Guidelines for expressing group membership and role information (AARC-G069)

Information about the groups a user is a member of is commonly used by relying parties in order to authorise user access to protected resources. This document provides guidelines for expressing group membership and role information across AARC BPA-compliant AAI services. Specifically, it defines a URN namespace for expressing this information using common identity federation protocols, namely SAML and OpenID Connect/OAuth2

CESNET/perun-services: Release 3.28.0

<ul> <li>CN and DN attribute values are now escaped in ad_ceitec.</li> <li>mailaliases and ad_user_mu_ucn now use the same attribute for allowing expired members.</li> <li>Extended grace period for students in VUP scripts.</li> <li>Multiple gen scripts converted to use getHashedData.</li> </ul&gt

CESNET/perun-services: Release 3.22.0

<ul> <li>Enhanced service ad_user_mu_ucn.</li> <li>Added perun-send.chain.</li> <li>Added du_info_export service.</li> <li>Added generic_send in Python.</li> <li>Converted services arcgis_mu, hadoop*, hml_json edited to use hashed data.</li> </ul&gt

CESNET/perun-services: v3.36.0

<a href="https://github.com/CESNET/perun-services/compare/v3.35.1...v3.36.0">3.36.0</a> (2022-02-01) Bug Fixes <ul> <li><strong>ldap_it4i:</strong> make send script executable (<a href="https://github.com/CESNET/perun-services/commit/e481a03b54ec9009d9968919212618f2518b806c">e481a03</a>)</li> </ul> Features <ul> <li><strong>ldap_it4i:</strong> generate userPassword only when user has valid password (<a href="https://github.com/CESNET/perun-services/commit/6f92911a95ca4fa7e11fbeb5b2c742a57aaff786">6f92911</a>)</li> </ul&gt

CESNET/perun-services: v3.39.0

<a href="https://github.com/CESNET/perun-services/compare/v3.38.0...v3.39.0">3.39.0</a> (2022-03-28) Features <ul> <li><strong>fbmi_doors:</strong> added scripts for ČVUT FBMI door system (<a href="https://github.com/CESNET/perun-services/commit/9fe54d313a56e4d926212a6d66975b32c6f1a264">9fe54d3</a>)</li> <li><strong>lawdb_export_mu:</strong> add new lawdb_export_mu service (<a href="https://github.com/CESNET/perun-services/commit/154c6958af76340aaa0b4ca0512f247ec9e40285">154c695</a>)</li> </ul&gt

CESNET/perun-services: v8.3.0

<a href="https://github.com/CESNET/perun-services/compare/v8.2.0...v8.3.0">8.3.0</a> (2023-09-04) ⚠ BREAKING CHANGES <ul> <li><p><strong>o365_groups_mu:</strong> When merged, can remove gen-local-dev and send-local-dev changes including descriptions on idm-prod</p> </li> <li><p><strong>o365_groups_mu:</strong> new service propagating to Teams via O365 (<a href="https://github.com/CESNET/perun-services/commit/2cf5d4fb4db89c30f70d1b11916b1f0aa5edbc09">2cf5d4f</a>)</p> </li> <li><strong>vsup_k4:</strong> ignore smartmatch experimental warning (<a href="https://github.com/CESNET/perun-services/commit/64781a32f7811cf39ebdc816e664838281de7a84">64781a3</a>)</li> <li><strong>vsup_tritius:</strong> fixed utf8 encoding (<a href="https://github.com/CESNET/perun-services/commit/2472cd4dc94790f04ccc7cada22e00d58208e4cf">2472cd4</a>)</li> </ul&gt

CESNET/perun-services: v8.5.0

8.5.0 (2023-09-27) ⚠ BREAKING CHANGES atlassian_mu: script needs to be run once with DEACTIVATED_PREFIX_INIT=1 Features atlassian_mu: add 'del_' prefix to inactive users (71afe61) o365_mu_ukb_forward_status: add new service (1f0fe02) Bug Fixes scs_it4i: use send_lib.py, support v2 API (63611f4) vsup_stag: update service for new DB schema (be6835d

