4.22.0

Stories included in release

Features

• UAA should send auth requests with the state parameter for OIDC/OAuth identity providers
• Operator sees error message when token scope claim fails validation
• Disabling an identity zone

Bug Fixes

• UAA does not accept OIDC tokens with header "cty"