Skip to content

Version 26.08.1.0

What's new

Sign in with corporate accounts

Administrators can now connect the company's own directory or identity provider — LDAP or Active Directory, SAML 2.0, and OAuth2 / OpenID Connect — so that people sign in to DataForge with the corporate accounts they already have, instead of a separate set of accounts maintained inside the product. Providers are added, configured and checked directly in the application: the "Identity providers" tab of the "Integrations" section holds the connection settings, the callback addresses to register on the provider's side, and a connection test that reports each check step and its outcome. At sign-in the user simply enters an email address, and DataForge determines which provider serves that address; when several providers match, the user is asked to choose one, and when none matches, the familiar DataForge password is requested — built-in sign-in keeps working alongside the new methods. On every successful sign-in the attributes received from the directory or provider are applied to the DataForge account — first name, last name and group memberships — and, when "group to role" rules are configured for the provider, the account's role is brought in line with them. Provider configuration changes and provider sign-ins are recorded in the audit log.

Platform security hardening

Following a full security review of the product, this release strengthens protection across the platform: stored credentials and secrets are protected more strongly, SQL generation for data marts is hardened, the network addresses the server is allowed to connect to are validated more strictly, real-time connections are now authorized so that live updates reach only users who have access to the data, session and API key handling is tighter, and less sensitive information is written to logs. These changes are internal and require no adjustments to existing projects or configurations.

Improvements and bug fixes

  • The "Merge in dimension group" option was removed from the context menus of the RMD dimensions table, so all RMD tables now offer the same set of context-menu commands (IMP-2925)
  • Timestamps in the application now match the correct time zone in both interface languages (IMP-2866)
  • In on-premises installations, change history, the audit log and deleted project versions are now cleaned up automatically according to their retention period (IMP-2983)
  • Database connection handling was made more resilient under heavy load (IMP-2982)