] - Unflag/flag uniqueness shouldn't be permitted
  * [[SYNCOPE-1434](https://issues.apache.org/jira/browse/SYNCOPE-1434)] - getRemoteObject into AbstractPropagationTaskExecutor does not check for null object before retrieving attribute from
  * [[SYNCOPE-1436](https://issues.apache.org/jira/browse/SYNCOPE-1436)] - Remove pullPolicy EAGER fetchType from JPAExternalResource
  * [[SYNCOPE-1441](https://issues.apache.org/jira/browse/SYNCOPE-1441)] - Perform in-memory match for dynamic conditions
  * [[SYNCOPE-1444](https://issues.apache.org/jira/browse/SYNCOPE-1444)] - Pull correlation rules: allow to discriminate ongoing event
  * [[SYNCOPE-1449](https://issues.apache.org/jira/browse/SYNCOPE-1449)] - Support multi-value attributes in JEXL expressions

# 2.0.12 (January 17th, 2019)

...

Now both Admin Console and Enduser UI implement accessibility features to help
usage by the visually impaired.

##  Issues

###  Bug

  * [[SYNCOPE-1391](https://issues.apache.org/jira/browse/SYNCOPE-1391)] - Check template for confirmPasswordReset and mustChangePassword
  * [[SYNCOPE-1393](https://issues.apache.org/jira/browse/SYNCOPE-1393)] - jexl function fullPath2Dn return invalid value for ROOT realm
  * [[SYNCOPE-1398](https://issues.apache.org/jira/browse/SYNCOPE-1398)] - Console stucks on update with unique key constraint violation
  * [[SYNCOPE-1405](https://issues.apache.org/jira/browse/SYNCOPE-1405)] - Error during db initialization: views.xml always set for PostgreSQL
  * [[SYNCOPE-1407](https://issues.apache.org/jira/browse/SYNCOPE-1407)] - Date pattern ignored by widget
  * [[SYNCOPE-1408](https://issues.apache.org/jira/browse/SYNCOPE-1408)] - Partial user edit via Role layout implies removing all unmanaged attributes
  * [[SYNCOPE-1411](https://issues.apache.org/jira/browse/SYNCOPE-1411)] - User/Any object updates generate attributes with null owner in case of patches involving membership attributes
  * [[SYNCOPE-1417](https://issues.apache.org/jira/browse/SYNCOPE-1417)] - Search with order by two plain attributes gives no results
  * [[SYNCOPE-1419](https://issues.apache.org/jira/browse/SYNCOPE-1419)] - User and AnyObject search fails in case of not leaf conditions given on multivalue fields
  * [[SYNCOPE-1420](https://issues.apache.org/jira/browse/SYNCOPE-1420)] - Expired Access Tokens might impede successful authentication
  * [[SYNCOPE-1425](https://issues.apache.org/jira/browse/SYNCOPE-1425)] - Mapping item transformers do not work for non-string values

...

  * [[SYNCOPE-1368](https://issues.apache.org/jira/browse/SYNCOPE-1368)] - Add some accessibility features to Console

###  Improvement

  * [[SYNCOPE-1394](https://issues.apache.org/jira/browse/SYNCOPE-1394)] - Add un-claim capability for requests
  * [[SYNCOPE-1396](https://issues.apache.org/jira/browse/SYNCOPE-1396)] - Give the possibility to configure TLS client parameters
  * [[SYNCOPE-1409](https://issues.apache.org/jira/browse/SYNCOPE-1409)] - Avoid double round-trip to External Resource during Push
  * [[SYNCOPE-1412](https://issues.apache.org/jira/browse/SYNCOPE-1412)] - Search for identities with null attributes can be improved
  * [[SYNCOPE-1416](https://issues.apache.org/jira/browse/SYNCOPE-1416)] - remove user_search_null_attr view
  * [[SYNCOPE-1422](https://issues.apache.org/jira/browse/SYNCOPE-1422)] - Permit to provide custom implementation of NotificationManager and AuditManager
  * [[SYNCOPE-1424](https://issues.apache.org/jira/browse/SYNCOPE-1424)] - Improve Propagation task ordered search

...

![](https://cwiki.apache.org/confluence/s/en_GB/8100/6ef1ce95c788ac159314a8fa6387047b8d1cc9fb/_/plugins/servlet/confluence/placeholder/macro-
icon?name=info) Info  
---  
| title | Upgrade procedure  
---|---  
  
Upgrading from 2.0.10? There are [some
notes](/confluence/pages/viewpage.action?pageId=95654021) about this process.  
  
###  Bug

  * [[SYNCOPE-1360](https://issues.apache.org/jira/browse/SYNCOPE-1360)] - Delegated administration to Dynamic Realms not possible
  * [[SYNCOPE-1361](https://issues.apache.org/jira/browse/SYNCOPE-1361)] - Custom audit appender does not work after a restart
  * [[SYNCOPE-1366](https://issues.apache.org/jira/browse/SYNCOPE-1366)] - Audit events ownership always set to admin user
  * [[SYNCOPE-1370](https://issues.apache.org/jira/browse/SYNCOPE-1370)] - Password reset succeeds also on wrong captcha
  * [[SYNCOPE-1372](https://issues.apache.org/jira/browse/SYNCOPE-1372)] - Password history checks not effective
  * [[SYNCOPE-1373](https://issues.apache.org/jira/browse/SYNCOPE-1373)] - Custom task schedule is reset after update
  * [[SYNCOPE-1374](https://issues.apache.org/jira/browse/SYNCOPE-1374)] - Concurrent propagation tasks for non-Master domains not saved
  * [[SYNCOPE-1375](https://issues.apache.org/jira/browse/SYNCOPE-1375)] - The existence of a membership attribute mapping implies membership creation during pull
  * [[SYNCOPE-1376](https://issues.apache.org/jira/browse/SYNCOPE-1376)] - swagger-ui server URL incorrect behind ssl reverse proxy
  * [[SYNCOPE-1377](https://issues.apache.org/jira/browse/SYNCOPE-1377)] - Wrong X-Syncope-Domain header does not throw an error
  * [[SYNCOPE-1380](https://issues.apache.org/jira/browse/SYNCOPE-1380)] - During Push or Pull, if policy with conflict resolution IGNORE is set, the process is interrupted as soon as such setting applies
  * [[SYNCOPE-1383](https://issues.apache.org/jira/browse/SYNCOPE-1383)] - Exception during "getObject" from external resource
  * [[SYNCOPE-1387](https://issues.apache.org/jira/browse/SYNCOPE-1387)] - ClassCast exception when pull realms
  * [[SYNCOPE-1388](https://issues.apache.org/jira/browse/SYNCOPE-1388)] - mustChangePassword flag does not prevent user from invoking actions
  * [[SYNCOPE-1389](https://issues.apache.org/jira/browse/SYNCOPE-1389)] - In case of virtual attribute mapping, propagation is always set as UPDATE also in case of CREATE
  * [[SYNCOPE-1390](https://issues.apache.org/jira/browse/SYNCOPE-1390)] - Pull Realms: pull task with Unmatching Rules: PROVISION shouldn't create propagation task

...

  * [[SYNCOPE-1019](https://issues.apache.org/jira/browse/SYNCOPE-1019)] - Template mechanism for Enduser UI
  * [[SYNCOPE-1367](https://issues.apache.org/jira/browse/SYNCOPE-1367)] - Add some accessibility features to Enduser

###  Improvement

  * [[SYNCOPE-1379](https://issues.apache.org/jira/browse/SYNCOPE-1379)] - Make configurable resource check timeout
  * [[SYNCOPE-1382](https://issues.apache.org/jira/browse/SYNCOPE-1382)] - Failure specifying push task filters including db column mapped as integer
  * [[SYNCOPE-1384](https://issues.apache.org/jira/browse/SYNCOPE-1384)] - SAML 2.0: Allow to customize RequestedAuthnContext for a given Service Provider
  * [[SYNCOPE-1385](https://issues.apache.org/jira/browse/SYNCOPE-1385)] - Priority propagation timeout hard coded into PriorityPropagationTaskExecutor

...

![](https://cwiki.apache.org/confluence/s/en_GB/8100/6ef1ce95c788ac159314a8fa6387047b8d1cc9fb/_/plugins/servlet/confluence/placeholder/macro-
icon?name=info) Info  
---  
| title | Upgrade procedure  
---|---  
  
Upgrading from 2.0.9? There are [some
notes](/confluence/pages/viewpage.action?pageId=89068863) about this process.  
  
##  Issues

###  Bug

  * [[SYNCOPE-1333](https://issues.apache.org/jira/browse/SYNCOPE-1333)] - Missing virtual attribute value in case of type extension
  * [[SYNCOPE-1337](https://issues.apache.org/jira/browse/SYNCOPE-1337)] - Password history policy is not enforced on salted passwords
  * [[SYNCOPE-1338](https://issues.apache.org/jira/browse/SYNCOPE-1338)] - Double type conversion applied during pull leads to errors
  * [[SYNCOPE-1339](https://issues.apache.org/jira/browse/SYNCOPE-1339)] - Enduser spinner does not apply to the whole page
  * [[SYNCOPE-1340](https://issues.apache.org/jira/browse/SYNCOPE-1340)] - Cannot update membership attribute
  * [[SYNCOPE-1343](https://issues.apache.org/jira/browse/SYNCOPE-1343)] - Attributes are not reset after pull of null values
  * [[SYNCOPE-1344](https://issues.apache.org/jira/browse/SYNCOPE-1344)] - CORE_SCHEME not being updated in enduser.properties
  * [[SYNCOPE-1346](https://issues.apache.org/jira/browse/SYNCOPE-1346)] - Adding a new task while re-executing a propagation task
  * [[SYNCOPE-1347](https://issues.apache.org/jira/browse/SYNCOPE-1347)] - Invocation Problem calling org.apache.syncope.installer.processes.ArchetypeProcess
  * [[SYNCOPE-1350](https://issues.apache.org/jira/browse/SYNCOPE-1350)] - Date values not formatted according to the conversion pattern
  * [[SYNCOPE-1352](https://issues.apache.org/jira/browse/SYNCOPE-1352)] - Group wizard doesn't update the plain attributes
  * [[SYNCOPE-1353](https://issues.apache.org/jira/browse/SYNCOPE-1353)] - DBPasswordPropagationActions link in the reference guide is wrong
  * [[SYNCOPE-1354](https://issues.apache.org/jira/browse/SYNCOPE-1354)] - Push Tasks do not send status onto External Resources
  * [[SYNCOPE-1356](https://issues.apache.org/jira/browse/SYNCOPE-1356)] - LDAPMembershipPullActions does not remove memberships
  * [[SYNCOPE-1357](https://issues.apache.org/jira/browse/SYNCOPE-1357)] - MemoryVirAttrCache not working
  * [[SYNCOPE-1358](https://issues.apache.org/jira/browse/SYNCOPE-1358)] - Search by boolean value does not work from Admin Console

###  Improvement

  * [[SYNCOPE-1328](https://issues.apache.org/jira/browse/SYNCOPE-1328)] - Need option to configure the encryption algorithm used to generate JWT.
  * [[SYNCOPE-1329](https://issues.apache.org/jira/browse/SYNCOPE-1329)] - JWT: need support for asymmetric key
  * [[SYNCOPE-1336](https://issues.apache.org/jira/browse/SYNCOPE-1336)] - Add pagination for approvals forms
  * [[SYNCOPE-1341](https://issues.apache.org/jira/browse/SYNCOPE-1341)] - Domain should be configurable parameter for syncope-enduser docker image
  * [[SYNCOPE-1355](https://issues.apache.org/jira/browse/SYNCOPE-1355)] - Document how to access services when using Docker Compose

...

  * Reference [Password Rule](http://syncope.apache.org/docs/reference-guide.html#password-rules) provided relying on the famous ["Have I been Pwned?"](https://haveibeenpwned.com/) service
  * Manual reconciliation tool for Admin Console: given a User / Group / Any Object and an External Resource, allows to examine the current status, force pushing or pulling values for mapped attributes
  * REST now supports `application/yaml` for exchanging payloads, besides `application/json` and `application/xml`

##  Issues

###  Bug

  * [[SYNCOPE-1282](https://issues.apache.org/jira/browse/SYNCOPE-1282)] - Search schema error
  * [[SYNCOPE-1285](https://issues.apache.org/jira/browse/SYNCOPE-1285)] - Quartz db init on HA environments occurs on all nodes
  * [[SYNCOPE-1288](https://issues.apache.org/jira/browse/SYNCOPE-1288)] - Propagation tasks list not keeping order while browsing pages
  * [[SYNCOPE-1290](https://issues.apache.org/jira/browse/SYNCOPE-1290)] - Deletion of only schema entry breaks schema UI
  * [[SYNCOPE-1291](https://issues.apache.org/jira/browse/SYNCOPE-1291)] - Cannot login again into Admin Console after Session Expired
  * [[SYNCOPE-1293](https://issues.apache.org/jira/browse/SYNCOPE-1293)] - Default password reset notifications not working
  * [[SYNCOPE-1294](https://issues.apache.org/jira/browse/SYNCOPE-1294)] - Plainschema panel doesn't display the assigned validator class
  * [[SYNCOPE-1297](https://issues.apache.org/jira/browse/SYNCOPE-1297)] - Select all + bulk button redirecting to top of the page on click
  * [[SYNCOPE-1298](https://issues.apache.org/jira/browse/SYNCOPE-1298)] - Quartz jobs with no matching Task or Report not visible from Admin Console
  * [[SYNCOPE-1301](https://issues.apache.org/jira/browse/SYNCOPE-1301)] - Token creation is not threadsafe
  * [[SYNCOPE-1303](https://issues.apache.org/jira/browse/SYNCOPE-1303)] - Content migration from 1.2 problems
  * [[SYNCOPE-1304](https://issues.apache.org/jira/browse/SYNCOPE-1304)] - Order Groups by userOwner throws DataIntegrityViolation exception
  * [[SYNCOPE-1306](https://issues.apache.org/jira/browse/SYNCOPE-1306)] - Date value without a conversion pattern not shown by Admin Console
  * [[SYNCOPE-1307](https://issues.apache.org/jira/browse/SYNCOPE-1307)] - Wrong export order for Realms
  * [[SYNCOPE-1308](https://issues.apache.org/jira/browse/SYNCOPE-1308)] - Exception getting users with orderBy on SyncopeClient API with Postgres 10.3
  * [[SYNCOPE-1309](https://issues.apache.org/jira/browse/SYNCOPE-1309)] - Enduser UI does not remove Access Token on Finish
  * [[SYNCOPE-1312](https://issues.apache.org/jira/browse/SYNCOPE-1312)] - Console CSS is depending from Google fonts
  * [[SYNCOPE-1314](https://issues.apache.org/jira/browse/SYNCOPE-1314)] - Bulk action from reconciliation section ever shows NOT ATTEMPTED after provision
  * [[SYNCOPE-1315](https://issues.apache.org/jira/browse/SYNCOPE-1315)] - Propagation task sorting by Object Type not working as expected
  * [[SYNCOPE-1317](https://issues.apache.org/jira/browse/SYNCOPE-1317)] - RuntimeException when remove all schemas
  * [[SYNCOPE-1318](https://issues.apache.org/jira/browse/SYNCOPE-1318)] - Future task rejected from ScheduledThreadPoolExecutor
  * [[SYNCOPE-1319](https://issues.apache.org/jira/browse/SYNCOPE-1319)] - Pull Task template not assigning roles
  * [[SYNCOPE-1320](https://issues.apache.org/jira/browse/SYNCOPE-1320)] - Push task report generation fails in case of IgnoreProvisionException
  * [[SYNCOPE-1321](https://issues.apache.org/jira/browse/SYNCOPE-1321)] - Search doesn't work for date attributes with conversion pattern with time zone
  * [[SYNCOPE-1326](https://issues.apache.org/jira/browse/SYNCOPE-1326)] - Wizard generates unnecessary attrPatch when the field is empty

...

