Appearance
ProAuth 2.1.21
This release identifies and resolves critical data integrity issues within the SCIM provisioning engine, specifically addressing synchronization failures when handling complex multi-valued attributes from providers like Microsoft Entra ID.
Core Identity & SCIM
SCIM Provisioning Resilience Core Security
We have enhanced the robustness of SCIM PATCH operations to handle multi-valued attributes (emails, phone numbers, addresses, and roles) more gracefully. This update prevents NullReferenceException errors and ensures that synchronization cycles remain stable even when encountering inconsistent data from upstream identity providers. (#2854)
- Self-Healing Data Logic: The system now automatically filters and cleanses NULL values during serialization, preventing corrupted state from being persisted to the database.
- Entra ID Compatibility: Improved compatibility with Entra ID provisioning agents, ensuring that sync errors for users with sparse attributes are eliminated.
- Improved Serialization: Unified JSON serialization behavior across the identity service to strictly enforce data integrity constraints.
Action Recommended
If you have experienced "Synchronization Error" messages in the Entra ID Provisioning logs related to User attributes, upgrading to this version will resolve the issue automatically. No manual data cleanup is required.
Platform Stability
Security & Integrity
- Data Hardening: Prevented the potential for orphaned or NULL attribute entries in the user store.
- Sync Diagnostics: Improved logging for SCIM attribution errors to assist in debugging complex IAM workflows.