03/20/2025

• Implementation SI-94: Breaking down the tests: Authentication Configuraiton Group
  updated by GitHub ⁤ on 03/20/2025 03:34 PM
  • Comment added

• Feature SI-119: Validate scope of JWTs
  updated by GitHub ⁤ on 03/20/2025 01:56 PM
  • Comment added

• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by Cécile Guiot on 03/20/2025 11:36 AM
  • Assignee deleted (Cécile Guiot)
• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Jens Ulferts on 03/20/2025 10:30 AM
  • Comment added

    There will not be a 15.6. release. The one after 15.5. is 16.0

  • Version set to 16.0.0
• Feature SI-119: Validate scope of JWTs
  created by Jan Sandbrink on 03/20/2025 09:41 AM
• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by Jan Sandbrink on 03/20/2025 08:33 AM
  • Description changed (Details)
  • Status changed from new to in specification
  • Assignee set to Jan Sandbrink

03/19/2025

• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Niels Lindenthal on 03/19/2025 06:41 PM
  • Finish date changed from 05/30/2025 to 06/10/2025
  • Scheduling mode set to Manual
  • Duration changed from 108 days to 115 days
• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Wieland Lindenthal on 03/19/2025 06:30 PM
  • Comment added

    FYI The attribute changes above on dates are due to Niels and me prototyping resource management. Those values might cha...

• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Niels Lindenthal on 03/19/2025 06:28 PM
  • Finish date set to 05/30/2025
  • Start date set to 01/01/2025
  • Duration set to 108 days
• Bug SI-118: First time opening files tab, files show as "non readable"
  created by Jan Sandbrink on 03/19/2025 04:36 PM
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Cécile Guiot on 03/19/2025 02:55 PM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    5caa1ee0927787127161977466162175b87c7673
    Product version
    4b55c8485559fa6ad277e54aea2b97536...

  • Status changed from in test to tested
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Feature SI-103: Script the SSO setup for openDesk
  updated by Wieland Lindenthal on 03/19/2025 01:57 PM
  • Description changed (Details)
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Cécile Guiot on 03/19/2025 01:35 PM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Cécile Guiot on 03/19/2025 01:35 PM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by Markus Kahl on 03/19/2025 10:47 AM
  • Status changed from merged to closed
  • Assignee deleted (Markus Kahl)
  • % Complete set to 100%
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by Cécile Guiot on 03/19/2025 10:17 AM
  • Status changed from in test to merged
  • Assignee changed from Cécile Guiot to Markus Kahl
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by GitHub ⁤ on 03/19/2025 09:45 AM
  • Comment added

    opf/openproject#18368 deployed to qa.openproject-stage.com

• Bug SI-116: OIDC can't handle expires_in as a string
  updated by Cécile Guiot on 03/19/2025 09:33 AM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by Markus Kahl on 03/19/2025 09:22 AM
  • Status changed from needs review to merged
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by GitHub ⁤ on 03/19/2025 09:21 AM
  • Comment added

• Feature SI-70: Allow "system level" Bearer tokens
  updated by Jan Sandbrink on 03/19/2025 09:10 AM
  • Status changed from in development to on hold
  • Assignee deleted (Jan Sandbrink)
• Feature SI-117: Accept client credentials token issued by OIDC IDP
  created by Jan Sandbrink on 03/19/2025 09:06 AM
• Implementation SI-110: Add service classes to interact with system tokens
  updated by GitHub ⁤ on 03/19/2025 09:00 AM
  • Comment added

• Bug SI-116: OIDC can't handle expires_in as a string
  updated by Jan Sandbrink on 03/19/2025 08:52 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Bug SI-116: OIDC can't handle expires_in as a string
  updated by GitHub ⁤ on 03/19/2025 08:46 AM
  • Comment added

