03/27/2025

• Implementation SI-96: Update the ConnectionValidator to return mutlple result sets
  updated by GitHub ⁤ on 03/27/2025 05:20 PM
  • Comment added

• Bug SI-118: First time opening files tab, files show as "non readable"
  updated by Jan Sandbrink on 03/27/2025 04:53 PM
  • Version changed from 15.5.0 to 16.0.0
• Bug SI-107: Storage shows as healthy even if audience is misconfigured
  updated by Jan Sandbrink on 03/27/2025 04:53 PM
  • Comment added

    Marcello Rocha Pereira Do I remember correctly that this issue was fixed in a recent PR I looked at? (that refactored ho...

  • Version changed from 15.5.0 to 16.0.0
• Documentation SI-78: Update documentation to include SSO-based storage authentication
  updated by Jan Sandbrink on 03/27/2025 04:51 PM
  • Version changed from 15.5.0 to 16.0.0
• Documentation SI-54: Allow migration from a "two-way OAuth 2" setup to "OAuth 2 SSO"
  updated by Jan Sandbrink on 03/27/2025 04:51 PM
  • Version changed from 15.5.0 to 16.0.0
• Bug SI-86: SSO users storage connection does not work on project storage members page
  updated by Jan Sandbrink on 03/27/2025 04:51 PM
  • Version changed from 15.5.0 to 16.0.0
• Bug SI-87: Can't associate storage to project via storage admin view
  updated by Jan Sandbrink on 03/27/2025 04:50 PM
  • Version changed from 15.5.0 to 16.0.0
• Bug SI-102: Linking to project storage via SSO fails when user can't authenticate
  updated by Jan Sandbrink on 03/27/2025 04:50 PM
  • Version changed from 15.5.0 to 16.0.0
• Bug SI-80: Token Refresh and Exchange does not work when Client ID contains special characters
  updated by Jan Sandbrink on 03/27/2025 04:50 PM
  • Version changed from 15.5.0 to 16.0.0
• Bug SI-84: Empty audience translation is missing
  updated by Jan Sandbrink on 03/27/2025 04:50 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-39: Store token exchange capability on OIDC providers
  updated by Jan Sandbrink on 03/27/2025 04:49 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-14: Extend Nextcloud files storage to use SSO access tokens
  updated by Jan Sandbrink on 03/27/2025 04:49 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-10: File storages settings for type Nextcloud: Allow OIDC based connection instead of OAuth2
  updated by Jan Sandbrink on 03/27/2025 04:49 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-106: Hide authentication method for "SSO with Fallback"
  updated by Jan Sandbrink on 03/27/2025 04:49 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-47: Support OIDC in storage health status
  updated by Jan Sandbrink on 03/27/2025 04:49 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Jan Sandbrink on 03/27/2025 04:49 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-83: Link to new OIDC docs from storages setup
  updated by Jan Sandbrink on 03/27/2025 04:48 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-119: Validate scope of JWTs
  updated by Jan Sandbrink on 03/27/2025 04:48 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-73: Allow to configure SSO authentication + two-way OAuth 2
  updated by Jan Sandbrink on 03/27/2025 04:48 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-77: Audience selection for Nextcloud Hub scenario
  updated by Jan Sandbrink on 03/27/2025 04:48 PM
  • Version changed from 15.5.0 to 16.0.0
• Epic SI-2: Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
  updated by Jan Sandbrink on 03/27/2025 04:46 PM
  • Comment added

    Pushing to 16.0 because of missing corporate edition in 15.5.

  • Version changed from 15.5.0 to 16.0.0
• Feature SI-98: Add SCIM server API
  updated by Jan Sandbrink on 03/27/2025 04:45 PM
  • Comment added

    Wieland Lindenthal I just noticed that this feature was set to Version 15.5. Is the expectation here that the proof of c...

• Feature SI-120: Allow managing SCIM clients
  updated by Parimal Satyal on 03/27/2025 03:35 PM
  • Comment added

    Update: specs updated, I will work on mockups for next week.

  • Description changed (Details)
  • Designer set to Parimal Satyal
  • Requires doc change changed from No to Yes
• Feature SI-120: Allow managing SCIM clients
  updated by Dominic Bräunlein on 03/27/2025 03:01 PM
  • Description changed (Details)
  • Accountable set to Dominic Bräunlein
• Feature SI-74: Storage Health status: Multiple visible checks
  updated by Parimal Satyal on 03/27/2025 01:54 PM
  • Designer set to Parimal Satyal
• Feature SI-120: Allow managing SCIM clients
  updated by GitHub ⁤ on 03/27/2025 01:35 PM
  • Comment added

• Feature SI-53: Up-sale mechanism (Corporate Edition) for OIDC, JWT and SCIM
  updated by Dominic Bräunlein on 03/27/2025 01:02 PM
  • Version changed from 15.5.0 to 16.0.0
• Feature SI-120: Allow managing SCIM clients
  updated by Jan Sandbrink on 03/27/2025 11:43 AM
  • Description changed (Details)
• Feature SI-120: Allow managing SCIM clients
  updated by Jan Sandbrink on 03/27/2025 08:11 AM
  • Status changed from in specification to in development

03/26/2025

• Feature SI-120: Allow managing SCIM clients
  updated by Pavel Balashou on 03/26/2025 06:53 PM
  • Comment added

    Jan Sandbrink I think you listed everything. I added a couple of things that make sense to me. 

