Clone - Xponent Late December 2018 Release Notes

This release of the Xponent hub brings in a new feature of Single Sign-On, fixes a couple of bugs and adds a new security feature. 

Single-Sign-On 

Xponent now supports Single-Sign-On (SSO) for SAML 2.0 identity providers. Please contact Xponent Support if you are interested in enabling this for your organisation. 

The addition of single sign-on affects all users in a very simple way. The login screen has now changed to ask for your email address first.

• If you are a Xponent user at an organisation where Xponent manages the password then you will be passed to a screen that asks for your Xponent password.

• If your organisation is set up for single sign-on then you will be directed to your familiar SAML identity provider where you will be asked to authenticate using your standard username and password.  

The Xponent managed login flow looks like this: 

followed by this screen:

Successful entry of your password will pass you through to the Xponent home page. 

For the single sign-on managed flow the second screen will take you to your SSO application and on successful login will redirect you to the Xponent Home page. 

Changing Your Password

If your organisation passwords are managed by Xponent then you can set or reset your password using the "Manage Password" link on the second screen. 

If your organisation usernames and passwords are managed by your identity provider then you should be familiar with the process for resetting your password. This typically does not involve Xponent. 

Single Sign-On For Administrators

The configuration of single sign-on with Xponent is at the organisation level. All users within the organisation must be authenticated either by Xponent or by the SSO identity provider - mixed authentication techniques are not allowed. 

Users are identified within Xponent by their email address. It will be necessary to have an email address for each user in the identity provider. 

For the Identity Provider Manager Xponent can supply the 

Xponent requires the following information to configure SSO for your organisation in the Xponent hub: 

• The sign-on URL 

• The issuer identifier - this is also typically a URL 

• The name of the email address field

If you are interested in configuring single sign-on to Xponent for your organisation please contact Xponent Support. 

Bug Fixes

This release also fixes the following bugs and security issues: 

• [KIT-1936] - Security Highest: Username and passwords can not be the same even if the user email is a valid password

• [KIT-2098] - Rabbit MQ Channels Increase over time - fixes an issue under very high load where Rabbit could run out of channels