• Bug SI-116: OIDC can't handle expires_in as a string
  created by Jan Sandbrink on 03/19/2025 08:34 AM
• Feature SI-115: Extend OAuth applications to SCIM API
  created by Dominic Bräunlein on 03/19/2025 07:52 AM

03/18/2025

• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Cécile Guiot on 03/18/2025 05:43 PM
  • Status changed from tested to closed
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Jan Sandbrink on 03/18/2025 03:46 PM
  • Status changed from in specification to in development
  • Assignee changed from Pavel Balashou to Jan Sandbrink
• Implementation SI-114: Allow editing the name of an existing token
  created by Jan Sandbrink on 03/18/2025 03:31 PM
• Implementation SI-113: Allow deleting an existing token
  created by Jan Sandbrink on 03/18/2025 03:31 PM
• Implementation SI-112: Allow creating a new token
  created by Jan Sandbrink on 03/18/2025 03:31 PM
• Implementation SI-111: Implement list view UI
  created by Jan Sandbrink on 03/18/2025 03:30 PM
• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by Cécile Guiot on 03/18/2025 03:29 PM
  • Comment added

    All set ✅
    Tested on:
    Core build
    376c63237823fee4641fd1b4689e4e7aeda3d8de
    Product version
    4b55c8485559fa6ad277e54aea2b975...

  • Status changed from merged to tested
  • Assignee set to Cécile Guiot
  • % Complete set to 100%
• Implementation SI-110: Add service classes to interact with system tokens
  created by Jan Sandbrink on 03/18/2025 03:28 PM
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Parimal Satyal on 03/18/2025 03:10 PM
  • Comment added

    Hi team. Yes, I just realised it wasn't public, just changed it.

  • Description changed (Details)
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Jan Sandbrink on 03/18/2025 02:51 PM
  • Comment added

    I have access now, thanks

• Feature SI-70: Allow "system level" Bearer tokens
  updated by Dominic Bräunlein on 03/18/2025 02:48 PM
  • Comment added

    Jan Sandbrink You should have access now. Can you check again?

• Open Point SI-15: Is the setup for token exchange from one OIDC client to another scriptable in Keycloak?
  updated by Jan Sandbrink on 03/18/2025 01:52 PM
  • Status changed from new to decided
  • % Complete set to 100%
  • Decision set to yes, via API. Though for openDesk we don't need to code anything.
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Jan Sandbrink on 03/18/2025 01:48 PM
  • Comment added

    Parimal Satyal Doubling down here, instead of just pressing a "request access" button: I don't yet seem to have access t...

• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Jan Sandbrink on 03/18/2025 01:46 PM
  • Status changed from new to needs review
  • Assignee deleted (Jan Sandbrink)
• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by GitHub ⁤ on 03/18/2025 01:42 PM
  • Comment added

• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Jan Sandbrink on 03/18/2025 01:41 PM
  • Assignee set to Jan Sandbrink
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by GitHub ⁤ on 03/18/2025 12:15 PM
  • Comment added

    opf/openproject#18348 deployed to qa.openproject-edge.com

• Implementation SI-92: Breaking down the tests: Base Configuration Group
  updated by GitHub ⁤ on 03/18/2025 11:45 AM
  • Comment added

    opf/openproject#18316 deployed to qa.openproject-edge.com

• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Jan Sandbrink on 03/18/2025 11:42 AM
  • Status changed from needs review to merged
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by GitHub ⁤ on 03/18/2025 11:42 AM
  • Comment added

• Open Point SI-109: Do we need SCIM turn off checkbox admin setting?
  updated by Pavel Balashou on 03/18/2025 11:29 AM
  • Comment added

    Hi Oliver Günther,
    Could you provide your perspective whether it would be useful to have a turn off checkbox for SCIM AP...