  • Description changed (Details)
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by GitHub ⁤ on 03/26/2025 04:15 PM
  • Comment added

    opf/openproject#18416 deployed to qa.openproject-edge.com

• Feature SI-123: Allow managing SCIM clients via API
  created by Jan Sandbrink on 03/26/2025 03:48 PM
• Implementation SI-122: Allow managing SCIM Clients through UI
  created by Jan Sandbrink on 03/26/2025 03:47 PM
• Feature SI-120: Allow managing SCIM clients
  updated by Jan Sandbrink on 03/26/2025 03:47 PM
  • Comment added

    Automatisch durch die Änderungen in Unteraufgabe SI-121 aktualisiert

  • Scheduling mode set to Automatic
• Implementation SI-121: Add database entities around SCIM Client
  created by Jan Sandbrink on 03/26/2025 03:47 PM
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Jan Sandbrink on 03/26/2025 03:46 PM
  • Status changed from needs review to merged
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by GitHub ⁤ on 03/26/2025 03:45 PM
  • Comment added

• Feature SI-70: Allow "system level" Bearer tokens
  updated by Dominic Bräunlein on 03/26/2025 03:22 PM
  • Comment added

    Jan Sandbrink Pavel Balashou 
    I moved it out of the EPIC and set the status to new

  • Status changed from on hold to new
  • Version deleted (15.5.0)
  • Parent deleted (Add SCIM server functionality to OpenProject via SCIM API)
• Implementation SI-97: Update the UI Component to be able to render the groups with statuses
  updated by Eric Schubert on 03/26/2025 03:16 PM
  • Subject changed from Update the UI Component to be able to render the list / groups with statuses to Update the UI Component to be able to render the groups with statuses
• Feature SI-70: Allow "system level" Bearer tokens
  updated by Pavel Balashou on 03/26/2025 10:46 AM
  • Comment added

    I'd reject for the time being. I believe it could be extracted/copied later if there is a need.

• Feature SI-98: Add SCIM server API
  updated by GitHub ⁤ on 03/26/2025 10:36 AM
  • Comment added

• Implementation SI-93: Breaking down the tests: AMPF Configuration Group
  updated by Marcello Rocha Pereira on 03/26/2025 10:32 AM
  • Status changed from in development to closed
  • Assignee deleted (Marcello Rocha Pereira)
  • % Complete set to 100%
• Implementation SI-94: Breaking down the tests: Authentication Configuraiton Group
  updated by Marcello Rocha Pereira on 03/26/2025 10:32 AM
  • Status changed from needs review to closed
  • % Complete set to 100%
• Implementation SI-96: Update the ConnectionValidator to return mutlple result sets
  updated by Marcello Rocha Pereira on 03/26/2025 10:31 AM
  • Status changed from new to in development
  • Assignee set to Marcello Rocha Pereira
  • Developers set to Marcello Rocha Pereira
• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by GitHub ⁤ on 03/26/2025 09:45 AM
  • Comment added

    opf/openproject#18436 deployed to qa.openproject-edge.com

• Implementation SI-93: Breaking down the tests: AMPF Configuration Group
  updated by GitHub ⁤ on 03/26/2025 09:45 AM
  • Comment added

    opf/openproject#18435 deployed to qa.openproject-edge.com

03/25/2025

• Implementation SI-93: Breaking down the tests: AMPF Configuration Group
  updated by GitHub ⁤ on 03/25/2025 04:18 PM
  • Comment added

• Feature SI-120: Allow managing SCIM clients
  updated by Parimal Satyal on 03/25/2025 04:13 PM
  • Comment added

    Hi Jan Sandbrink,
    Indeed, it would perhaps also make it easier for admins to find the option and for us to communicate t...

• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by Jan Sandbrink on 03/25/2025 03:55 PM
  • Description changed (Details)
  • Status changed from needs review to merged
• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by GitHub ⁤ on 03/25/2025 03:54 PM
  • Comment added

• Feature SI-120: Allow managing SCIM clients
  created by Jan Sandbrink on 03/25/2025 03:34 PM
  • Comment added

    Parimal Satyal Dominic Bräunlein Pavel Balashou: We will probably need another session for this I guess?
    To catch you up...

