adding note about oidc module improvements to release notes for 4.8

Evolveum · Apr 27, 2023 · 9e435aa · 9e435aa
1 parent 3925b31
commit 9e435aa
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/release-notes.adoc b/release-notes.adoc
@@ -30,6 +30,8 @@ The {release-version} release brings streamlined upgrade process, security stabi
 
 === New Features and Improvements
 
+* Improvements for the OIDC authentication module. Since version 4.8, the flow for identifying a user logged in via the GUI has been changed. MidPoint uses the claim value with the name from the _nameOfUsernameAttribute_. The claim is primarily obtained from the ID token. When a claim is missing in the ID token, midPoint looks for it in the access token. Finally, if the claim is missing in the access token, midPoint uses the user info endpoint to retrieve the claim. And since version 4.8 for REST request midPoint supports authentication with one of two token formats, JWT and Opaque Token. See https://docs.evolveum.com/midpoint/reference/security/authentication/flexible-authentication/configuration/#module-oidc[the documentation] for more configuration details.
+
 * TODO
 
 === Miscellaneous Improvements