  * [[SYNCOPE-1018](https://issues.apache.org/jira/browse/SYNCOPE-1018)] - Social registration for Enduser UI
  * [[SYNCOPE-1256](https://issues.apache.org/jira/browse/SYNCOPE-1256)] - Docker images
  * [[SYNCOPE-1270](https://issues.apache.org/jira/browse/SYNCOPE-1270)] - OpenID Connect client feature
  * [[SYNCOPE-1283](https://issues.apache.org/jira/browse/SYNCOPE-1283)] - Support Azure AD
  * [[SYNCOPE-1289](https://issues.apache.org/jira/browse/SYNCOPE-1289)] - REST: support YAML payloads
  * [[SYNCOPE-1310](https://issues.apache.org/jira/browse/SYNCOPE-1310)] - Support SCIM v1.1
  * [[SYNCOPE-1316](https://issues.apache.org/jira/browse/SYNCOPE-1316)] - Support ServiceNow

###  Improvement

  * [[SYNCOPE-1148](https://issues.apache.org/jira/browse/SYNCOPE-1148)] - SAML-initiated self-registration
  * [[SYNCOPE-1292](https://issues.apache.org/jira/browse/SYNCOPE-1292)] - Use Remote Key during Pull to match internal entities
  * [[SYNCOPE-1295](https://issues.apache.org/jira/browse/SYNCOPE-1295)] - Create a structured wizard to edit SCIM 2.0 configuration
  * [[SYNCOPE-1299](https://issues.apache.org/jira/browse/SYNCOPE-1299)] - Manual reconciliation
  * [[SYNCOPE-1302](https://issues.apache.org/jira/browse/SYNCOPE-1302)] - New expression model in mapping for internal attributes to access user relationships
  * [[SYNCOPE-1322](https://issues.apache.org/jira/browse/SYNCOPE-1322)] - Get available tasks from workflow definition
  * [[SYNCOPE-1324](https://issues.apache.org/jira/browse/SYNCOPE-1324)] - Have I Been Pwned password rule

...

Additionally, Swagger UI 2.0 was replaced by Swagger UI 3.0.

![](/confluence/download/attachments/51811116/swaggerui.png?version=1&modificationDate=1521456902000&api=v2)

##  Issues

###  Bug

  * [[SYNCOPE-1257](https://issues.apache.org/jira/browse/SYNCOPE-1257)] - USER search by GROUP does not work if group name has spaces
  * [[SYNCOPE-1261](https://issues.apache.org/jira/browse/SYNCOPE-1261)] - When starting with empty database and no ConnInstances in Content.xml no bundles are reported as available
  * [[SYNCOPE-1263](https://issues.apache.org/jira/browse/SYNCOPE-1263)] - REST invocation with invalid JWT string returns 500
  * [[SYNCOPE-1265](https://issues.apache.org/jira/browse/SYNCOPE-1265)] - SAML 2.0 IdP cache empty until either new is imported or SAML2IdPService#list is invoked
  * [[SYNCOPE-1266](https://issues.apache.org/jira/browse/SYNCOPE-1266)] - Multivalue binary attributes leads to OutOfMemory exception
  * [[SYNCOPE-1269](https://issues.apache.org/jira/browse/SYNCOPE-1269)] - Cannot specify validator for Configuration Parameters
  * [[SYNCOPE-1272](https://issues.apache.org/jira/browse/SYNCOPE-1272)] - Export of the report always returns the result of the last execution
  * [[SYNCOPE-1275](https://issues.apache.org/jira/browse/SYNCOPE-1275)] - Add the possibiliy to delete a job
  * [[SYNCOPE-1276](https://issues.apache.org/jira/browse/SYNCOPE-1276)] - Link or assign Group from External Resource resets dynamic membership conditions

...

  * [[SYNCOPE-1259](https://issues.apache.org/jira/browse/SYNCOPE-1259)] - Japanese translation for Admin console & Enduser UI
  * [[SYNCOPE-1279](https://issues.apache.org/jira/browse/SYNCOPE-1279)] - Provide live updates from running tasks and reports

###  Improvement

  * [[SYNCOPE-1225](https://issues.apache.org/jira/browse/SYNCOPE-1225)] - Search funcionality in Schemas
  * [[SYNCOPE-1267](https://issues.apache.org/jira/browse/SYNCOPE-1267)] - Provide check of mimetypes before generate a binary attribute preview
  * [[SYNCOPE-1274](https://issues.apache.org/jira/browse/SYNCOPE-1274)] - Report required and read-only payload properties in OpenApi spec
  * [[SYNCOPE-1280](https://issues.apache.org/jira/browse/SYNCOPE-1280)] - Better job interrupt

###  Task

  * [[SYNCOPE-1262](https://issues.apache.org/jira/browse/SYNCOPE-1262)] - Upgrade to Swagger UI 3.0

...

The [SCIM extension](https://syncope.apache.org/docs/reference-
guide.html#scim) is now available, allowing to provision users and groups
through the new `/scim` REST endpoint according to the
[SCIM](http://www.simplecloud.info/) (System for Cross-domain Identity
Management) 2.0 specifications.

##  Issues

###  Bug

  * [[SYNCOPE-1222](https://issues.apache.org/jira/browse/SYNCOPE-1222)] - Unwanted delete from External Resources on Membership removal
  * [[SYNCOPE-1223](https://issues.apache.org/jira/browse/SYNCOPE-1223)] - Cannot search for values containing comma
  * [[SYNCOPE-1224](https://issues.apache.org/jira/browse/SYNCOPE-1224)] - CLI: user "all" operations limited to 25 users
  * [[SYNCOPE-1226](https://issues.apache.org/jira/browse/SYNCOPE-1226)] - List the attributes to be displayed show deleted attributes
  * [[SYNCOPE-1227](https://issues.apache.org/jira/browse/SYNCOPE-1227)] - Password template not nullable after setting
  * [[SYNCOPE-1229](https://issues.apache.org/jira/browse/SYNCOPE-1229)] - Pull task execution bulk delete fails
  * [[SYNCOPE-1230](https://issues.apache.org/jira/browse/SYNCOPE-1230)] - Bad toggle handling during task execution delete
  * [[SYNCOPE-1231](https://issues.apache.org/jira/browse/SYNCOPE-1231)] - Hidden columns in bulk action resul modal page
  * [[SYNCOPE-1232](https://issues.apache.org/jira/browse/SYNCOPE-1232)] - AnyType removal does not check for existing AnyObjects
  * [[SYNCOPE-1233](https://issues.apache.org/jira/browse/SYNCOPE-1233)] - NullPointerException in Topology after creating a connector with no displayName using pure REST call
  * [[SYNCOPE-1235](https://issues.apache.org/jira/browse/SYNCOPE-1235)] - Unlink or unassign Group from External Resource resets dynamic membership conditions
  * [[SYNCOPE-1236](https://issues.apache.org/jira/browse/SYNCOPE-1236)] - Pagination error for executed tasks
  * [[SYNCOPE-1239](https://issues.apache.org/jira/browse/SYNCOPE-1239)] - Missing specified plain attr values if plain attr step is the last one of the any management wizard
  * [[SYNCOPE-1241](https://issues.apache.org/jira/browse/SYNCOPE-1241)] - Under high load propagation after pull might fail
  * [[SYNCOPE-1244](https://issues.apache.org/jira/browse/SYNCOPE-1244)] - Error creating bean with name 'logicInitializer' on startup related to quartz clustering
  * [[SYNCOPE-1246](https://issues.apache.org/jira/browse/SYNCOPE-1246)] - Group membership search stucks with several thousands of groups
  * [[SYNCOPE-1247](https://issues.apache.org/jira/browse/SYNCOPE-1247)] - Group search and auto-completion does not work with several thousands of groups
  * [[SYNCOPE-1248](https://issues.apache.org/jira/browse/SYNCOPE-1248)] - Password policy history error when the user is updated before being approved
  * [[SYNCOPE-1250](https://issues.apache.org/jira/browse/SYNCOPE-1250)] - Missing attributes layout order
  * [[SYNCOPE-1251](https://issues.apache.org/jira/browse/SYNCOPE-1251)] - UserTO variable is not updated during Update Activiti Task
  * [[SYNCOPE-1252](https://issues.apache.org/jira/browse/SYNCOPE-1252)] - Search failing for non-string attributes from Admin Console
  * [[SYNCOPE-1253](https://issues.apache.org/jira/browse/SYNCOPE-1253)] - Pulled users have password set even if no mapping was provided

###  Improvement

  * [[SYNCOPE-1138](https://issues.apache.org/jira/browse/SYNCOPE-1138)] - Update RelationshipTO to also report the "left" end of a relationship
  * [[SYNCOPE-1228](https://issues.apache.org/jira/browse/SYNCOPE-1228)] - Parent should be passed once for Realm create
  * [[SYNCOPE-1234](https://issues.apache.org/jira/browse/SYNCOPE-1234)] - SyncDelta pre-processing
  * [[SYNCOPE-1237](https://issues.apache.org/jira/browse/SYNCOPE-1237)] - Copy table row element key to clipboard by clicking on its name in toggle menu
  * [[SYNCOPE-1238](https://issues.apache.org/jira/browse/SYNCOPE-1238)] - Terminate Topology background checks once completed
  * [[SYNCOPE-1242](https://issues.apache.org/jira/browse/SYNCOPE-1242)] - Simple way to see elements full text value in Palette Panels
  * [[SYNCOPE-1243](https://issues.apache.org/jira/browse/SYNCOPE-1243)] - Add information to GroupTO about user and AnyObject membership counts
  * [[SYNCOPE-1255](https://issues.apache.org/jira/browse/SYNCOPE-1255)] - Dynamic group/role create/update can result in timeout error in case of a great number of members

...

![](https://cwiki.apache.org/confluence/s/en_GB/8100/6ef1ce95c788ac159314a8fa6387047b8d1cc9fb/_/plugins/servlet/confluence/placeholder/macro-
icon?name=info) Info  
---  
| title | Upgrade procedure  
---|---  
  
Upgrading from 2.0.5? There are [some
notes](/confluence/pages/viewpage.action?pageId=74683060) about this process.  
  
##  Issues

###  Bug

  * [[SYNCOPE-1205](https://issues.apache.org/jira/browse/SYNCOPE-1205)] - Serialization exception in the logs when editing users pending approval
  * [[SYNCOPE-1206](https://issues.apache.org/jira/browse/SYNCOPE-1206)] - Dynamic membership updates not considered for provisioning during update
  * [[SYNCOPE-1207](https://issues.apache.org/jira/browse/SYNCOPE-1207)] - Audit: incorrect output element reported for Pull Tasks
  * [[SYNCOPE-1210](https://issues.apache.org/jira/browse/SYNCOPE-1210)] - Random password generation fails for push tasks
  * [[SYNCOPE-1211](https://issues.apache.org/jira/browse/SYNCOPE-1211)] - syncope migration 1.2 to 2.0 users blocked to 200
  * [[SYNCOPE-1213](https://issues.apache.org/jira/browse/SYNCOPE-1213)] - Syncope console should advice user about exceeded file size
  * [[SYNCOPE-1214](https://issues.apache.org/jira/browse/SYNCOPE-1214)] - Error when sorting Users by Realm
  * [[SYNCOPE-1215](https://issues.apache.org/jira/browse/SYNCOPE-1215)] - Multivalue readonly fields allow frontend deletion
  * [[SYNCOPE-1217](https://issues.apache.org/jira/browse/SYNCOPE-1217)] - Using the JAVA API is possible to create a Realm with the same name in the same parent realm

###  Improvement

  * [[SYNCOPE-1212](https://issues.apache.org/jira/browse/SYNCOPE-1212)] - Allow for easier Pull / Push processes customization

###  Task

  * [[SYNCOPE-1186](https://issues.apache.org/jira/browse/SYNCOPE-1186)] - Remove copy of SAMLSSOResponseValidator and SSOValidatorResponse when CXF 3.1.13 is out

...

![](https://cwiki.apache.org/confluence/s/en_GB/8100/6ef1ce95c788ac159314a8fa6387047b8d1cc9fb/_/plugins/servlet/confluence/placeholder/macro-
icon?name=info) Info  
---  
  
Portions of this software are developed by the support of
[iWelcome](https://www.iwelcome.com/), European Identity & Access Management
as-a-Service (IDaaS) provider.  
  