  • Status changed from new to needs clarification
  • Involved people set to Pavel Balashou, Dominic Bräunlein, Oliver Günther
• Open Point SI-99: Do the system-level tokens expire and how would we handle that?
  updated by Pavel Balashou on 03/18/2025 11:28 AM
  • Status changed from new to resolved
  • % Complete set to 100%
  • Decision set to Yes, tokens expire. Admin are notified to do the rotation.
• Open Point SI-52: How should we behave for DELETE calls?
  updated by Pavel Balashou on 03/18/2025 11:27 AM
  • Status changed from new to resolved
  • % Complete set to 100%
  • Decision set to Delete user on delete request. Deactivate through an attribute update.
• Implementation SI-92: Breaking down the tests: Base Configuration Group
  updated by GitHub ⁤ on 03/18/2025 11:18 AM
  • Comment added

• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Jan Sandbrink on 03/18/2025 09:17 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by GitHub ⁤ on 03/18/2025 09:16 AM
  • Comment added

• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Jan Sandbrink on 03/18/2025 08:35 AM
  • Description changed (Details)
  • Status changed from confirmed to in development
  • Assignee set to Jan Sandbrink
  • Developers set to Jan Sandbrink
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by GitHub ⁤ on 03/18/2025 08:15 AM
  • Comment added

    opf/openproject#18336 deployed to qa.openproject-edge.com

• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Jan Sandbrink on 03/18/2025 07:48 AM
  • Status changed from needs review to merged
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by GitHub ⁤ on 03/18/2025 07:48 AM
  • Comment added

03/17/2025

• Feature SI-70: Allow "system level" Bearer tokens
  updated by Parimal Satyal on 03/17/2025 05:36 PM
  • Comment added

    Hi team. Figma mockups added. 
    This uses our regular box table for the display, a basic Primer form for creation and the...

  • Mockups set to https://www.figma.com/design/BcAqstklVSxzVJ1Na8jf5R/System-API-Tokens?node-id=0-1
• Feature SI-103: Script the SSO setup for openDesk
  updated by Jan Sandbrink on 03/17/2025 04:18 PM
  • Status changed from in specification to specified
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Jan Sandbrink on 03/17/2025 04:02 PM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by GitHub ⁤ on 03/17/2025 02:49 PM
  • Comment added

• Open Point SI-109: Do we need SCIM turn off checkbox admin setting?
  created by Dominic Bräunlein on 03/17/2025 01:17 PM
• Documentation SI-108: How to generate SCIM scoped token in OpenProject
  created by Dominic Bräunlein on 03/17/2025 01:14 PM
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Dominic Bräunlein on 03/17/2025 01:12 PM
  • Description changed (Details)
• Bug SI-107: Unclear error message when storage audience is misconfigured
  updated by Cécile Guiot on 03/17/2025 11:50 AM
  • Description changed (Details)
• Bug SI-107: Unclear error message when storage audience is misconfigured
  updated by Jan Sandbrink on 03/17/2025 10:30 AM
  • Comment added

    To add some detail: This is a misconfiguration that's possible on Edge or other environments with multiple clients that ...

• Bug SI-107: Unclear error message when storage audience is misconfigured
  created by Cécile Guiot on 03/17/2025 10:10 AM
• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Cécile Guiot on 03/17/2025 10:09 AM
  • Comment added

    Working as expected ✅
    Tested on:
    Core build
    7fdfce2cd574a3ccd6e2a8ffe0a6bb2a46baddfc
    Product version
    c32c642cd2201e79821...

  • Status changed from in test to tested
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Jan Sandbrink on 03/17/2025 09:07 AM
  • Status changed from specified to in development
  • Assignee set to Jan Sandbrink
  • Version changed from Wish List to 15.5.0
  • Developers set to Jan Sandbrink
• Feature SI-103: Script the SSO setup for openDesk
  updated by Jan Sandbrink on 03/17/2025 08:58 AM
  • Subject changed from Script the SSO setup for OpenDesk to Script the SSO setup for openDesk
• Feature SI-98: Add SCIM server API
  updated by Pavel Balashou on 03/17/2025 08:50 AM
  • Comment added

    Hi Niels Lindenthal,
    There is no PR yet.

• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by GitHub ⁤ on 03/17/2025 08:45 AM
  • Comment added

    opf/openproject#18313 deployed to qa.openproject-edge.com

• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by Jan Sandbrink on 03/17/2025 08:12 AM
  • Status changed from needs review to merged
• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by GitHub ⁤ on 03/17/2025 08:12 AM
  • Comment added

03/16/2025

• Feature SI-98: Add SCIM server API
  updated by Niels Lindenthal on 03/16/2025 02:29 PM
  • Comment added

    Hi Wieland Lindenthal,
    Is there a PR for this?

03/14/2025

• Feature SI-103: Script the SSO setup for OpenDesk
  updated by Jan Sandbrink on 03/14/2025 04:00 PM
  • Description changed (Details)
• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Cécile Guiot on 03/14/2025 03:38 PM
  • Status changed from merged to in test
  • Assignee changed from Pavel Balashou to Cécile Guiot
• Feature SI-47: Support OIDC in storage health status
  updated by Cécile Guiot on 03/14/2025 03:07 PM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by Cécile Guiot on 03/14/2025 03:07 PM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    f5dae7b7df735b9a0b783389769d47917e4a8b15
    Product version
    c32c642cd2201e798210c2ddb73f1358c...

  • Status changed from merged to tested
  • % Complete set to 100%
• Implementation SI-92: Breaking down the tests: Base Configuration Group
  updated by GitHub ⁤ on 03/14/2025 02:42 PM
  • Comment added

• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Jan Sandbrink on 03/14/2025 02:39 PM
  • Description changed (Details)
  • Requires doc change deleted (No)
• Bug SI-87: Can't associate storage to project via storage admin view
  updated by Cécile Guiot on 03/14/2025 02:32 PM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    f5dae7b7df735b9a0b783389769d47917e4a8b15
    Product version
    c32c642cd2201e798210c2ddb73f1358c...

  • Status changed from merged to tested
  • % Complete set to 100%
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Cécile Guiot on 03/14/2025 01:54 PM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    61291166e15f0a0bf8a7613feb6a05386066040b
    Product version
    9704ef96362b931c54870d7c2b38c97be...

  • Status changed from in test to closed
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Wieland Lindenthal on 03/14/2025 01:49 PM
  • Comment added

    Dominic Bräunlein The discussed idea was to use our OAuth Applications:
    Extend client credentials flow to allow to map...

• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Cécile Guiot on 03/14/2025 12:34 PM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Cécile Guiot on 03/14/2025 12:33 PM
  • Comment added

    Fixed ✅ (thanks Markus for letting me know how to test 😊 )
    Tested on:
    Core build
    df54d044cf3def4e12df754bbd7d2a14e2cf27c...

  • Status changed from in test to closed
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by GitHub ⁤ on 03/14/2025 12:15 PM
  • Comment added

    opf/openproject#18295 deployed to qa.openproject-stage.com

• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by Eric Schubert on 03/14/2025 11:52 AM
  • Status changed from needs review to merged
• Bug SI-90: Loading of filepicker from project storages UI broken
  updated by GitHub ⁤ on 03/14/2025 11:52 AM
  • Comment added

• Feature SI-53: Up-sale mechanism (Corporate Edition) for OIDC, JWT and SCIM
  updated by Dominic Bräunlein on 03/14/2025 11:22 AM
  • Description changed (Details)
• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Dominic Bräunlein on 03/14/2025 11:16 AM
  • Type changed from Feature to Documentation
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by GitHub ⁤ on 03/14/2025 11:15 AM
  • Comment added

    opf/openproject#18298 deployed to qa.openproject-stage.com

• Bug SI-84: Empty audience translation is missing
  updated by Cécile Guiot on 03/14/2025 11:02 AM
  • Comment added

    Fixed ✅
    Tested on:
    Core build
    b892e15ab39240f188f5964aaf6cd3285e035314
    Product version
    9704ef96362b931c54870d7c2b38c97be...

