EasySSO 4.2.7 SAML configuration UI issues with POST/Redirect binding URLs

Incident Report for TechTime Initiative Group

Resolved

We have reviewed the fix implemented in version 4.2.8, deemed it lacking and re-done it, issuing version 4.2.10 with the final fix.

Server:
Jira: https://marketplace.atlassian.com/apps/1212581/easy-sso-jira-kerberos-ntlm-saml/version-history#b4002010005
Confluence: https://marketplace.atlassian.com/apps/1212583/easy-sso-confluence-kerberos-ntlm-saml/version-history#b4002010005
Bitbucket: https://marketplace.atlassian.com/apps/1214247/easy-sso-bitbucket-kerberos-ntlm-saml/version-history#b4002010005

Data Center:
Jira: https://marketplace.atlassian.com/apps/1212581/easy-sso-jira-kerberos-ntlm-saml/version-history#b4002010000
Confluence: https://marketplace.atlassian.com/apps/1212583/easy-sso-confluence-kerberos-ntlm-saml/version-history#b4002010000
Bitbucket: https://marketplace.atlassian.com/apps/1214247/easy-sso-bitbucket-kerberos-ntlm-saml/version-history#b4002010000

Posted Oct 23, 2019 - 12:21 NZDT

Monitoring

We have issued version 4.2.8

Server:
Jira: https://marketplace.atlassian.com/apps/1212581/easy-sso-jira-kerberos-ntlm-saml/version-history#b4002008000
Confluence: https://marketplace.atlassian.com/apps/1212583/easy-sso-confluence-kerberos-ntlm-saml/version-history#b4002008000
Bitbucket: https://marketplace.atlassian.com/apps/1214247/easy-sso-bitbucket-kerberos-ntlm-saml/version-history#b4002008000

Data Center:
Jira: https://marketplace.atlassian.com/apps/1212581/easy-sso-jira-kerberos-ntlm-saml/version-history#b4002008005
Confluence: https://marketplace.atlassian.com/apps/1212583/easy-sso-confluence-kerberos-ntlm-saml/version-history#b4002008005
Bitbucket: https://marketplace.atlassian.com/apps/1214247/easy-sso-bitbucket-kerberos-ntlm-saml/version-history#b4002008005

Customers who have reported the issue have applied the manual workaround, so the issue is not reproducing anymore, we are monitoring for reoccurrence and going through internal reviews

Posted Aug 30, 2019 - 12:00 NZST

Identified

We have identified the bug introduced in 4.2.x versions with Single Logout feature and are working issuing a fix

Posted Aug 28, 2019 - 12:00 NZST

Investigating

Upon upgrade to 4.2.x SAML UI presents the binding URLs incorrectly with the Redirect one selected but not filled in instead of the POST one (the only one available previously and thus the only one configured), and upon changing and saving of any other unrelated parameter will create a non-working

Posted Aug 26, 2019 - 23:30 NZST

This incident affected: TechTime Server Apps (EasySSO for Jira Server, EasySSO for Confluence Server, EasySSO for Bitbucket Server) and TechTime Data Center Apps (EasySSO for Bitbucket Data Center, EasySSO for Jira Data Center, EasySSO for Confluence Data Center).