##  Issues

###  Bug

  * [[SYNCOPE-1139](https://issues.apache.org/jira/browse/SYNCOPE-1139)] - StackOverflowError while serializing AuditEntry after propagation
  * [[SYNCOPE-1140](https://issues.apache.org/jira/browse/SYNCOPE-1140)] - Error when trying to assign a relationship
  * [[SYNCOPE-1141](https://issues.apache.org/jira/browse/SYNCOPE-1141)] - Error when getting /numbers with application/xml
  * [[SYNCOPE-1149](https://issues.apache.org/jira/browse/SYNCOPE-1149)] - Access token still required for the third party JWT SSO integration scenario
  * [[SYNCOPE-1150](https://issues.apache.org/jira/browse/SYNCOPE-1150)] - Invalid property set for propagation task modal page header
  * [[SYNCOPE-1151](https://issues.apache.org/jira/browse/SYNCOPE-1151)] - Glinch in the root realm information
  * [[SYNCOPE-1158](https://issues.apache.org/jira/browse/SYNCOPE-1158)] - Misleading Push Task reports
  * [[SYNCOPE-1162](https://issues.apache.org/jira/browse/SYNCOPE-1162)] - Change to Connector's display name not reflected by contextual menu
  * [[SYNCOPE-1163](https://issues.apache.org/jira/browse/SYNCOPE-1163)] - External Resource priority is never NULL
  * [[SYNCOPE-1166](https://issues.apache.org/jira/browse/SYNCOPE-1166)] - No propagation task is created for resources where the password is not propagated
  * [[SYNCOPE-1168](https://issues.apache.org/jira/browse/SYNCOPE-1168)] - Encryptor pads short secret keys with "0" instead of random characters
  * [[SYNCOPE-1169](https://issues.apache.org/jira/browse/SYNCOPE-1169)] - Operation not supported error when trying to run a bulk action for users
  * [[SYNCOPE-1170](https://issues.apache.org/jira/browse/SYNCOPE-1170)] - Can't remove a "Dynamic USER assignment"
  * [[SYNCOPE-1174](https://issues.apache.org/jira/browse/SYNCOPE-1174)] - NPE in AccessTokenDataBinderImpl if no 'jwt.lifetime.minutes' schema is present
  * [[SYNCOPE-1175](https://issues.apache.org/jira/browse/SYNCOPE-1175)] - Password Reset Token Generation Not Working After Upgrading to 2.0.4
  * [[SYNCOPE-1178](https://issues.apache.org/jira/browse/SYNCOPE-1178)] - PlainSchema page empty while self update on Enduser
  * [[SYNCOPE-1179](https://issues.apache.org/jira/browse/SYNCOPE-1179)] - JWT "Date" claims are interpreted using milliseconds instead of seconds
  * [[SYNCOPE-1180](https://issues.apache.org/jira/browse/SYNCOPE-1180)] - No e-mail debug output
  * [[SYNCOPE-1184](https://issues.apache.org/jira/browse/SYNCOPE-1184)] - In the "Attributes to be displayed" sellection show the ones already displayed by default
  * [[SYNCOPE-1188](https://issues.apache.org/jira/browse/SYNCOPE-1188)] - NPE Message while saving Dynamic Realm with empty key
  * [[SYNCOPE-1189](https://issues.apache.org/jira/browse/SYNCOPE-1189)] - Realms page not accessible when user has permissions on dynamic realms
  * [[SYNCOPE-1190](https://issues.apache.org/jira/browse/SYNCOPE-1190)] - Username not refreshed on toggle menu after user update
  * [[SYNCOPE-1193](https://issues.apache.org/jira/browse/SYNCOPE-1193)] - Add the option to update a user via REST by using the username as key
  * [[SYNCOPE-1199](https://issues.apache.org/jira/browse/SYNCOPE-1199)] - Syncope performance: AnyObjectTO's creation time grows with it's quantity
  * [[SYNCOPE-1203](https://issues.apache.org/jira/browse/SYNCOPE-1203)] - Not possible to add provision rules for "Realm" type

###  Improvement

  * [[SYNCOPE-1096](https://issues.apache.org/jira/browse/SYNCOPE-1096)] - Download button should be disabled while populating for the first time a binary attribute
  * [[SYNCOPE-1097](https://issues.apache.org/jira/browse/SYNCOPE-1097)] - Downloaded file for binary attribute better naming
  * [[SYNCOPE-1115](https://issues.apache.org/jira/browse/SYNCOPE-1115)] - Display attributes for propagation tasks
  * [[SYNCOPE-1143](https://issues.apache.org/jira/browse/SYNCOPE-1143)] - Fine-grained administration rights for Connector and Resources
  * [[SYNCOPE-1146](https://issues.apache.org/jira/browse/SYNCOPE-1146)] - On-the-fly creation of unmatched users logging via SAML 2.0
  * [[SYNCOPE-1147](https://issues.apache.org/jira/browse/SYNCOPE-1147)] - Extend SAML 2.0 IdP mapping to Roles
  * [[SYNCOPE-1152](https://issues.apache.org/jira/browse/SYNCOPE-1152)] - Clear out unneeded anonymous authenticated services
  * [[SYNCOPE-1153](https://issues.apache.org/jira/browse/SYNCOPE-1153)] - Push Tasks result to show "no operation" when operation is not enabled
  * [[SYNCOPE-1154](https://issues.apache.org/jira/browse/SYNCOPE-1154)] - Edit resource to show always in the same order in list of object provision rules
  * [[SYNCOPE-1155](https://issues.apache.org/jira/browse/SYNCOPE-1155)] - Hard-coded /syncope-enduser HTTP subcontext
  * [[SYNCOPE-1159](https://issues.apache.org/jira/browse/SYNCOPE-1159)] - Allow to set Realm for Push Tasks
  * [[SYNCOPE-1164](https://issues.apache.org/jira/browse/SYNCOPE-1164)] - Complete mapping for Realm provisioning
  * [[SYNCOPE-1167](https://issues.apache.org/jira/browse/SYNCOPE-1167)] - Preliminary AnyType selection when adding new provision rule
  * [[SYNCOPE-1171](https://issues.apache.org/jira/browse/SYNCOPE-1171)] - Skip Relationships page when no relationship types exist
  * [[SYNCOPE-1172](https://issues.apache.org/jira/browse/SYNCOPE-1172)] - Error message of "Malformed Path" could be made a little clearer
  * [[SYNCOPE-1173](https://issues.apache.org/jira/browse/SYNCOPE-1173)] - Replace List<String> dynGroups with List<MembershipTO> dynMemberships
  * [[SYNCOPE-1176](https://issues.apache.org/jira/browse/SYNCOPE-1176)] - Edit provisioning rules menu is flat and not toggle
  * [[SYNCOPE-1177](https://issues.apache.org/jira/browse/SYNCOPE-1177)] - Configuration Parameter deletion should ask for confirmation
  * [[SYNCOPE-1182](https://issues.apache.org/jira/browse/SYNCOPE-1182)] - Use Remote Key in the Mapping to fetch external entities
  * [[SYNCOPE-1183](https://issues.apache.org/jira/browse/SYNCOPE-1183)] - Realm attribute available (as a detail) to use as a column in the "realm view" object list
  * [[SYNCOPE-1185](https://issues.apache.org/jira/browse/SYNCOPE-1185)] - Further validate SAML responses with CXF's SAMLSSOResponseValidator
  * [[SYNCOPE-1192](https://issues.apache.org/jira/browse/SYNCOPE-1192)] - Provide latest GIT commit hash alongside with version number
  * [[SYNCOPE-1194](https://issues.apache.org/jira/browse/SYNCOPE-1194)] - Sign the SAML SSO Service Provider Metadata
  * [[SYNCOPE-1196](https://issues.apache.org/jira/browse/SYNCOPE-1196)] - Binary previewer also for configuration parameters
  * [[SYNCOPE-1197](https://issues.apache.org/jira/browse/SYNCOPE-1197)] - Enduser console doesn't specify "SAML 2.0" as per the admin console
  * [[SYNCOPE-1198](https://issues.apache.org/jira/browse/SYNCOPE-1198)] - Make the signature algorithm configurable for SAML SSO
  * [[SYNCOPE-1200](https://issues.apache.org/jira/browse/SYNCOPE-1200)] - Allow to update user data during approval
  * [[SYNCOPE-1201](https://issues.apache.org/jira/browse/SYNCOPE-1201)] - Allow AnyType-based conditions for DynRealms
  * [[SYNCOPE-1202](https://issues.apache.org/jira/browse/SYNCOPE-1202)] - Support IdP Initiated SAML SSO

...

  * [[SYNCOPE-1144](https://issues.apache.org/jira/browse/SYNCOPE-1144)] - Customizable Audit appender
  * [[SYNCOPE-1145](https://issues.apache.org/jira/browse/SYNCOPE-1145)] - Connector and Resource configuration versioning

###  Task

  * [[SYNCOPE-1195](https://issues.apache.org/jira/browse/SYNCOPE-1195)] - Remove copy of OpenSAMLUtil when WSS4J 2.1.11 is out

...

With the increasing number of potential actions, this mechanism proved to be
poor: now, instead, a contextual menu will appear after clicking on any row,
reporting all the available actions for the selected entity.

![](/confluence/download/attachments/51811116/after204.png?version=1&modificationDate=1499081858000&api=v2)

##  Issues

### Sub-task

  * [[SYNCOPE-808](https://issues.apache.org/jira/browse/SYNCOPE-808)] - Netbeans plugin

###  Bug

  * [[SYNCOPE-1066](https://issues.apache.org/jira/browse/SYNCOPE-1066)] - WADL servlet uses request url to provide wadl
  * [[SYNCOPE-1069](https://issues.apache.org/jira/browse/SYNCOPE-1069)] - Incomplete HA setup instructions
  * [[SYNCOPE-1070](https://issues.apache.org/jira/browse/SYNCOPE-1070)] - Conversion pattern ignored for date, long and double values during propagation
  * [[SYNCOPE-1071](https://issues.apache.org/jira/browse/SYNCOPE-1071)] - The executed notification tasks are not displaying on the console
  * [[SYNCOPE-1075](https://issues.apache.org/jira/browse/SYNCOPE-1075)] - User lastChangeDate attribute is not displayed correctly
  * [[SYNCOPE-1076](https://issues.apache.org/jira/browse/SYNCOPE-1076)] - The console doesn't allow to download the report in various formats
  * [[SYNCOPE-1078](https://issues.apache.org/jira/browse/SYNCOPE-1078)] - Activiti modeler window doesn't open on click
  * [[SYNCOPE-1079](https://issues.apache.org/jira/browse/SYNCOPE-1079)] - Missing toggle panel for the job control widget of the administration console dashboard
  * [[SYNCOPE-1081](https://issues.apache.org/jira/browse/SYNCOPE-1081)] - Console: new toggle panel behavior anomalies
  * [[SYNCOPE-1082](https://issues.apache.org/jira/browse/SYNCOPE-1082)] - Concurrent CRUD random failures with dynamic memberships
  * [[SYNCOPE-1085](https://issues.apache.org/jira/browse/SYNCOPE-1085)] - Custom tasks modal page shouldn't show "Cancel" button
  * [[SYNCOPE-1089](https://issues.apache.org/jira/browse/SYNCOPE-1089)] - Improve provisioning mapping page in order to avoid duplicates in internal attribute name list
  * [[SYNCOPE-1090](https://issues.apache.org/jira/browse/SYNCOPE-1090)] - Error defining clause to search for group owners
  * [[SYNCOPE-1091](https://issues.apache.org/jira/browse/SYNCOPE-1091)] - Error while downloading Jpeg binary attribute content
  * [[SYNCOPE-1094](https://issues.apache.org/jira/browse/SYNCOPE-1094)] - Out of memory error while rendering PDF
  * [[SYNCOPE-1098](https://issues.apache.org/jira/browse/SYNCOPE-1098)] - User edit modal page opening takes long in case of a lot of groups defined
  * [[SYNCOPE-1099](https://issues.apache.org/jira/browse/SYNCOPE-1099)] - Dynamic group membership does not trigger propagation
  * [[SYNCOPE-1101](https://issues.apache.org/jira/browse/SYNCOPE-1101)] - Error showing action icons on Notidfication events managements
  * [[SYNCOPE-1104](https://issues.apache.org/jira/browse/SYNCOPE-1104)] - Missing autocomplete for ConnId object class when defining new provision
  * [[SYNCOPE-1107](https://issues.apache.org/jira/browse/SYNCOPE-1107)] - The installer fails with a NoClassDefFoundError
  * [[SYNCOPE-1108](https://issues.apache.org/jira/browse/SYNCOPE-1108)] - NullPointerException while saving an empty template
  * [[SYNCOPE-1109](https://issues.apache.org/jira/browse/SYNCOPE-1109)] - Installer fails to setup Activiti
  * [[SYNCOPE-1110](https://issues.apache.org/jira/browse/SYNCOPE-1110)] - Error replacing group/auxclass/resource during self-management operation
  * [[SYNCOPE-1111](https://issues.apache.org/jira/browse/SYNCOPE-1111)] - New any type not shown unders Realms
  * [[SYNCOPE-1112](https://issues.apache.org/jira/browse/SYNCOPE-1112)] - Error searching for user/group/anyobject by providing conditions on attribute with schema type Long
  * [[SYNCOPE-1114](https://issues.apache.org/jira/browse/SYNCOPE-1114)] - Dynamic group information not available during propagation
  * [[SYNCOPE-1121](https://issues.apache.org/jira/browse/SYNCOPE-1121)] - Enduser form customization does not work with empty section in edit mode
  * [[SYNCOPE-1122](https://issues.apache.org/jira/browse/SYNCOPE-1122)] - Enduser must show all attributes when customForm.json has empty section with show=true
  * [[SYNCOPE-1123](https://issues.apache.org/jira/browse/SYNCOPE-1123)] - Enduser UserRequestValidator NPE on custom form empty sections
  * [[SYNCOPE-1125](https://issues.apache.org/jira/browse/SYNCOPE-1125)] - Password on external resource not updated via Enduser
  * [[SYNCOPE-1127](https://issues.apache.org/jira/browse/SYNCOPE-1127)] - Membership attribute values are not shown
  * [[SYNCOPE-1128](https://issues.apache.org/jira/browse/SYNCOPE-1128)] - Content exporter does not sort for internal foreign keys
  * [[SYNCOPE-1130](https://issues.apache.org/jira/browse/SYNCOPE-1130)] - NPE refreshing realm page after realm creation
  * [[SYNCOPE-1131](https://issues.apache.org/jira/browse/SYNCOPE-1131)] - Cannot delete resources owned by realms
  * [[SYNCOPE-1133](https://issues.apache.org/jira/browse/SYNCOPE-1133)] - Search panel used for relationships definition does not work
  * [[SYNCOPE-1134](https://issues.apache.org/jira/browse/SYNCOPE-1134)] - Action menu not working after page refresh
  * [[SYNCOPE-1135](https://issues.apache.org/jira/browse/SYNCOPE-1135)] - Groups list not refreshing after realm change

