IAM v1.14.0

The v1.14.0 release includes an option to stop storing access tokens in database

The IAM development team is pleased to announce the release of INDIGO IAM v1.14.0.

The main feature of this release is to disable storing access tokens in the database (from configuration). You can enable this feature by adding the environment variable IAM_ACCESS_TOKEN_STORE_ON_DATABASE=false, or the YAML property

iam:
  access_token:
    store_on_database: false

Moreover, many bug fixes and enhancements are included in this release, as can be seen in the release notes.

The major highlights are:

  • add support for AARC-G061 IDP hinting guidelines
  • add support for X.509 linking during a user’s registration request
  • allow to disable upscoping during token exchange through an option
  • force the usage of MFA for all users
  • support for AARC-G052 Proxied Token Introspection implementation
  • support for OpenID Federation automatic client registration.

As usual, the IAM docker image can be obtained from DockerHub.