SCIM Bridge Release Notes

Fixed

• A set of group membership operations are no longer skipped when one operation would result in a no-op.

2.9.13 is now available. 🎉

This patch fixes a bug with group memberships causing some invites to be skipped.

Subscribe to the RSS feed for 1Password SCIM Bridge release notes.

Fixed

• Users with matching pending email changes will now match existing users instead of creating duplicates.

Security

• Updated golang-jwt to patch non-exploitable dependency CVE.

Improved

• We improved the warning message when a user is provisioned with an unsupported language.
• We made multiple improvements to prevent request smuggling, including no longer allowing spaces in the request method body.

Fixed

• Email capitalization no longer causes mismatches with Google Workspace.

New

• You can now customize group membership cache expiry with the OP_GROUP_MEMBERSHIP_CACHE_PERIOD environment variable, to consistently report accurate memberships when using the CLI to manage groups.

Improved

• Operations such as Add, Remove, and Replace are now case-insensitive.

Fixed

• We fixed a bug from 2.9.0 where Okta imports weren’t working. TotalResults is now accurate.

Improved

• Added support for SCIM-compliant Meta timestamps for users and groups.
• Push notifications from Google Workspace are now more resilient to error.

Fixed

• Groups that fail to be retrieved during the Google Workspace sync will no longer cause accidental user suspensions.

Security

• OP domain validation now relies on an eTLD-capable URL parser.
• Updated security related dependencies.

Fixed

• Fixed a Google Workspace bug that could cause managed groups to become unselected upon server restart.
• The Google Workspace integration will now match groups based on name instead of creating duplicates.

Improved

• Improved performance of the Confirmation Watcher.

Security

• Updated the base image to the most recent version.

Security

• Updated Go package versions to address CVE-2023-45288.