###  Improvement

  * [[SYNCOPE-1047](https://issues.apache.org/jira/browse/SYNCOPE-1047)] - Replace ActionLinksPanel with TogglePanel
  * [[SYNCOPE-1053](https://issues.apache.org/jira/browse/SYNCOPE-1053)] - Show actual pending modifications during approval
  * [[SYNCOPE-1067](https://issues.apache.org/jira/browse/SYNCOPE-1067)] - More flexible delegated administration model
  * [[SYNCOPE-1068](https://issues.apache.org/jira/browse/SYNCOPE-1068)] - Console: CSRF protection
  * [[SYNCOPE-1072](https://issues.apache.org/jira/browse/SYNCOPE-1072)] - Display or enable add button only to realms were CREATE is owned
  * [[SYNCOPE-1073](https://issues.apache.org/jira/browse/SYNCOPE-1073)] - Hide realm management if no realm entitlement are owned
  * [[SYNCOPE-1074](https://issues.apache.org/jira/browse/SYNCOPE-1074)] - Realm navigator: show only relevant realms for delegated admin
  * [[SYNCOPE-1083](https://issues.apache.org/jira/browse/SYNCOPE-1083)] - ConnInstance location is not normalized
  * [[SYNCOPE-1084](https://issues.apache.org/jira/browse/SYNCOPE-1084)] - Switch to HikariCP for Core's default DataSource definitions
  * [[SYNCOPE-1086](https://issues.apache.org/jira/browse/SYNCOPE-1086)] - Avoid to read whole entities to check ETag
  * [[SYNCOPE-1087](https://issues.apache.org/jira/browse/SYNCOPE-1087)] - Avoid to read input entities if no notification or audit are requested
  * [[SYNCOPE-1088](https://issues.apache.org/jira/browse/SYNCOPE-1088)] - Store authorizations with access tokens
  * [[SYNCOPE-1093](https://issues.apache.org/jira/browse/SYNCOPE-1093)] - Add some feedbacks when linking not existing groups/resources to existing user
  * [[SYNCOPE-1100](https://issues.apache.org/jira/browse/SYNCOPE-1100)] - Provide JWT expiration information to self
  * [[SYNCOPE-1103](https://issues.apache.org/jira/browse/SYNCOPE-1103)] - Option to disable Quartz instances across cluster
  * [[SYNCOPE-1106](https://issues.apache.org/jira/browse/SYNCOPE-1106)] - Remove misleading getAttrMap and similar methods from TOs
  * [[SYNCOPE-1117](https://issues.apache.org/jira/browse/SYNCOPE-1117)] - Make it more obvious that the jwsKey needs to be changed
  * [[SYNCOPE-1118](https://issues.apache.org/jira/browse/SYNCOPE-1118)] - Update docs to explain what "anonymousKey" refers to
  * [[SYNCOPE-1119](https://issues.apache.org/jira/browse/SYNCOPE-1119)] - Make it more obvious that the default admin password needs to be changed
  * [[SYNCOPE-1120](https://issues.apache.org/jira/browse/SYNCOPE-1120)] - Use the standard Bearer Authorization header for JWT tokens
  * [[SYNCOPE-1124](https://issues.apache.org/jira/browse/SYNCOPE-1124)] - Support functions for internal JEXL engine
  * [[SYNCOPE-1126](https://issues.apache.org/jira/browse/SYNCOPE-1126)] - Include realms into the Explore Resource feature
  * [[SYNCOPE-1136](https://issues.apache.org/jira/browse/SYNCOPE-1136)] - Groups list reset always after realm change

### New Feature

  * [[SYNCOPE-1077](https://issues.apache.org/jira/browse/SYNCOPE-1077)] - Extension: Elasticsearch-based search engine
  * [[SYNCOPE-1095](https://issues.apache.org/jira/browse/SYNCOPE-1095)] - Provide preview for JSON and XML binary field
  * [[SYNCOPE-1129](https://issues.apache.org/jira/browse/SYNCOPE-1129)] - Third Party JWT SSO integration

###  Task

  * [[SYNCOPE-1080](https://issues.apache.org/jira/browse/SYNCOPE-1080)] - Update swagger-jaxrs dependency to 1.5.13

...

Moreover, with
[SYNCOPE-1015](https://issues.apache.org/jira/browse/SYNCOPE-1015) it is now
possible to configure which user attribute(s) can be passed as login name for
authentication, besides `username` (default).

##  Issues

###  Bug

  * [[SYNCOPE-1003](https://issues.apache.org/jira/browse/SYNCOPE-1003)] - Error when accessing notification tasks for a given user
  * [[SYNCOPE-1004](https://issues.apache.org/jira/browse/SYNCOPE-1004)] - Notification tasks generated for self read event not linked to user
  * [[SYNCOPE-1007](https://issues.apache.org/jira/browse/SYNCOPE-1007)] - NPE in Console when on an empty search term for user assignment
  * [[SYNCOPE-1008](https://issues.apache.org/jira/browse/SYNCOPE-1008)] - Maven home directory not trimmed of whitespace
  * [[SYNCOPE-1010](https://issues.apache.org/jira/browse/SYNCOPE-1010)] - Some PushActions methods not invoked even if assigned
  * [[SYNCOPE-1012](https://issues.apache.org/jira/browse/SYNCOPE-1012)] - Security answer not recognized during password reset
  * [[SYNCOPE-1013](https://issues.apache.org/jira/browse/SYNCOPE-1013)] - Password reset link generated by default notification template does not trigger Enduser UI features
  * [[SYNCOPE-1014](https://issues.apache.org/jira/browse/SYNCOPE-1014)] - The list of security questions is not refreshed after creating new one
  * [[SYNCOPE-1016](https://issues.apache.org/jira/browse/SYNCOPE-1016)] - Last change date not updated for users when attributes are updated via pull
  * [[SYNCOPE-1022](https://issues.apache.org/jira/browse/SYNCOPE-1022)] - UTF-8 characters in security questions not correctly encoded by Enduser UI
  * [[SYNCOPE-1023](https://issues.apache.org/jira/browse/SYNCOPE-1023)] - Maven projects from archetype deploy test content with 'all' profile
  * [[SYNCOPE-1024](https://issues.apache.org/jira/browse/SYNCOPE-1024)] - Enduser does not manages properly ENUM schema labels
  * [[SYNCOPE-1025](https://issues.apache.org/jira/browse/SYNCOPE-1025)] - SYNCOPEAUDIT table not populated
  * [[SYNCOPE-1026](https://issues.apache.org/jira/browse/SYNCOPE-1026)] - Cannot remove group owner once set
  * [[SYNCOPE-1027](https://issues.apache.org/jira/browse/SYNCOPE-1027)] - Mapping errors cannot be fixed when defining provision rules for a new resource
  * [[SYNCOPE-1030](https://issues.apache.org/jira/browse/SYNCOPE-1030)] - Invalid DefaultAccountRule definition from Admin Console
  * [[SYNCOPE-1032](https://issues.apache.org/jira/browse/SYNCOPE-1032)] - Role key must be not modifiable during edit from Admin Console
  * [[SYNCOPE-1033](https://issues.apache.org/jira/browse/SYNCOPE-1033)] - NPE in Admin Console when working with Reconciliation Report
  * [[SYNCOPE-1034](https://issues.apache.org/jira/browse/SYNCOPE-1034)] - Assigned Auxiliary classes disappear in the Type Extensions panel when click on cancel
  * [[SYNCOPE-1036](https://issues.apache.org/jira/browse/SYNCOPE-1036)] - Notification icon does not refresh on new approval event
  * [[SYNCOPE-1037](https://issues.apache.org/jira/browse/SYNCOPE-1037)] - Pending approvals list is clickable
  * [[SYNCOPE-1038](https://issues.apache.org/jira/browse/SYNCOPE-1038)] - User create: finish button should remain clickable if the last step is reached
  * [[SYNCOPE-1039](https://issues.apache.org/jira/browse/SYNCOPE-1039)] - User attributes in user edit/create form are reset after validation error
  * [[SYNCOPE-1040](https://issues.apache.org/jira/browse/SYNCOPE-1040)] - Membership derived attributes cannot reference own plain attributes
  * [[SYNCOPE-1042](https://issues.apache.org/jira/browse/SYNCOPE-1042)] - Removal of all executed pull tasks via bulk action returns a missing resource exception
  * [[SYNCOPE-1043](https://issues.apache.org/jira/browse/SYNCOPE-1043)] - Improve JWT token expiration handling
  * [[SYNCOPE-1044](https://issues.apache.org/jira/browse/SYNCOPE-1044)] - By editing the provisioning rules, modal footer is not disabled
  * [[SYNCOPE-1045](https://issues.apache.org/jira/browse/SYNCOPE-1045)] - Activiti Modeler: log out from Admin Console in case of error
  * [[SYNCOPE-1046](https://issues.apache.org/jira/browse/SYNCOPE-1046)] - Console: task execution sort not working properly
  * [[SYNCOPE-1048](https://issues.apache.org/jira/browse/SYNCOPE-1048)] - Into the connector configuration page the same bundle appear more then once if different versions exist
  * [[SYNCOPE-1049](https://issues.apache.org/jira/browse/SYNCOPE-1049)] - Console returns an error if you try to explore Syncope as a remote object
  * [[SYNCOPE-1051](https://issues.apache.org/jira/browse/SYNCOPE-1051)] - It is possible to schedule task execution in the past
  * [[SYNCOPE-1052](https://issues.apache.org/jira/browse/SYNCOPE-1052)] - Enduser CAPTCHA not reloading
  * [[SYNCOPE-1057](https://issues.apache.org/jira/browse/SYNCOPE-1057)] - Type extensions cleared after group update during pull
  * [[SYNCOPE-1060](https://issues.apache.org/jira/browse/SYNCOPE-1060)] - Date in membership attribute is propagated as timestamp
  * [[SYNCOPE-1062](https://issues.apache.org/jira/browse/SYNCOPE-1062)] - Changes pulled from one resource not propagated externally

###  Improvement

  * [[SYNCOPE-991](https://issues.apache.org/jira/browse/SYNCOPE-991)] - Improve user password management / resource management

  * [[SYNCOPE-1005](https://issues.apache.org/jira/browse/SYNCOPE-1005)] - Schema sorting should be done on JS side

  * [[SYNCOPE-1009](https://issues.apache.org/jira/browse/SYNCOPE-1009)] - Enduser must provide an easy way to enable/disable visualization and sorting of USER attributes
  * [[SYNCOPE-1020](https://issues.apache.org/jira/browse/SYNCOPE-1020)] - Support for BPMN call activity
  * [[SYNCOPE-1028](https://issues.apache.org/jira/browse/SYNCOPE-1028)] - Improve usability of the modal window for provision rules
  * [[SYNCOPE-1029](https://issues.apache.org/jira/browse/SYNCOPE-1029)] - Change modal window title and button bars background
  * [[SYNCOPE-1031](https://issues.apache.org/jira/browse/SYNCOPE-1031)] - Hide key when creating / editing Security Questions from Admin Console
  * [[SYNCOPE-1050](https://issues.apache.org/jira/browse/SYNCOPE-1050)] - Allow easier extension of REST interface exposed to AngularJS
  * [[SYNCOPE-1058](https://issues.apache.org/jira/browse/SYNCOPE-1058)] - Do not show time picker and values for date-only schemas
  * [[SYNCOPE-1059](https://issues.apache.org/jira/browse/SYNCOPE-1059)] - Remove final landing page after user create/update
  * [[SYNCOPE-1061](https://issues.apache.org/jira/browse/SYNCOPE-1061)] - Support SAML 2.0 Redirect profile
  * [[SYNCOPE-1063](https://issues.apache.org/jira/browse/SYNCOPE-1063)] - Incomplete title for modal windows from Topology
  * [[SYNCOPE-1064](https://issues.apache.org/jira/browse/SYNCOPE-1064)] - Improve security of customization mechanism

...

  * [[SYNCOPE-984](https://issues.apache.org/jira/browse/SYNCOPE-984)] - Errors when building on Windows for archetype and Eclipse plugin
  * [[SYNCOPE-985](https://issues.apache.org/jira/browse/SYNCOPE-985)] - org.apache.syncope.client.cli.commands.MigrateTest Fails on Windows

##  Bug

  * [[SYNCOPE-965](https://issues.apache.org/jira/browse/SYNCOPE-965)] - Cron expression for scheduled job is not saved from the console
  * [[SYNCOPE-966](https://issues.apache.org/jira/browse/SYNCOPE-966)] - Exception reported when looking at propagation task details from user list
  * [[SYNCOPE-970](https://issues.apache.org/jira/browse/SYNCOPE-970)] - On logout, page translation doesn't reset to default settings.
  * [[SYNCOPE-974](https://issues.apache.org/jira/browse/SYNCOPE-974)] - Incorrect error reported when creating notification with missing events
  * [[SYNCOPE-975](https://issues.apache.org/jira/browse/SYNCOPE-975)] - Search case insensitive ilike operator triggers search validation
  * [[SYNCOPE-976](https://issues.apache.org/jira/browse/SYNCOPE-976)] - Duplicated events shown by admin console for notifications and audit
  * [[SYNCOPE-977](https://issues.apache.org/jira/browse/SYNCOPE-977)] - style missing for captcha buttons in responsive template (under 800px width)
  * [[SYNCOPE-979](https://issues.apache.org/jira/browse/SYNCOPE-979)] - resource id is missing in user propagation task table
  * [[SYNCOPE-980](https://issues.apache.org/jira/browse/SYNCOPE-980)] - AnyObject search filter not honored with inGroups condition
  * [[SYNCOPE-981](https://issues.apache.org/jira/browse/SYNCOPE-981)] - Oracle/SQLServer configuration does not work
  * [[SYNCOPE-982](https://issues.apache.org/jira/browse/SYNCOPE-982)] - Notification tasks modal window does not provide access to actual HTML and TEXT e-mail body
  * [[SYNCOPE-987](https://issues.apache.org/jira/browse/SYNCOPE-987)] - Build issues on Windows
  * [[SYNCOPE-990](https://issues.apache.org/jira/browse/SYNCOPE-990)] - Explore resource detailed view always shows empty left column
  * [[SYNCOPE-992](https://issues.apache.org/jira/browse/SYNCOPE-992)] - Date not registered in self registration
  * [[SYNCOPE-993](https://issues.apache.org/jira/browse/SYNCOPE-993)] - Footer buttons positioning and resizing
  * [[SYNCOPE-994](https://issues.apache.org/jira/browse/SYNCOPE-994)] - Character encoding not being respected
  * [[SYNCOPE-997](https://issues.apache.org/jira/browse/SYNCOPE-997)] - Angular transition errors
  * [[SYNCOPE-999](https://issues.apache.org/jira/browse/SYNCOPE-999)] - REST exception mapper overwrites Spring Security response
  * [[SYNCOPE-1000](https://issues.apache.org/jira/browse/SYNCOPE-1000)] - CSVDir connector unclear about required attributes/columns
  * [[SYNCOPE-1001](https://issues.apache.org/jira/browse/SYNCOPE-1001)] - Closing the Activiti Modeler popup does not make the spinner to disappear
  * [[SYNCOPE-1002](https://issues.apache.org/jira/browse/SYNCOPE-1002)] - Updating any objects' name via console is ineffective

##  Improvement

  * [[SYNCOPE-773](https://issues.apache.org/jira/browse/SYNCOPE-773)] - Allow in-place edit in Job dashboard widget
  * [[SYNCOPE-779](https://issues.apache.org/jira/browse/SYNCOPE-779)] - Use Kendo UI Boostrap DateTimePicker
  * [[SYNCOPE-967](https://issues.apache.org/jira/browse/SYNCOPE-967)] - Enduser test update
  * [[SYNCOPE-971](https://issues.apache.org/jira/browse/SYNCOPE-971)] - Case insensitive search
  * [[SYNCOPE-972](https://issues.apache.org/jira/browse/SYNCOPE-972)] - Make Syncope Enduser template responsive
  * [[SYNCOPE-978](https://issues.apache.org/jira/browse/SYNCOPE-978)] - Add sample REST external resource
  * [[SYNCOPE-983](https://issues.apache.org/jira/browse/SYNCOPE-983)] - Search performance improvement with mandatory schemas only
  * [[SYNCOPE-989](https://issues.apache.org/jira/browse/SYNCOPE-989)] - Upgrade FOP to 2.1
  * [[SYNCOPE-996](https://issues.apache.org/jira/browse/SYNCOPE-996)] - Replace Angular Bootstrap DateTimePicker with Kendo UI DateTimePicker

...

