Changelog

Fixed an issue that caused the adapter to sometimes fail to redirect users who authenticated successfully back to the primary HTTPS port.

Verified that the X.509 Certificate IdP Adapter is compliant with US Federal Information Processing Standards (FIPS). Learn more about usage in Integrating with Bouncy Castle FIPS provider in the PingFederate documentation.

Extended the core contract to include the serial number of the client certificate.

Added the option to use the client certificate for acceptable issuer validation.

Updated third-party library.

Adapter works with PingFederate authentication policies.

Added ability to customize authentication context in SAML assertions.

Added support for Subject Alternative Name (SAN) attributes.

Added ability to redirect to a host for client-certificate authentication.

Added support for retrieving additional certificate elements and mapping them to attributes.

Added ability to access the certificate chain as J2SE X509Certificate objects through OGNL expressions.

Initial release.