  • Status changed from merged to closed
  • % Complete set to 100%
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Dominic Bräunlein on 03/14/2025 10:58 AM
  • Comment added

    Wieland Lindenthal what would you add or change to it?
    If we use OAuth Applications to provide SCIM client credentials i...

  • Description changed (Details)
• Feature SI-74: Storage Health status: Multiple visible checks
  updated by Marcello Rocha Pereira on 03/14/2025 10:52 AM
  • Comment added

    Jan Sandbrink there was always talk about it this, but we never commited for different reasons (original implementation ...

• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by Jan Sandbrink on 03/14/2025 10:45 AM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by GitHub ⁤ on 03/14/2025 10:45 AM
  • Comment added

• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Cécile Guiot on 03/14/2025 10:37 AM
  • Status changed from merged to in test
  • Assignee set to Cécile Guiot
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by Jan Sandbrink on 03/14/2025 10:22 AM
  • Comment added

    Cécile Guiot Markus Kahl Now it's working. I promise 🤞

  • Status changed from needs review to merged
• Bug SI-91: Trying to create OIDC user tokens, even for non-OIDC providers
  updated by GitHub ⁤ on 03/14/2025 10:22 AM
  • Comment added

• Feature SI-106: Hide authentication method for "SSO with Fallback"
  created by Jan Sandbrink on 03/14/2025 09:54 AM
• Feature SI-74: Storage Health status: Multiple visible checks
  updated by Jan Sandbrink on 03/14/2025 09:51 AM
  • Status changed from in specification to in development
• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Wieland Lindenthal on 03/14/2025 09:37 AM
  • Comment added

    Dominic Bräunlein Sure, it is the default that we start on stuff that is clear while other stuff is not clear. Then we u...

• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Dominic Bräunlein on 03/14/2025 09:34 AM
  • Comment added

    Wieland Lindenthal OIDC is 15.5 not SCIM. 
    There is no version assigned yet. The scope of the EPIC is not finalised ther...

  • Version deleted (15.5.0)
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Wieland Lindenthal on 03/14/2025 09:30 AM
  • Comment added

    Dominic Bräunlein I guess the description needs to get updated eventually if we wan to reuse OAuth Applications to provi...

  • Version set to 15.5.0
  • Requires doc change changed from No to Yes
  • Developers set to OP Dev Titan Team
• Feature SI-98: Add SCIM server API
  updated by Wieland Lindenthal on 03/14/2025 09:26 AM
  • Status changed from in specification to in development
  • Version set to 15.5.0
  • Requires doc change changed from No to Yes
  • Enterprise plan set to Enterprise / Corporate
  • Developers set to OP Dev Titan Team
• Epic SI-13: Add SCIM server functionality to OpenProject via SCIM API
  updated by Wieland Lindenthal on 03/14/2025 09:23 AM
  • Comment added

    Dominic Bräunlein Pavel Balashou From the dailies I understood that this EPIC is in development and that Pavel is workin...

  • Status changed from in specification to in development
  • Assignee changed from Dominic Bräunlein to Pavel Balashou
  • Version changed from Wish List to 15.5.0
  • Accountable set to Dominic Bräunlein
  • Requires doc change changed from No to Yes
• Feature SI-83: Link to new OIDC docs from storages setup
  updated by Jan Sandbrink on 03/14/2025 09:22 AM
  • Version set to 15.5.0
• Feature SI-105: Allow to set authentication method and storage audience via API
  created by Jan Sandbrink on 03/14/2025 09:18 AM
• Feature SI-104: Remove creation dependency between Nextcloud and OpenProject from openDesk setup
  created by Jan Sandbrink on 03/14/2025 09:01 AM