  * [[SYNCOPE-882](https://issues.apache.org/jira/browse/SYNCOPE-882)] - Log viewer

##  Task

  * [[SYNCOPE-962](https://issues.apache.org/jira/browse/SYNCOPE-962)] - Upgrade to Wicket 7.5.0

...

Upgrading from 2.0.0? There are [some
notes](/confluence/pages/viewpage.action?pageId=65876844) about this process.

##  Bug

  * [[SYNCOPE-937](https://issues.apache.org/jira/browse/SYNCOPE-937)] - Security question not loaded while resetting the user password
  * [[SYNCOPE-940](https://issues.apache.org/jira/browse/SYNCOPE-940)] - Handle authorization issues more gracefully in the console
  * [[SYNCOPE-942](https://issues.apache.org/jira/browse/SYNCOPE-942)] - Bug in changing security answer in the Enduser UI
  * [[SYNCOPE-944](https://issues.apache.org/jira/browse/SYNCOPE-944)] - Cannot manually assign groups provided with dynamic assignment rules
  * [[SYNCOPE-946](https://issues.apache.org/jira/browse/SYNCOPE-946)] - Encrypted attribute values not managed as password values
  * [[SYNCOPE-947](https://issues.apache.org/jira/browse/SYNCOPE-947)] - Missing quotes defining realm (JEXL) expression in user/group/anyobject templates for realms
  * [[SYNCOPE-950](https://issues.apache.org/jira/browse/SYNCOPE-950)] - Self-registration / self-update not working
  * [[SYNCOPE-953](https://issues.apache.org/jira/browse/SYNCOPE-953)] - Enduser shows groups of the selected realm rather than groups assignable to users in the selected realm

##  Improvement

  * [[SYNCOPE-948](https://issues.apache.org/jira/browse/SYNCOPE-948)] - Optionally provide schema information with attribute values
  * [[SYNCOPE-949](https://issues.apache.org/jira/browse/SYNCOPE-949)] - Leave WebApplicationException to default processing
  * [[SYNCOPE-952](https://issues.apache.org/jira/browse/SYNCOPE-952)] - Provide realm management to enduser
  * [[SYNCOPE-958](https://issues.apache.org/jira/browse/SYNCOPE-958)] - Enduser improvements
  * [[SYNCOPE-959](https://issues.apache.org/jira/browse/SYNCOPE-959)] - Specify working domain in enduser.properties
  * [[SYNCOPE-960](https://issues.apache.org/jira/browse/SYNCOPE-960)] - Make the breadcrumb in creation navigable only when the Finish page has been reached

...

  1. [Identity Recertification](https://syncope.apache.org/docs/reference-guide.html#identity-recertification)
  2. [Migration guide](https://syncope.apache.org/docs/reference-guide.html#migration-from-apache-syncope-1-2) from Apache Syncope 1.2

##  Bug

  * [[SYNCOPE-738](https://issues.apache.org/jira/browse/SYNCOPE-738)] - Startup errors with Wildfly due to Camel route loading
  * [[SYNCOPE-929](https://issues.apache.org/jira/browse/SYNCOPE-929)] - Braces are ignored for FIQL strings
  * [[SYNCOPE-930](https://issues.apache.org/jira/browse/SYNCOPE-930)] - Exception when dropping the last "Base Contexts to Synchronize" from LDAP connector
  * [[SYNCOPE-931](https://issues.apache.org/jira/browse/SYNCOPE-931)] - Error in Camel route causes subsequent failures
  * [[SYNCOPE-933](https://issues.apache.org/jira/browse/SYNCOPE-933)] - Dashboard: status COMPLETE is reported for running jobs
  * [[SYNCOPE-934](https://issues.apache.org/jira/browse/SYNCOPE-934)] - Bad form (including login) appearance with IE 11
  * [[SYNCOPE-935](https://issues.apache.org/jira/browse/SYNCOPE-935)] - Attribute 'type' shouldn't be available to create a group filter
  * [[SYNCOPE-936](https://issues.apache.org/jira/browse/SYNCOPE-936)] - Sync token reset to NULL when no SyncDelta items are available

##  Improvement

  * [[SYNCOPE-853](https://issues.apache.org/jira/browse/SYNCOPE-853)] - Add AngularJS tests for enduser
  * [[SYNCOPE-926](https://issues.apache.org/jira/browse/SYNCOPE-926)] - Syncope 2.x startup improvements
  * [[SYNCOPE-932](https://issues.apache.org/jira/browse/SYNCOPE-932)] - Search UI improvements

...

  * [[SYNCOPE-809](https://issues.apache.org/jira/browse/SYNCOPE-809)] - Eclipse plugin

##  Bug

  * [[SYNCOPE-872](https://issues.apache.org/jira/browse/SYNCOPE-872)] - Type extensions not considered for user form
  * [[SYNCOPE-878](https://issues.apache.org/jira/browse/SYNCOPE-878)] - Failure on bulk deletion of users
  * [[SYNCOPE-879](https://issues.apache.org/jira/browse/SYNCOPE-879)] - Auto-completion not working for internal and external attribute names
  * [[SYNCOPE-881](https://issues.apache.org/jira/browse/SYNCOPE-881)] - Users not removed from transitive external resources when deleted
  * [[SYNCOPE-883](https://issues.apache.org/jira/browse/SYNCOPE-883)] - Can't access REST API via browser
  * [[SYNCOPE-884](https://issues.apache.org/jira/browse/SYNCOPE-884)] - Error in REST API when specifying application/xml accept header
  * [[SYNCOPE-886](https://issues.apache.org/jira/browse/SYNCOPE-886)] - Error enablig/disabling user on a single resource
  * [[SYNCOPE-887](https://issues.apache.org/jira/browse/SYNCOPE-887)] - Hidden password in pull task user template
  * [[SYNCOPE-888](https://issues.apache.org/jira/browse/SYNCOPE-888)] - No error thrown if resource mapping internal attribute doesn't exist
  * [[SYNCOPE-891](https://issues.apache.org/jira/browse/SYNCOPE-891)] - Resource Provisioning Error
  * [[SYNCOPE-892](https://issues.apache.org/jira/browse/SYNCOPE-892)] - RuntimeException when resizing tables
  * [[SYNCOPE-893](https://issues.apache.org/jira/browse/SYNCOPE-893)] - International characters in group name
  * [[SYNCOPE-898](https://issues.apache.org/jira/browse/SYNCOPE-898)] - Cannot set realm in user / group / any object templates for pull task
  * [[SYNCOPE-899](https://issues.apache.org/jira/browse/SYNCOPE-899)] - neighborhood relationship type has no description
  * [[SYNCOPE-900](https://issues.apache.org/jira/browse/SYNCOPE-900)] - Can't edit Camel routes in Console
  * [[SYNCOPE-901](https://issues.apache.org/jira/browse/SYNCOPE-901)] - Syncope 2.0.0.X maven source artifacts missing
  * [[SYNCOPE-905](https://issues.apache.org/jira/browse/SYNCOPE-905)] - Wrong entitlement evaluation
  * [[SYNCOPE-907](https://issues.apache.org/jira/browse/SYNCOPE-907)] - Creating any object with relationship to another results in self-relationship
  * [[SYNCOPE-908](https://issues.apache.org/jira/browse/SYNCOPE-908)] - Exception when searching for any object to fill relationship
  * [[SYNCOPE-911](https://issues.apache.org/jira/browse/SYNCOPE-911)] - Enduser should allow empty values on non required select fields
  * [[SYNCOPE-912](https://issues.apache.org/jira/browse/SYNCOPE-912)] - Registered users receive an error message after saving their own profile
  * [[SYNCOPE-915](https://issues.apache.org/jira/browse/SYNCOPE-915)] - When changing connector's display name, the topology is not refreshed
  * [[SYNCOPE-916](https://issues.apache.org/jira/browse/SYNCOPE-916)] - Content exporter includes unwanted items
  * [[SYNCOPE-918](https://issues.apache.org/jira/browse/SYNCOPE-918)] - When a user has been successfully updated, logout link doesn't bring back to home page.
  * [[SYNCOPE-921](https://issues.apache.org/jira/browse/SYNCOPE-921)] - Approval list not reloaded after approve/reject operations
  * [[SYNCOPE-923](https://issues.apache.org/jira/browse/SYNCOPE-923)] - Sync / Pull task not configured for delete causes incremental sync to prematurely stop
  * [[SYNCOPE-927](https://issues.apache.org/jira/browse/SYNCOPE-927)] - User creation randomly fails if capctha check has been disabled
  * [[SYNCOPE-928](https://issues.apache.org/jira/browse/SYNCOPE-928)] - Table that stores user passwords store duplicate entries

##  Improvement

  * [[SYNCOPE-700](https://issues.apache.org/jira/browse/SYNCOPE-700)] - Documentation artifacts
  * [[SYNCOPE-854](https://issues.apache.org/jira/browse/SYNCOPE-854)] - Uploaded file preview for enduser
  * [[SYNCOPE-894](https://issues.apache.org/jira/browse/SYNCOPE-894)] - Allow international characters in username, group's and any object's names
  * [[SYNCOPE-895](https://issues.apache.org/jira/browse/SYNCOPE-895)] - Enable Secure Processing on all DocumentBuilderFactory/TransfomerFactory instances
  * [[SYNCOPE-896](https://issues.apache.org/jira/browse/SYNCOPE-896)] - Non-mandatory DropDown attributes should show a blank value when no value is specified
  * [[SYNCOPE-902](https://issues.apache.org/jira/browse/SYNCOPE-902)] - Provide helper method to retrieve all the groups of a user
  * [[SYNCOPE-906](https://issues.apache.org/jira/browse/SYNCOPE-906)] - Allow reference to username and group / any object name as search parameters
  * [[SYNCOPE-909](https://issues.apache.org/jira/browse/SYNCOPE-909)] - Consolidate Camel Processors
  * [[SYNCOPE-910](https://issues.apache.org/jira/browse/SYNCOPE-910)] - Introduce new Camel propagation component
  * [[SYNCOPE-913](https://issues.apache.org/jira/browse/SYNCOPE-913)] - Add and remove buttons in multivalue fields are not aligned
  * [[SYNCOPE-914](https://issues.apache.org/jira/browse/SYNCOPE-914)] - Spinner should be always in front of any other element
  * [[SYNCOPE-919](https://issues.apache.org/jira/browse/SYNCOPE-919)] - Adjust activiti user workflow to be able to remove users in createApproval status
  * [[SYNCOPE-920](https://issues.apache.org/jira/browse/SYNCOPE-920)] - Allow to specify recipients provider class for notifications
  * [[SYNCOPE-925](https://issues.apache.org/jira/browse/SYNCOPE-925)] - Allow domain selection from Swagger UI

...

The forth milestone release from the new major series  **Syncope 2.0 Jazz**
is now available, bearing a relevant number of fixes and improvements over
2.0.0-M3.

##  Bug

  * [[SYNCOPE-845](https://issues.apache.org/jira/browse/SYNCOPE-845)] - Type extensions not considered for user and any objects forms
  * [[SYNCOPE-863](https://issues.apache.org/jira/browse/SYNCOPE-863)] - Pull policy correlation rule plain attributes palette doesn't work fine
  * [[SYNCOPE-865](https://issues.apache.org/jira/browse/SYNCOPE-865)] - Random ConcurrentModificationException reported in the logs
  * [[SYNCOPE-867](https://issues.apache.org/jira/browse/SYNCOPE-867)] - Creating a new notification template the list of available templates are not updated after submit
  * [[SYNCOPE-868](https://issues.apache.org/jira/browse/SYNCOPE-868)] - Submit and cancel button not available in create report template modal page
  * [[SYNCOPE-869](https://issues.apache.org/jira/browse/SYNCOPE-869)] - Missing notification in case of success after create and update
  * [[SYNCOPE-875](https://issues.apache.org/jira/browse/SYNCOPE-875)] - Can't test LDAP Connector in admin console
  * [[SYNCOPE-876](https://issues.apache.org/jira/browse/SYNCOPE-876)] - Fake after object reported by propagation in case of delete

##  Improvement

  * [[SYNCOPE-827](https://issues.apache.org/jira/browse/SYNCOPE-827)] - Allow to specify user / group / any object filters for push tasks
  * [[SYNCOPE-829](https://issues.apache.org/jira/browse/SYNCOPE-829)] - Use actual pagination for resource explore
  * [[SYNCOPE-852](https://issues.apache.org/jira/browse/SYNCOPE-852)] - Add a good title including report/reportlet name modal used to edit report and reportlet
  * [[SYNCOPE-862](https://issues.apache.org/jira/browse/SYNCOPE-862)] - Membership and type extension improvements
  * [[SYNCOPE-866](https://issues.apache.org/jira/browse/SYNCOPE-866)] - Check for existence of key before adding template
  * [[SYNCOPE-870](https://issues.apache.org/jira/browse/SYNCOPE-870)] - Refer to users and groups by their names in Activiti workflow definition
  * [[SYNCOPE-871](https://issues.apache.org/jira/browse/SYNCOPE-871)] - Link NumberWidgets on the dashboard to their respective pages
  * [[SYNCOPE-873](https://issues.apache.org/jira/browse/SYNCOPE-873)] - Remove list() methods from User, Group and AnyObject REST APIs

...

