SSO Connect On-Prem 17.1.1

Released June 02, 2026

This release focuses on security hardening of SAML processing and library currency to maintain a strong security posture with no configuration changes required for administrators.

Features

• Strengthened SAML validation pipeline with stricter response and assertion verification.
• Updated SAML library stack aligned with current Keycloak SAML release line.

Improvements

• Refined attribute extraction and validation to ensure correct audience/recipient/time enforcement across all SSO flows.
• General dependency hygiene to reduce vulnerability surface and align with supported versions.

Security & Bug Fixes

• Keycloak SAML components updated to 26.6.2 to address upstream advisories and maintain current support.
• KSC-522 — SAML authentication bypass class vulnerability mitigated by enforcing signed SAML Response requirements and comprehensive assertion checks. The exploit path was validated, remediated, and regression-tested.

Compatibility & Upgrade Notes

• No admin-side configuration updates are required.
• We recommend validating SSO sign-in with your IdP (Okta, Entra ID, ADFS, Ping, Keycloak) in a non-production environment prior to production rollout.