User Sync Tool v2.9.0rc2

Features

• 8c4ea5c Implement unconditional username update
• OAuth Server-to-Server Support
  • New config option in UMAPI connector config and Admin Console connector:
    authentication_method
  • Set to oauth to enable Server-to-Server support
  • Server-to-Server auth only requires Client ID and Client Secret
  • JWT authentication is deprecated and will be removed in a future version
  • More information
    • https://github.com/adobe-apiplatform/user-sync.py/blob/user-guide-wip/en/user-manual/connect_adobe.md
    • https://github.com/adobe-apiplatform/user-sync.py/blob/user-guide-wip/en/user-manual/sync_from_console.md

Fixes

• #811 Fix user email update failures

Build Changes

• Github Actions no longer maintains a build for Ubuntu Bionic (18.04),
  so automated bionic builds are no longer available. Automated builds
  for 22.04 Jammy have been added with the jammy label.

Advisory

This is a pre-release and may not be stable for production use. The username
update feature is under development and will currently update the username of
any user that can be identified as being in need of a username update. This
may have unexpected side effects.

User Sync Tool v2.9.0rc1

Features

• 8c4ea5c Implement unconditional username update

Fixes

• #811 Fix user email update failures

Build Changes

• Github Actions no longer maintains a build for Ubuntu Bionic (18.04),
  so automated bionic builds are no longer available. Automated builds
  for 22.04 Jammy have been added with the jammy label.

Advisory

This is a pre-release and may not be stable for production use. The username
update feature is under development and will currently update the username of
any user that can be identified as being in need of a username update. This
may have unexpected side effects.

User Sync Tool v2.8.0

Known Issues

Note - email address updates may not work as expected. See #810 for more information.

Features

• #738 Platform and environment info

Fixes

• df8b33d Prevent dynamic attribute error
• fa985d1 Fix new user count

User Sync Tool v2.7.6

Features

• 4c4545a Extend "additional groups" awareness/support to all directory connectors

Fixes

• 183e1d2 Fix bug when writing Adobe-only users to file (#801)
• 79ce27d Non-zero exit code for certain error conditions (#803)
• 651d211 Deal with emails, not usernames in CSV adobe-only features (write to CSV, read from CSV) (#808)

Documentation

• c54a9eb Update Additional Groups documentation to discuss all directory connector types

User Sync Tool v2.7.5

Bug Fixes

• fbeb468 Update Sign API model to ignore unknown attributes
• 637a2bf Get Okta token from config securely

Documentation Updates

• Documentation is now built from branch user-guide
• eab9825 Create GHA workflow to build docs

User Sync Tool v2.7.4

Bug Fixes

• 4513fcf, b8be71f Updates to Sign API model
• f5ae357 Better Okta error handling
• #798 Fix timing of Sign API connection
• #794 Create users with email-type usernames in single command step (instead of two-step workflow)

Documentation Updates

• 20ebaeb Document alternate /tmp solution
• 27a99b4, 113a418 Add page for certificate update

Misc Changes

• #785 Deprecation warning error type
• #791 Remove CLI args from Windows batch files

User Sync Tool v2.7.3

#755 Fix Sign email comparison issue
#774 ESM trustee sync fix
#761 Remove six dependency
#776 Sign timeout error fix
fe073bf Update Sign summary log counts

User Sync Tool v2.7.2

#763 Fix CentOS build
#759 Resolve Windows keyring error

User Sync Tool v2.7.1

• #773 Sync signal logic tweaks

User Sync Tool v2.7.0

New Features

Revamped Sign Sync

Sign Sync has been overhauled. It is now implemented as a separate workflow with an alternate entrypoint command (sign-sync).

Feature summary

• Primary config for Sign Sync is sign-sync-config.yml
• Sign connector config - connector-sign.yml
• All identity sources are supported
• Sync supports multiple Sign targets
• Full user lifecycle management for standalone Sign environments
• Mapping structure to manage Sign group assignments and admin privileges
• Same logging options as UMAPI sync
• Sign API data is cached
• Tool to migrate post-sync config

Architecture changes

• New engine module
• rules.py refactored to engine.umapi
• config.py refctored to multi-file module
• Sign API client is top-level (parallel to user_sync module)
• post_sync has been removed

Notes:

• User multi-group (UMG) is not supported at this time
• The Sign client uses Sign API v6

Documentation here - https://adobe-apiplatform.github.io/user-sync.py/en/user-manual/sign_sync.html

Enhanced ESM Support

Fixed an issue when syncing to trustee consoles that use Enterprise Storage Model (ESM).
New config option uses_business_id in UMAPI connector config ensures that users are
handled correctly.

See https://adobe-apiplatform.github.io/user-sync.py/en/user-manual/advanced_configuration.html#esm-secondary-targets