  * [[SYNCOPE-719](https://issues.apache.org/jira/browse/SYNCOPE-719)] - UI enhancements
  * [[SYNCOPE-745](https://issues.apache.org/jira/browse/SYNCOPE-745)] - Complete Configuration
  * [[SYNCOPE-765](https://issues.apache.org/jira/browse/SYNCOPE-765)] - Provide approval management

##  Bug

  * [[SYNCOPE-737](https://issues.apache.org/jira/browse/SYNCOPE-737)] - UserWizardBuilder, the store internally password flag is not set properly
  * [[SYNCOPE-781](https://issues.apache.org/jira/browse/SYNCOPE-781)] - Activiti Modeler breaks deployment from installer
  * [[SYNCOPE-783](https://issues.apache.org/jira/browse/SYNCOPE-783)] - DateTime fields not correctly handled in Enduser
  * [[SYNCOPE-792](https://issues.apache.org/jira/browse/SYNCOPE-792)] - Improve JEXL information text for "mandatory" when creating a new schema attribute
  * [[SYNCOPE-793](https://issues.apache.org/jira/browse/SYNCOPE-793)] - Password" keys missing when creating a resource mapping
  * [[SYNCOPE-798](https://issues.apache.org/jira/browse/SYNCOPE-798)] - Once authenticated to enduser, "Cancel" brings nowhere
  * [[SYNCOPE-799](https://issues.apache.org/jira/browse/SYNCOPE-799)] - Do not allow admin user log in to enduser
  * [[SYNCOPE-800](https://issues.apache.org/jira/browse/SYNCOPE-800)] - Synchronization fails in case of accountId mapped on derived attribute starting with literal
  * [[SYNCOPE-801](https://issues.apache.org/jira/browse/SYNCOPE-801)] - Provisioning mappings are not saved
  * [[SYNCOPE-811](https://issues.apache.org/jira/browse/SYNCOPE-811)] - Error message "'spinner' is required"
  * [[SYNCOPE-812](https://issues.apache.org/jira/browse/SYNCOPE-812)] - Remove flickering
  * [[SYNCOPE-813](https://issues.apache.org/jira/browse/SYNCOPE-813)] - Remove "mandatory" field from configuration parameter creation
  * [[SYNCOPE-814](https://issues.apache.org/jira/browse/SYNCOPE-814)] - MasterContent.xml configuration is broken for "main"
  * [[SYNCOPE-817](https://issues.apache.org/jira/browse/SYNCOPE-817)] - Switching between Connector Configuration tabs loses information
  * [[SYNCOPE-823](https://issues.apache.org/jira/browse/SYNCOPE-823)] - Workflow XML editor pops up after closing Activiti Modeler
  * [[SYNCOPE-825](https://issues.apache.org/jira/browse/SYNCOPE-825)] - CSS title under Realms: bad style
  * [[SYNCOPE-836](https://issues.apache.org/jira/browse/SYNCOPE-836)] - On Firefox, once logged in can't log out and viceversa if cache is not have been cleared
  * [[SYNCOPE-837](https://issues.apache.org/jira/browse/SYNCOPE-837)] - Bad appearance for + / - buttons under Chrome / Chromium
  * [[SYNCOPE-839](https://issues.apache.org/jira/browse/SYNCOPE-839)] - Syncope 2.0.0-M2 has a missing dependency syncope-fit-build-build-tools
  * [[SYNCOPE-844](https://issues.apache.org/jira/browse/SYNCOPE-844)] - When showing propagation task details stacktrace is reported instead
  * [[SYNCOPE-846](https://issues.apache.org/jira/browse/SYNCOPE-846)] - Annoying flickering
  * [[SYNCOPE-847](https://issues.apache.org/jira/browse/SYNCOPE-847)] - When creating virtual schema, the new item is not shown in the list
  * [[SYNCOPE-849](https://issues.apache.org/jira/browse/SYNCOPE-849)] - Task execution popup does not resize properly on Chrome
  * [[SYNCOPE-850](https://issues.apache.org/jira/browse/SYNCOPE-850)] - Heart icon to check connector connectivity does not show feedback panel on Chrome

##  Improvement

  * [[SYNCOPE-791](https://issues.apache.org/jira/browse/SYNCOPE-791)] - Update UI to display what you're adding when creating a role
  * [[SYNCOPE-796](https://issues.apache.org/jira/browse/SYNCOPE-796)] - Add favicon to enduser
  * [[SYNCOPE-797](https://issues.apache.org/jira/browse/SYNCOPE-797)] - Automatically select a unique version for a Connector
  * [[SYNCOPE-802](https://issues.apache.org/jira/browse/SYNCOPE-802)] - Improve Connector "Capabilities" layout
  * [[SYNCOPE-803](https://issues.apache.org/jira/browse/SYNCOPE-803)] - Improve explanation for on/off buttons in the Connector Configuration
  * [[SYNCOPE-804](https://issues.apache.org/jira/browse/SYNCOPE-804)] - Support the explanation of the Connector Configuration properties
  * [[SYNCOPE-805](https://issues.apache.org/jira/browse/SYNCOPE-805)] - Select destination realm from a drop down list when creating a task
  * [[SYNCOPE-806](https://issues.apache.org/jira/browse/SYNCOPE-806)] - Validate "standalone" resource provisioning
  * [[SYNCOPE-807](https://issues.apache.org/jira/browse/SYNCOPE-807)] - When editing realms, select account and password policies from combo box
  * [[SYNCOPE-810](https://issues.apache.org/jira/browse/SYNCOPE-810)] - Allow generated projects to include extensions in embedded mode
  * [[SYNCOPE-815](https://issues.apache.org/jira/browse/SYNCOPE-815)] - Configure standalone to log under $CATALINA_HOME/logs
  * [[SYNCOPE-816](https://issues.apache.org/jira/browse/SYNCOPE-816)] - Add message when no "plain" attributes available
  * [[SYNCOPE-818](https://issues.apache.org/jira/browse/SYNCOPE-818)] - Allow to optionally specify the MappingItemTransformer class, for each mapping item
  * [[SYNCOPE-819](https://issues.apache.org/jira/browse/SYNCOPE-819)] - Add deletion query across all components
  * [[SYNCOPE-820](https://issues.apache.org/jira/browse/SYNCOPE-820)] - Allow to optionally specify user / group / any object template(s) for pull tasks
  * [[SYNCOPE-821](https://issues.apache.org/jira/browse/SYNCOPE-821)] - Allow capability override on resources
  * [[SYNCOPE-822](https://issues.apache.org/jira/browse/SYNCOPE-822)] - Replace Long autogenerated keys with UUIDs
  * [[SYNCOPE-824](https://issues.apache.org/jira/browse/SYNCOPE-824)] - Push/Pull task "names" not marked as mandatory in the console
  * [[SYNCOPE-826](https://issues.apache.org/jira/browse/SYNCOPE-826)] - Allow to specify any templates and logic actions from realm
  * [[SYNCOPE-830](https://issues.apache.org/jira/browse/SYNCOPE-830)] - Associate notification tasks to related notifications
  * [[SYNCOPE-834](https://issues.apache.org/jira/browse/SYNCOPE-834)] - Single WebSocketBehavior per page
  * [[SYNCOPE-835](https://issues.apache.org/jira/browse/SYNCOPE-835)] - Allow to configure groups' type extensions
  * [[SYNCOPE-838](https://issues.apache.org/jira/browse/SYNCOPE-838)] - review of logging state of the syncope enduser
  * [[SYNCOPE-841](https://issues.apache.org/jira/browse/SYNCOPE-841)] - Admin console small tweaks and fixes
  * [[SYNCOPE-842](https://issues.apache.org/jira/browse/SYNCOPE-842)] - Use gzip compression by default
  * [[SYNCOPE-848](https://issues.apache.org/jira/browse/SYNCOPE-848)] - Include provision information in VirSchemaTO
  * [[SYNCOPE-851](https://issues.apache.org/jira/browse/SYNCOPE-851)] - Add title per wizard step about user/group/anyobject
  * [[SYNCOPE-855](https://issues.apache.org/jira/browse/SYNCOPE-855)] - Synchronization token management enhancement in case of errors
  * [[SYNCOPE-857](https://issues.apache.org/jira/browse/SYNCOPE-857)] - JEXL-based transformation for mapping items
  * [[SYNCOPE-858](https://issues.apache.org/jira/browse/SYNCOPE-858)] - Ensure afterObject is provided after propagation

...

  * [[SYNCOPE-156](https://issues.apache.org/jira/browse/SYNCOPE-156)] - New admin UI
  * [[SYNCOPE-701](https://issues.apache.org/jira/browse/SYNCOPE-701)] - New end-user UI
  * [[SYNCOPE-788](https://issues.apache.org/jira/browse/SYNCOPE-788)] - Show the propagation task(s) linked to a given user / group / any object
  * [[SYNCOPE-789](https://issues.apache.org/jira/browse/SYNCOPE-789)] - Browse objects on external resources
  * [[SYNCOPE-790](https://issues.apache.org/jira/browse/SYNCOPE-790)] - Allow user / group / any object admin form customization
  * [[SYNCOPE-828](https://issues.apache.org/jira/browse/SYNCOPE-828)] - Russian translation for admin console
  * [[SYNCOPE-856](https://issues.apache.org/jira/browse/SYNCOPE-856)] - Allow to provision all group's members upon request

##  Task

  * [[SYNCOPE-753](https://issues.apache.org/jira/browse/SYNCOPE-753)] - Settle how to migrate from 1.2
  * [[SYNCOPE-777](https://issues.apache.org/jira/browse/SYNCOPE-777)] - Update IzPack to 5.0.8
  * [[SYNCOPE-785](https://issues.apache.org/jira/browse/SYNCOPE-785)] - Provide demo page on website
  * [[SYNCOPE-786](https://issues.apache.org/jira/browse/SYNCOPE-786)] - Automatic demo deploy upon Jenkins build
  * [[SYNCOPE-787](https://issues.apache.org/jira/browse/SYNCOPE-787)] - Enable Activiti Modeler for demo

...

  * [[SYNCOPE-720](https://issues.apache.org/jira/browse/SYNCOPE-720)] - Unauthenticated password reset functionality
  * [[SYNCOPE-743](https://issues.apache.org/jira/browse/SYNCOPE-743)] - Complete Topology
  * [[SYNCOPE-744](https://issues.apache.org/jira/browse/SYNCOPE-744)] - Provide dashboard
  * [[SYNCOPE-746](https://issues.apache.org/jira/browse/SYNCOPE-746)] - Migrate console extension mechanism from 1.2
  * [[SYNCOPE-752](https://issues.apache.org/jira/browse/SYNCOPE-752)] - Re-enable console tests

##  Bug

  * [[SYNCOPE-730](https://issues.apache.org/jira/browse/SYNCOPE-730)] - Datetime picker component is not working properly with some date formats
  * [[SYNCOPE-756](https://issues.apache.org/jira/browse/SYNCOPE-756)] - Relationships with USERs on the right side have to be forbidden
  * [[SYNCOPE-758](https://issues.apache.org/jira/browse/SYNCOPE-758)] - Workflow diagram not updated after saving from XML editor modal window
  * [[SYNCOPE-759](https://issues.apache.org/jira/browse/SYNCOPE-759)] - Creation of a new AnyTypeClass doesn't check if the key is already used
  * [[SYNCOPE-762](https://issues.apache.org/jira/browse/SYNCOPE-762)] - Last execution date value is always null for Sched, Sync and Push tasks
  * [[SYNCOPE-768](https://issues.apache.org/jira/browse/SYNCOPE-768)] - Missing records in case of user list ordered by nullable schema
  * [[SYNCOPE-769](https://issues.apache.org/jira/browse/SYNCOPE-769)] - Sync performance decrease
  * [[SYNCOPE-774](https://issues.apache.org/jira/browse/SYNCOPE-774)] - Cannot update resource mapping
  * [[SYNCOPE-775](https://issues.apache.org/jira/browse/SYNCOPE-775)] - Error when adding a dynamic user membership condition to a role
  * [[SYNCOPE-776](https://issues.apache.org/jira/browse/SYNCOPE-776)] - Standalone 2.0.0-M1 does not start up
  * [[SYNCOPE-780](https://issues.apache.org/jira/browse/SYNCOPE-780)] - On logout session is not completely cleared out
  * [[SYNCOPE-782](https://issues.apache.org/jira/browse/SYNCOPE-782)] - DateParamConverterProvider not working with Widlfly 9

##  Improvement

  * [[SYNCOPE-155](https://issues.apache.org/jira/browse/SYNCOPE-155)] - Better way to override console pages
  * [[SYNCOPE-742](https://issues.apache.org/jira/browse/SYNCOPE-742)] - Upgrade to CXF 3.1.5
  * [[SYNCOPE-760](https://issues.apache.org/jira/browse/SYNCOPE-760)] - Allow dynamic reloading of mail templates
  * [[SYNCOPE-761](https://issues.apache.org/jira/browse/SYNCOPE-761)] - Allow dynamic reloading of report stylesheets
  * [[SYNCOPE-763](https://issues.apache.org/jira/browse/SYNCOPE-763)] - Provide sample Audit reportlet
  * [[SYNCOPE-767](https://issues.apache.org/jira/browse/SYNCOPE-767)] - Password Policy: mustn't contain value of the following attributes case insensitive
  * [[SYNCOPE-771](https://issues.apache.org/jira/browse/SYNCOPE-771)] - Rename Sync to Pull
  * [[SYNCOPE-778](https://issues.apache.org/jira/browse/SYNCOPE-778)] - Allow admins to force users' password change at next login

...

  * [[SYNCOPE-750](https://issues.apache.org/jira/browse/SYNCOPE-750)] - Statistics
  * [[SYNCOPE-766](https://issues.apache.org/jira/browse/SYNCOPE-766)] - Reconciliation reportlet

##  Task

  * [[SYNCOPE-764](https://issues.apache.org/jira/browse/SYNCOPE-764)] - Replace Hibernate Validator with Apache BVal

...