CESNET/perun-services: v8.0.0

<a href="https://github.com/CESNET/perun-services/compare/v7.5.0...v8.0.0">8.0.0</a> (2023-07-04) ⚠ BREAKING CHANGES <ul> <li><strong>appdb:</strong> Removed scripts for unused service AppDB. Remove service definition and res:def:appDBContactRole attribute on deployment.</li> </ul> Features <ul> <li> Update bbmri_* gen scripts for after BBMRI migration (<a href="https://github.com/CESNET/perun-services/issues/779">#779</a>) (<a href="https://github.com/CESNET/perun-services/commit/1c186e852259e1337731c3fc035cc173ca14a729">1c186e8</a>)</li> <li><strong>umbraco_mu:</strong> change send script to use BA credentials (<a href="https://github.com/CESNET/perun-services/commit/7f734d546e743a0c63f2103d95d7d687a7ccc947">7f734d5</a>)</li> <li><strong>vsup_ifis:</strong> handle new column STU_GRADUATE (<a href="https://github.com/CESNET/perun-services/commit/15f2abe6e9c95652d148cba1423fc5fc26cd0ebb">15f2abe</a>)</li> <li><strong>zabbix_mu:</strong> send also user's preferred mail (<a href="https://github.com/CESNET/perun-services/commit/1731bdd2abb1ffc3eafb21b6217cf43b212a7248">1731bdd</a>)</li> </ul> Bug Fixes <ul> <li><strong>vsup_ifis:</strong> use column stu_stav instead of stud_stav (<a href="https://github.com/CESNET/perun-services/commit/d0f5439fcfadea50e21ba6159c3ed164ebd78077">d0f5439</a>)</li> </ul> Code Refactoring <ul> <li><strong>appdb:</strong> removed unused service (<a href="https://github.com/CESNET/perun-services/commit/6ce62a0e812304f7bb6786ae940c66ec2c18dce3">6ce62a0</a>)</li> </ul&gt

CESNET/perun-services: v8.2.0

<a href="https://github.com/CESNET/perun-services/compare/v8.1.0...v8.2.0">8.2.0</a> (2023-08-15) New features and notable changes <ul> <li><strong>vsup_ifis:</strong> extend library to support also IS/STAG (<a href="https://github.com/CESNET/perun-services/commit/420efe5c157e84f1e765bcd8b8c0035a73217335">420efe5</a>)</li> <li><strong>vsup_stag:</strong> new service for pushing data to IS/STAG (<a href="https://github.com/CESNET/perun-services/commit/84c8e8c8ff5e20e8d179e22b1d3b317e5d80d164">84c8e8c</a>)</li> </ul&gt