• Feature SI-70: Allow "system level" Bearer tokens
  updated by Jan Sandbrink on 03/25/2025 03:29 PM
  • Comment added

    Dominic Bräunlein Pavel Balashou Since we agreed that system level bearer tokens will not be part of what we require for...

• Feature SI-115: Extend OAuth applications to SCIM API
  updated by Jan Sandbrink on 03/25/2025 03:28 PM
  • Comment added

    Dominic Bräunlein not sure about the context of this story, but I am surprised about the expiry time acceptance criteria...

• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by Jan Sandbrink on 03/25/2025 03:17 PM
  • Status changed from in development to needs review
  • Assignee deleted (Jan Sandbrink)
  • Version set to 15.5.0
• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by GitHub ⁤ on 03/25/2025 03:16 PM
  • Comment added

• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by GitHub ⁤ on 03/25/2025 12:59 PM
  • Comment added

• Implementation SI-93: Breaking down the tests: AMPF Configuration Group
  updated by GitHub ⁤ on 03/25/2025 11:47 AM
  • Comment added

• Implementation SI-97: Update the UI Component to be able to render the list / groups with statuses
  updated by Eric Schubert on 03/25/2025 11:04 AM
  • Status changed from new to in development
  • Assignee set to Eric Schubert
  • Developers set to Eric Schubert
• Implementation SI-94: Breaking down the tests: Authentication Configuraiton Group
  updated by GitHub ⁤ on 03/25/2025 10:45 AM
  • Comment added

    opf/openproject#18377 deployed to qa.openproject-edge.com

• Implementation SI-94: Breaking down the tests: Authentication Configuraiton Group
  updated by GitHub ⁤ on 03/25/2025 10:04 AM
  • Comment added

03/24/2025

• Bug SI-107: Storage shows as healthy even if audience is misconfigured
  updated by Jan Sandbrink on 03/24/2025 04:32 PM
  • Comment added

    Marcello Rocha Pereira Essentially there is one validation step missing. We just try to obtain the access token, but we ...

• Bug SI-107: Storage shows as healthy even if audience is misconfigured
  updated by Marcello Rocha Pereira on 03/24/2025 04:30 PM
  • Comment added

    Jan Sandbrink hmmm... is there currently a way to not get into this issue? 
    Right now we are looking at the current logg...

• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by Jan Sandbrink on 03/24/2025 10:33 AM
  • Status changed from specified to in development
  • Developers set to Jan Sandbrink
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Jan Sandbrink on 03/24/2025 09:31 AM
  • Status changed from test failed to needs review
  • Assignee deleted (Jan Sandbrink)
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by GitHub ⁤ on 03/24/2025 09:30 AM
  • Comment added

03/21/2025

• Feature SI-47: Support OIDC in storage health status
  updated by Cécile Guiot on 03/21/2025 04:20 PM
  • Comment added

    All AC have been verified, one issue was found:
      
    which I added as relation on the epic
    Marking this as tested ✅
    Teste...

  • Status changed from in test to tested
  • Assignee deleted (Cécile Guiot)
  • % Complete set to 100%
• Feature SI-105: Allow to set authentication method and storage audience via API
  updated by Cécile Guiot on 03/21/2025 03:44 PM
  • Status changed from in test to test failed
  • Assignee changed from Cécile Guiot to Jan Sandbrink
• Bug SI-107: Storage shows as healthy even if audience is misconfigured
  updated by Cécile Guiot on 03/21/2025 01:37 PM
  • Subject changed from Unclear error message when storage audience is misconfigured to Storage shows as healthy even if audience is misconfigured
  • Description changed (Details)
  • Version set to 15.5.0
  • Parent changed from Support OIDC in storage health status to Seamless integration of user sessions of Nextcloud and OpenProject using OIDC & JWTs
  • File grafik.png added as attachment
• Feature SI-117: Accept client credentials token issued by OIDC IDP
  updated by Jan Sandbrink on 03/21/2025 10:56 AM
  • Description changed (Details)
  • Status changed from in specification to specified
• Implementation SI-92: Breaking down the tests: Base Configuration Group
  updated by Marcello Rocha Pereira on 03/21/2025 10:50 AM
  • Status changed from new to closed
  • % Complete set to 100%
• Implementation SI-94: Breaking down the tests: Authentication Configuraiton Group
  updated by Marcello Rocha Pereira on 03/21/2025 10:50 AM
  • Status changed from new to needs review
  • Developers set to Marcello Rocha Pereira
• Implementation SI-93: Breaking down the tests: AMPF Configuration Group
  updated by Marcello Rocha Pereira on 03/21/2025 10:49 AM
  • Status changed from new to in development
  • Assignee set to Marcello Rocha Pereira
  • Developers set to Marcello Rocha Pereira