  * [[SYNCOPE-552](https://issues.apache.org/jira/browse/SYNCOPE-552)] - Provide Activiti modeler installation feature to installer
  * [[SYNCOPE-580](https://issues.apache.org/jira/browse/SYNCOPE-580)] - Add user services to command line interface
  * [[SYNCOPE-581](https://issues.apache.org/jira/browse/SYNCOPE-581)] - Add configuration services to command line interface
  * [[SYNCOPE-582](https://issues.apache.org/jira/browse/SYNCOPE-582)] - Add connector services to command line interface
  * [[SYNCOPE-583](https://issues.apache.org/jira/browse/SYNCOPE-583)] - Add entitlement services to command line interface
  * [[SYNCOPE-584](https://issues.apache.org/jira/browse/SYNCOPE-584)] - Add logger services to command line interface
  * [[SYNCOPE-585](https://issues.apache.org/jira/browse/SYNCOPE-585)] - Add notification services to command line interface
  * [[SYNCOPE-586](https://issues.apache.org/jira/browse/SYNCOPE-586)] - Add policy services to command line interface
  * [[SYNCOPE-587](https://issues.apache.org/jira/browse/SYNCOPE-587)] - Add report services to command line interface
  * [[SYNCOPE-588](https://issues.apache.org/jira/browse/SYNCOPE-588)] - Add resource services to command line interface
  * [[SYNCOPE-589](https://issues.apache.org/jira/browse/SYNCOPE-589)] - Add role services to command line interface
  * [[SYNCOPE-590](https://issues.apache.org/jira/browse/SYNCOPE-590)] - Add schema services to command line interface
  * [[SYNCOPE-591](https://issues.apache.org/jira/browse/SYNCOPE-591)] - Add security question services to command line interface
  * [[SYNCOPE-592](https://issues.apache.org/jira/browse/SYNCOPE-592)] - Add task services to command line interface
  * [[SYNCOPE-595](https://issues.apache.org/jira/browse/SYNCOPE-595)] - Add workflow services to command line interface
  * [[SYNCOPE-626](https://issues.apache.org/jira/browse/SYNCOPE-626)] - make it possible to disallow using the username as password
  * [[SYNCOPE-636](https://issues.apache.org/jira/browse/SYNCOPE-636)] - Include proper LICENSE & NOTICE in the dist artifact
  * [[SYNCOPE-711](https://issues.apache.org/jira/browse/SYNCOPE-711)] - Add domain services to command line interface
  * [[SYNCOPE-718](https://issues.apache.org/jira/browse/SYNCOPE-718)] - Add missing integrations
  * [[SYNCOPE-722](https://issues.apache.org/jira/browse/SYNCOPE-722)] - CLI documentation
  * [[SYNCOPE-723](https://issues.apache.org/jira/browse/SYNCOPE-723)] - Create bash script file to wrap java command
  * [[SYNCOPE-724](https://issues.apache.org/jira/browse/SYNCOPE-724)] - create properties file as help messages
  * [[SYNCOPE-727](https://issues.apache.org/jira/browse/SYNCOPE-727)] - Integration test
  * [[SYNCOPE-728](https://issues.apache.org/jira/browse/SYNCOPE-728)] - Delete all users
  * [[SYNCOPE-740](https://issues.apache.org/jira/browse/SYNCOPE-740)] - Website update for 2.0.0

##  Bug

  * [[SYNCOPE-532](https://issues.apache.org/jira/browse/SYNCOPE-532)] - Installer does not pick Syncope version from POM
  * [[SYNCOPE-539](https://issues.apache.org/jira/browse/SYNCOPE-539)] - Edit user with resources causes Ajax failure
  * [[SYNCOPE-540](https://issues.apache.org/jira/browse/SYNCOPE-540)] - Console build fails on Windows
  * [[SYNCOPE-543](https://issues.apache.org/jira/browse/SYNCOPE-543)] - Role's "Inherit Attributes" does not inherit from parent role for check box attribute
  * [[SYNCOPE-545](https://issues.apache.org/jira/browse/SYNCOPE-545)] - Date field without conversion pattern specified goes in NPE if deleting date
  * [[SYNCOPE-547](https://issues.apache.org/jira/browse/SYNCOPE-547)] - Cannot send e-mails out when SMTP server requires authentication
  * [[SYNCOPE-548](https://issues.apache.org/jira/browse/SYNCOPE-548)] - Provide Activiti Modeler setup instructions
  * [[SYNCOPE-549](https://issues.apache.org/jira/browse/SYNCOPE-549)] - Activiti Modeler always show the default workflow definition
  * [[SYNCOPE-551](https://issues.apache.org/jira/browse/SYNCOPE-551)] - Admin console shows 24 roles at most in the role tree
  * [[SYNCOPE-553](https://issues.apache.org/jira/browse/SYNCOPE-553)] - Internal Server Error when creating account policy
  * [[SYNCOPE-554](https://issues.apache.org/jira/browse/SYNCOPE-554)] - Class Cast Exception when syncronization task starts
  * [[SYNCOPE-556](https://issues.apache.org/jira/browse/SYNCOPE-556)] - Error in the enum schema when trying to add new enumeration value/label
  * [[SYNCOPE-557](https://issues.apache.org/jira/browse/SYNCOPE-557)] - Exception during report execution when matching condition is not provided for user and role reportlets
  * [[SYNCOPE-560](https://issues.apache.org/jira/browse/SYNCOPE-560)] - build-tools classes artifact not published to Maven repository
  * [[SYNCOPE-561](https://issues.apache.org/jira/browse/SYNCOPE-561)] - HTML reports not displayed correctly with no external resources
  * [[SYNCOPE-562](https://issues.apache.org/jira/browse/SYNCOPE-562)] - Duplicated configuration parameters in the CATTR table
  * [[SYNCOPE-564](https://issues.apache.org/jira/browse/SYNCOPE-564)] - Error while viewing user details in approval request workflow from Approvers login
  * [[SYNCOPE-565](https://issues.apache.org/jira/browse/SYNCOPE-565)] - Error on ResourceModalPage when override a SpinnerField in the ConnectorModalPage
  * [[SYNCOPE-566](https://issues.apache.org/jira/browse/SYNCOPE-566)] - Name attribute value disappears after changing attribute type during schema manipulation
  * [[SYNCOPE-567](https://issues.apache.org/jira/browse/SYNCOPE-567)] - Security question is not displayed correctly during password reset
  * [[SYNCOPE-568](https://issues.apache.org/jira/browse/SYNCOPE-568)] - Connectors configuration "check connection"
  * [[SYNCOPE-569](https://issues.apache.org/jira/browse/SYNCOPE-569)] - The user status is not propagated on the resources
  * [[SYNCOPE-571](https://issues.apache.org/jira/browse/SYNCOPE-571)] - ResourceConnConfPanel feedback panel does not work
  * [[SYNCOPE-572](https://issues.apache.org/jira/browse/SYNCOPE-572)] - overridable resource connector properties cannot be changed
  * [[SYNCOPE-574](https://issues.apache.org/jira/browse/SYNCOPE-574)] - NullPointerException in ConnInstanceDataBinder with Java 8
  * [[SYNCOPE-576](https://issues.apache.org/jira/browse/SYNCOPE-576)] - The values of configuration parameters are not saved
  * [[SYNCOPE-578](https://issues.apache.org/jira/browse/SYNCOPE-578)] - Role bulk delete not working
  * [[SYNCOPE-596](https://issues.apache.org/jira/browse/SYNCOPE-596)] - Standalone persistence not configured for H2
  * [[SYNCOPE-597](https://issues.apache.org/jira/browse/SYNCOPE-597)] - Error when serializating SyncToken with byte array type during sync task from Active Directory
  * [[SYNCOPE-598](https://issues.apache.org/jira/browse/SYNCOPE-598)] - Push Task fails on role with LDAP resource with rolemapping defined
  * [[SYNCOPE-600](https://issues.apache.org/jira/browse/SYNCOPE-600)] - Approval chains do not work from second form onwards
  * [[SYNCOPE-601](https://issues.apache.org/jira/browse/SYNCOPE-601)] - AD deleted object synchronization fails if a sync policy is specified on one or more attributes that can have no values on Syncope
  * [[SYNCOPE-603](https://issues.apache.org/jira/browse/SYNCOPE-603)] - Remote unauthorized exception when a user makes a request to add a role to his profile
  * [[SYNCOPE-605](https://issues.apache.org/jira/browse/SYNCOPE-605)] - Impossible to update the connector capabilities
  * [[SYNCOPE-607](https://issues.apache.org/jira/browse/SYNCOPE-607)] - Error when adding a value to a multivalue configuration parameter of type long
  * [[SYNCOPE-608](https://issues.apache.org/jira/browse/SYNCOPE-608)] - Cannot configure audit for AuthenticationController
  * [[SYNCOPE-610](https://issues.apache.org/jira/browse/SYNCOPE-610)] - Installer doesn't update the console.properties with the container port
  * [[SYNCOPE-611](https://issues.apache.org/jira/browse/SYNCOPE-611)] - An approver displays all approval tasks including those not assigned to him
  * [[SYNCOPE-613](https://issues.apache.org/jira/browse/SYNCOPE-613)] - delete overridable connector configuration property of type array String in resource edit panel
  * [[SYNCOPE-614](https://issues.apache.org/jira/browse/SYNCOPE-614)] - NotificationJob fails with NullPointerException
  * [[SYNCOPE-615](https://issues.apache.org/jira/browse/SYNCOPE-615)] - Updating properties and xml files of the installer module with the current version
  * [[SYNCOPE-617](https://issues.apache.org/jira/browse/SYNCOPE-617)] - User/role schema attribute with minus symbol in name
  * [[SYNCOPE-625](https://issues.apache.org/jira/browse/SYNCOPE-625)] - Build fails with Java 6
  * [[SYNCOPE-629](https://issues.apache.org/jira/browse/SYNCOPE-629)] - ATTRTEMPLATE entities not exported
  * [[SYNCOPE-632](https://issues.apache.org/jira/browse/SYNCOPE-632)] - Errors during update propagation when derived attribute is configured as account id
  * [[SYNCOPE-638](https://issues.apache.org/jira/browse/SYNCOPE-638)] - MAttrTemplate and RAttrTemplate sequence values are not managed in content.xml
  * [[SYNCOPE-639](https://issues.apache.org/jira/browse/SYNCOPE-639)] - Notification 'recipientAttrType' and 'recipientAttrName' are not required
  * [[SYNCOPE-641](https://issues.apache.org/jira/browse/SYNCOPE-641)] - Concurrency issues with multiple client threads
  * [[SYNCOPE-643](https://issues.apache.org/jira/browse/SYNCOPE-643)] - WorkflowResult provides unmodifiable collection for performed tasks
  * [[SYNCOPE-644](https://issues.apache.org/jira/browse/SYNCOPE-644)] - Error during synchronization of roles when using a RoleSchema as accountId
  * [[SYNCOPE-647](https://issues.apache.org/jira/browse/SYNCOPE-647)] - Problem during propagation of an updated membership on a resource
  * [[SYNCOPE-649](https://issues.apache.org/jira/browse/SYNCOPE-649)] - Paged lists not working properly
  * [[SYNCOPE-654](https://issues.apache.org/jira/browse/SYNCOPE-654)] - Some generic and uninformative error messages
  * [[SYNCOPE-656](https://issues.apache.org/jira/browse/SYNCOPE-656)] - Debian configuration files overwrittern
  * [[SYNCOPE-658](https://issues.apache.org/jira/browse/SYNCOPE-658)] - Duplicate derived attribute after sync task when it is configured as accountid for the synched resource
  * [[SYNCOPE-659](https://issues.apache.org/jira/browse/SYNCOPE-659)] - Wrong fasterxml.jackson, common-lang3 version in the Import-Package in the syncope-common, syncope-client
  * [[SYNCOPE-664](https://issues.apache.org/jira/browse/SYNCOPE-664)] - Empty string values not allowed with Oracle DB
  * [[SYNCOPE-668](https://issues.apache.org/jira/browse/SYNCOPE-668)] - JobInstanceLoader class is not able to return the correct Task id or Report id from its job name
  * [[SYNCOPE-669](https://issues.apache.org/jira/browse/SYNCOPE-669)] - Search filter in the notifications doesn't work properly
  * [[SYNCOPE-670](https://issues.apache.org/jira/browse/SYNCOPE-670)] - Prpagation miss all UserMod's changes performed by the Activiti update service task
  * [[SYNCOPE-671](https://issues.apache.org/jira/browse/SYNCOPE-671)] - Changed password value is not propagated to external resources on successful password reset
  * [[SYNCOPE-672](https://issues.apache.org/jira/browse/SYNCOPE-672)] - Console doesn't display the right condition when configuring a search filter with a resource
  * [[SYNCOPE-673](https://issues.apache.org/jira/browse/SYNCOPE-673)] - Null ids in SyncJob report
  * [[SYNCOPE-678](https://issues.apache.org/jira/browse/SYNCOPE-678)] - Password generation fails with no password policy or no min / max length
  * [[SYNCOPE-684](https://issues.apache.org/jira/browse/SYNCOPE-684)] - Password not updated on external resources from self-service
  * [[SYNCOPE-686](https://issues.apache.org/jira/browse/SYNCOPE-686)] - Indirect LDAP resource provisioning fails on missing password
  * [[SYNCOPE-688](https://issues.apache.org/jira/browse/SYNCOPE-688)] - JSON (de)serialization not working in Glassfish 4.1
  * [[SYNCOPE-691](https://issues.apache.org/jira/browse/SYNCOPE-691)] - Multivalue virtual attribute does not work
  * [[SYNCOPE-702](https://issues.apache.org/jira/browse/SYNCOPE-702)] - Documentation issue on Architecture section
  * [[SYNCOPE-703](https://issues.apache.org/jira/browse/SYNCOPE-703)] - Static WADL is missing extension services
  * [[SYNCOPE-706](https://issues.apache.org/jira/browse/SYNCOPE-706)] - INTERNAL_SERVER_ERROR when authenticating with non existing username
  * [[SYNCOPE-707](https://issues.apache.org/jira/browse/SYNCOPE-707)] - ConfigurationLogic doesn't check the existence of key during deletion.
  * [[SYNCOPE-710](https://issues.apache.org/jira/browse/SYNCOPE-710)] - Password propagation not occuring if other updates are set on different resources
  * [[SYNCOPE-717](https://issues.apache.org/jira/browse/SYNCOPE-717)] - Inconsistent double attribute value management
  * [[SYNCOPE-729](https://issues.apache.org/jira/browse/SYNCOPE-729)] - Skipped remote update during resource assignment if connector CREATE capability is not provided
  * [[SYNCOPE-733](https://issues.apache.org/jira/browse/SYNCOPE-733)] - Table sort does not work fine in case of multi paged result
  * [[SYNCOPE-735](https://issues.apache.org/jira/browse/SYNCOPE-735)] - Acitiviti history tables uncontrolled growth
  * [[SYNCOPE-739](https://issues.apache.org/jira/browse/SYNCOPE-739)] - Virtual attributes are not updated after a sync task
  * [[SYNCOPE-741](https://issues.apache.org/jira/browse/SYNCOPE-741)] - Tasks page unusable when a task has thousand executions