CESNET/perun: v19.0.0

<a href="https://github.com/CESNET/perun/compare/v18.0.1...v19.0.0">19.0.0</a> (2022-11-04) Bug Fixes <ul> <li><strong>cli:</strong> default OIDC config message fix (<a href="https://github.com/CESNET/perun/commit/21ac217c97a74114ccf6d8a147e979eb70a0da31">21ac217</a>)</li> <li><strong>cli:</strong> fixed printing help for reloadAppsConfig tool (<a href="https://github.com/CESNET/perun/commit/6e18883737cefce9076cdd5dd8dea2f422e54632">6e18883</a>)</li> <li><strong>core:</strong> fix createGroupUnion sql exception (<a href="https://github.com/CESNET/perun/commit/bdf41f58faba65ce466fdfa4c161b7e4ec905f52">bdf41f5</a>)</li> <li><strong>core:</strong> fix getMessagesByIdAndCount (<a href="https://github.com/CESNET/perun/commit/aa281f846a813475e6e868c2c8a9ab33f0f902aa">aa281f8</a>)</li> <li><strong>core:</strong> fixed ssh keys validation for keys with prefix (<a href="https://github.com/CESNET/perun/commit/64b5e7192886c8d05ce3ad614fc785d639a8f3da">64b5e71</a>)</li> <li><strong>core:</strong> support mu password manager on test instance (<a href="https://github.com/CESNET/perun/commit/05311cbc70f189ac3bd66d266f4b34a9248f2e77">05311cb</a>)</li> <li><strong>registrar:</strong> check form items on update (<a href="https://github.com/CESNET/perun/commit/2bab3ee582fcdc0cf8ec68318c246c7a1c36b513">2bab3ee</a>)</li> <li><strong>registrar:</strong> fix duplicate notifications (<a href="https://github.com/CESNET/perun/commit/2023cb60c57d3d4bbc83dfd61e03bca468edaf3c">2023cb6</a>)</li> </ul> Features <ul> <li>Add method to get OIDC config for Perun instance + CLi script to call this method (<a href="https://github.com/CESNET/perun/commit/3b54deccfe971b91c44aaac4b552c29397137511">3b54dec</a>)</li> <li>added support for securityText attribute (<a href="https://github.com/CESNET/perun/commit/eb7ff3ab581fa48d93723460da57b85a1dd45df8">eb7ff3a</a>)</li> <li><strong>cabinet:</strong> rights changed for getAuthorsByPublicationId method (<a href="https://github.com/CESNET/perun/commit/7da850b860ccb9fde48c42a3ea1ff5e5db0391a4">7da850b</a>)</li> <li><strong>cli:</strong> revokeOidc fallback (<a href="https://github.com/CESNET/perun/commit/06d05617a3406c941dda59efe89176863257cf5f">06d0561</a>)</li> <li><strong>core:</strong> add ConsentStatus to UsersPageQuery (<a href="https://github.com/CESNET/perun/commit/2c861a56fc99520f679ce2fdadc4289644dca9c4">2c861a5</a>)</li> <li><strong>core:</strong> allow self to call get all entities (<a href="https://github.com/CESNET/perun/commit/b0d38a71e4663667d85c6203d7910e187efd01e7">b0d38a7</a>)</li> <li><strong>core:</strong> Default minimum password length set to 8 characters (<a href="https://github.com/CESNET/perun/commit/c6835da36ec982c1870ec59cebacaf9ed7d5aadb">c6835da</a>)</li> <li><strong>core:</strong> exact match user attribute list/map values (<a href="https://github.com/CESNET/perun/commit/d710e8b93cde778281e2c6263bd5cb74202ab29b">d710e8b</a>)</li> <li><strong>core:</strong> getAllResources method (<a href="https://github.com/CESNET/perun/commit/6888a17062b4885044b4ac128b32da36c94f72ec">6888a17</a>)</li> <li><strong>core:</strong> Role display name (<a href="https://github.com/CESNET/perun/commit/4cf8b84683ac8e6400754a7fe075c1ea6c41d8cb">4cf8b84</a>)</li> <li><strong>core:</strong> status indirect urn (<a href="https://github.com/CESNET/perun/commit/806073bbfc3bdd93bd6e947db794ba8e78df2ade">806073b</a>)</li> <li><strong>core:</strong> support branding between new and old GUI (<a href="https://github.com/CESNET/perun/commit/f947e7a0a1b4c2c4954c289720fbb0a551a5613b">f947e7a</a>)</li> <li>make find_group_inconsistencies script use user IDS to work better with hierarchical Vos (<a href="https://github.com/CESNET/perun/commit/f282594c94f32f63f9bc09c751df6a76a41a8cd1">f282594</a>)</li> <li><strong>mvn:</strong> upgrade to Spring Boot 2.7.5 (<a href="https://github.com/CESNET/perun/commit/457024f4a7cdfb0fac0d7d69cad1435dfb2c95e7">457024f</a>)</li> <li><strong>openapi:</strong> (Un)set role for user or group (<a href="https://github.com/CESNET/perun/commit/f4326ffbcc6c8c2edb9bf70d31d07c096d2b7707">f4326ff</a>)</li> <li><strong>registrar:</strong> added ApplicationNotNewException (<a href="https://github.com/CESNET/perun/commit/f96c1c991289f7f2bedaa48e1574af34577654c5">f96c1c9</a>)</li> </ul> BREAKING CHANGES <ul> <li><strong>core:</strong> New brand properties in perun-apps-config.yml, deprecated newAdminGuiAlert in perun-web-gui.properties moved to perun-apps-config and can be branded</li> <li><strong>registrar:</strong> update DB</li> </ul&gt