##  Improvement

  * [[SYNCOPE-120](https://issues.apache.org/jira/browse/SYNCOPE-120)] - Avoid duplication in console's authorization management
  * [[SYNCOPE-139](https://issues.apache.org/jira/browse/SYNCOPE-139)] - Support OpenICF connector bundles
  * [[SYNCOPE-141](https://issues.apache.org/jira/browse/SYNCOPE-141)] - Concurrent propagation
  * [[SYNCOPE-142](https://issues.apache.org/jira/browse/SYNCOPE-142)] - Asynchronous propagation
  * [[SYNCOPE-391](https://issues.apache.org/jira/browse/SYNCOPE-391)] - Make password management optional
  * [[SYNCOPE-536](https://issues.apache.org/jira/browse/SYNCOPE-536)] - Upgrade to Activiti 5.16
  * [[SYNCOPE-538](https://issues.apache.org/jira/browse/SYNCOPE-538)] - Externalize all WAR configuration
  * [[SYNCOPE-550](https://issues.apache.org/jira/browse/SYNCOPE-550)] - Provide cleaner user workflow definition for production
  * [[SYNCOPE-555](https://issues.apache.org/jira/browse/SYNCOPE-555)] - check for id != 0 in *Controller.resolveReference()
  * [[SYNCOPE-570](https://issues.apache.org/jira/browse/SYNCOPE-570)] - Remove usage of deprecated com.thoughtworks.selenium.Selenium
  * [[SYNCOPE-575](https://issues.apache.org/jira/browse/SYNCOPE-575)] - Choose between stable and snapshot release
  * [[SYNCOPE-599](https://issues.apache.org/jira/browse/SYNCOPE-599)] - Enhance console's authorization.xml parsing
  * [[SYNCOPE-602](https://issues.apache.org/jira/browse/SYNCOPE-602)] - Make form approver available as workflow variable
  * [[SYNCOPE-604](https://issues.apache.org/jira/browse/SYNCOPE-604)] - allow configuring empty connid location list
  * [[SYNCOPE-612](https://issues.apache.org/jira/browse/SYNCOPE-612)] - explicit configuration of Velocity logging
  * [[SYNCOPE-616](https://issues.apache.org/jira/browse/SYNCOPE-616)] - Improving the management of the xml and properties files inside the installer
  * [[SYNCOPE-618](https://issues.apache.org/jira/browse/SYNCOPE-618)] - Upgrade Activiti to 5.17
  * [[SYNCOPE-620](https://issues.apache.org/jira/browse/SYNCOPE-620)] - Code re-organization
  * [[SYNCOPE-621](https://issues.apache.org/jira/browse/SYNCOPE-621)] - Reduce log level of bean validation errors (in data binder)
  * [[SYNCOPE-622](https://issues.apache.org/jira/browse/SYNCOPE-622)] - Improve VirAttrCache management
  * [[SYNCOPE-627](https://issues.apache.org/jira/browse/SYNCOPE-627)] - Camel provisioning manager: separate user / role route management and introduce Unit Test
  * [[SYNCOPE-630](https://issues.apache.org/jira/browse/SYNCOPE-630)] - Eliminate duplicate Syncope WADL methods
  * [[SYNCOPE-634](https://issues.apache.org/jira/browse/SYNCOPE-634)] - performance optimization for content loading
  * [[SYNCOPE-637](https://issues.apache.org/jira/browse/SYNCOPE-637)] - Let user choose extensions
  * [[SYNCOPE-640](https://issues.apache.org/jira/browse/SYNCOPE-640)] - Allow MariaDB to be chosen with installer
  * [[SYNCOPE-645](https://issues.apache.org/jira/browse/SYNCOPE-645)] - Provide validation error message when add a role attribute in a user mapping as accountId
  * [[SYNCOPE-646](https://issues.apache.org/jira/browse/SYNCOPE-646)] - Do not propagate password if not explicitely requested
  * [[SYNCOPE-648](https://issues.apache.org/jira/browse/SYNCOPE-648)] - Notification Configuration: missing some labels in events
  * [[SYNCOPE-651](https://issues.apache.org/jira/browse/SYNCOPE-651)] - SyncopeUser:checkToken() should fail if token is not set on user
  * [[SYNCOPE-660](https://issues.apache.org/jira/browse/SYNCOPE-660)] - Extend control over asynchronous job execution
  * [[SYNCOPE-661](https://issues.apache.org/jira/browse/SYNCOPE-661)] - Remove overloaded methods from REST services
  * [[SYNCOPE-663](https://issues.apache.org/jira/browse/SYNCOPE-663)] - Option to ignore users / roles during synchronization or push
  * [[SYNCOPE-665](https://issues.apache.org/jira/browse/SYNCOPE-665)] - Introduce LogicActions for users and groups
  * [[SYNCOPE-674](https://issues.apache.org/jira/browse/SYNCOPE-674)] - NotificationManager should be able to return a list of created task ids
  * [[SYNCOPE-676](https://issues.apache.org/jira/browse/SYNCOPE-676)] - Option for getting simplified list of users and roles
  * [[SYNCOPE-679](https://issues.apache.org/jira/browse/SYNCOPE-679)] - Deferred tasks
  * [[SYNCOPE-680](https://issues.apache.org/jira/browse/SYNCOPE-680)] - Recipient provider extension class
  * [[SYNCOPE-692](https://issues.apache.org/jira/browse/SYNCOPE-692)] - List and search on external resources
  * [[SYNCOPE-694](https://issues.apache.org/jira/browse/SYNCOPE-694)] - PATCH and PUT update for users, groups and any objects
  * [[SYNCOPE-696](https://issues.apache.org/jira/browse/SYNCOPE-696)] - Allow to restrict task list
  * [[SYNCOPE-705](https://issues.apache.org/jira/browse/SYNCOPE-705)] - Support gzip compression for REST services
  * [[SYNCOPE-708](https://issues.apache.org/jira/browse/SYNCOPE-708)] - Conform the Logger "service stack" to others
  * [[SYNCOPE-709](https://issues.apache.org/jira/browse/SYNCOPE-709)] - Virtual attributes management refactoring
  * [[SYNCOPE-713](https://issues.apache.org/jira/browse/SYNCOPE-713)] - Remove ConfTO object from ConfigurationService
  * [[SYNCOPE-714](https://issues.apache.org/jira/browse/SYNCOPE-714)] - Add the possibility to override the capabilities of the connector
  * [[SYNCOPE-715](https://issues.apache.org/jira/browse/SYNCOPE-715)] - Configure whether password hash values should be returned via REST calls
  * [[SYNCOPE-725](https://issues.apache.org/jira/browse/SYNCOPE-725)] - Derived attributes management refactoring
  * [[SYNCOPE-731](https://issues.apache.org/jira/browse/SYNCOPE-731)] - Fine-grained entitlements for any objects
  * [[SYNCOPE-732](https://issues.apache.org/jira/browse/SYNCOPE-732)] - Filtered reconciliation for synchronization
  * [[SYNCOPE-736](https://issues.apache.org/jira/browse/SYNCOPE-736)] - Exchange JSON by default
  * [[SYNCOPE-747](https://issues.apache.org/jira/browse/SYNCOPE-747)] - Option to disable tasks / reports
  * [[SYNCOPE-748](https://issues.apache.org/jira/browse/SYNCOPE-748)] - Selectively delete task and report executions
  * [[SYNCOPE-749](https://issues.apache.org/jira/browse/SYNCOPE-749)] - Human-readable date values for JSON payloads
  * [[SYNCOPE-751](https://issues.apache.org/jira/browse/SYNCOPE-751)] - Preview for PDF binary values

...

  * [[SYNCOPE-119](https://issues.apache.org/jira/browse/SYNCOPE-119)] - Realm-based authorization
  * [[SYNCOPE-135](https://issues.apache.org/jira/browse/SYNCOPE-135)] - Password reset
  * [[SYNCOPE-140](https://issues.apache.org/jira/browse/SYNCOPE-140)] - Dynamic role and group memberships
  * [[SYNCOPE-143](https://issues.apache.org/jira/browse/SYNCOPE-143)] - GUI Installer
  * [[SYNCOPE-158](https://issues.apache.org/jira/browse/SYNCOPE-158)] - CLI admin tool
  * [[SYNCOPE-558](https://issues.apache.org/jira/browse/SYNCOPE-558)] - Ability to configure which user, role and membership attributes to display, and in which order
  * [[SYNCOPE-623](https://issues.apache.org/jira/browse/SYNCOPE-623)] - Provisioning manager integration
  * [[SYNCOPE-650](https://issues.apache.org/jira/browse/SYNCOPE-650)] - Handling errors for external resource operations
  * [[SYNCOPE-652](https://issues.apache.org/jira/browse/SYNCOPE-652)] - Domains
  * [[SYNCOPE-666](https://issues.apache.org/jira/browse/SYNCOPE-666)] - Any objects
  * [[SYNCOPE-685](https://issues.apache.org/jira/browse/SYNCOPE-685)] - Custom Account / Password policy specifications
  * [[SYNCOPE-690](https://issues.apache.org/jira/browse/SYNCOPE-690)] - Must change password at next login
  * [[SYNCOPE-693](https://issues.apache.org/jira/browse/SYNCOPE-693)] - Use ConnId 1.4 pagination API
  * [[SYNCOPE-695](https://issues.apache.org/jira/browse/SYNCOPE-695)] - REST endpoints for attribute CRUD
  * [[SYNCOPE-698](https://issues.apache.org/jira/browse/SYNCOPE-698)] - Pluggable transformation for resource mapping items
  * [[SYNCOPE-704](https://issues.apache.org/jira/browse/SYNCOPE-704)] - Swagger extension

##  Task

  * [[SYNCOPE-494](https://issues.apache.org/jira/browse/SYNCOPE-494)] - Set Java 7 as minimum requirement
  * [[SYNCOPE-537](https://issues.apache.org/jira/browse/SYNCOPE-537)] - Upgrade to ConnId 1.4.0.0
  * [[SYNCOPE-573](https://issues.apache.org/jira/browse/SYNCOPE-573)] - Upgrade ConnId connectors to latest versions featuring ConnId 1.4.0.0
  * [[SYNCOPE-633](https://issues.apache.org/jira/browse/SYNCOPE-633)] - Add support for MariaDB
  * [[SYNCOPE-635](https://issues.apache.org/jira/browse/SYNCOPE-635)] - Upgrade CSVDir connector bundle dependency version
  * [[SYNCOPE-642](https://issues.apache.org/jira/browse/SYNCOPE-642)] - Upgrade to ConnId 1.4.1.0
  * [[SYNCOPE-653](https://issues.apache.org/jira/browse/SYNCOPE-653)] - Upgrade Spring Security to 4.0.0.RELEASE
  * [[SYNCOPE-657](https://issues.apache.org/jira/browse/SYNCOPE-657)] - Enable build-time Checkstyle checks
  * [[SYNCOPE-662](https://issues.apache.org/jira/browse/SYNCOPE-662)] - Upgrade to OpenJPA 2.4.0
  * [[SYNCOPE-697](https://issues.apache.org/jira/browse/SYNCOPE-697)] - Clean up ONE_PHASE / TWO_PHASES

...

  * [[SYNCOPE-535](https://issues.apache.org/jira/browse/SYNCOPE-535)] - Provide Debian packages for Apache Syncope

##  Bug

  * [[SYNCOPE-1205](https://issues.apache.org/jira/browse/SYNCOPE-1205)] - Serialization exception in the logs when editing users pending approval
  * [[SYNCOPE-1206](https://issues.apache.org/jira/browse/SYNCOPE-1206)] - Dynamic membership updates not considered for provisioning during update
  * [[SYNCOPE-1207](https://issues.apache.org/jira/browse/SYNCOPE-1207)] - Audit: incorrect output element reported for Pull Tasks
  * [[SYNCOPE-1210](https://issues.apache.org/jira/browse/SYNCOPE-1210)] - Random password generation fails for push tasks
  * [[SYNCOPE-1211](https://issues.apache.org/jira/browse/SYNCOPE-1211)] - syncope migration 1.2 to 2.0 users blocked to 200
  * [[SYNCOPE-1213](https://issues.apache.org/jira/browse/SYNCOPE-1213)] - Syncope console should advice user about exceeded file size
  * [[SYNCOPE-1214](https://issues.apache.org/jira/browse/SYNCOPE-1214)] - Error when sorting Users by Realm
  * [[SYNCOPE-1215](https://issues.apache.org/jira/browse/SYNCOPE-1215)] - Multivalue readonly fields allow frontend deletion
  * [[SYNCOPE-1217](https://issues.apache.org/jira/browse/SYNCOPE-1217)] - Using the JAVA API is possible to create a Realm with the same name in the same parent realm

##  Improvement

  * [[SYNCOPE-1212](https://issues.apache.org/jira/browse/SYNCOPE-1212)] - Allow for easier Pull / Push processes customization

##  Task

  * [[SYNCOPE-1186](https://issues.apache.org/jira/browse/SYNCOPE-1186)] - Remove copy of SAMLSSOResponseValidator and SSOValidatorResponse when CXF 3.1.13 is out

  
|  |  | [Go to page
history](https://cwiki.apache.org/confluence/pages/viewpreviousversions.action?pageId=51811116&src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1568277000295&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9 "Go to page
history")  
---  
---  
| [View
page](https://cwiki.apache.org/confluence/display/SYNCOPE/Jazz?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1568277000295&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=view)  
---  
  
|  | [Stop watching
space](https://cwiki.apache.org/confluence/users/removespacenotification.action?spaceKey=SYNCOPE&src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1568277000295&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=stop-
watching&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ4c3JmOjhhYTk4MDg3NGUzNmExZWIwMTRlMzZhMmM0MTY3OWI5IiwicXNoIjoiN2IwMWI3NjAwMTFjOThmYTFhMzY5ZjY5YTdmZGYxNGU2YmZkOTlkYWMyZDhiNzhmYTg4OTc2MGIwMmE1NDYyYyIsImlzcyI6ImNvbmZsdWVuY2Vfbm90aWZpY2F0aW9uc0FSRUgtWFVEMS1QT1FHLUNTQU8iLCJleHAiOjE1Njg4ODE4MDAsImlhdCI6MTU2ODI3NzAwMH0.V7eZtRAO3cGOpa18UX5wbW5mUBbNrpQ5GQmk7PRuINc)
| •  
---|---  
[Manage
notifications](https://cwiki.apache.org/confluence/users/editmyemailsettings.action?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1568277000295&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=manage)  
---  
| ![Confluence logo big](cid:footer-desktop-logo)  
---  
This message was sent by Atlassian Confluence 6.15.8  
![](cid:footer-mobile-logo)  
---