Edge Documentation

{{DISPLAYTITLE:enPortal v5.6.0 Release Notes}}
[[Category:enPortal 5.6]]
== Introduction ==

This page summarizes the new features, resolved issues, and known issues in enPortal version 5.6.0 released on August 4th, 2015.

== What is enPortal ==

Edge enPortal is the industry's only secure, vendor-neutral network management integration platform. With pre-built Product Integration Modules (PIMs) for common third-party applications, enPortal is a Commercial Off The Shelf (COTS) solution that quickly integrates these network management tools and offers advanced capabilities including:

* Integration of existing web-based tools and applications
* Advanced Security including role/domain-based access via a secure proxy
* Single Sign-On (SSO) and Sign-Off
* Integration with external user authentication systems
* Branding and Customization
* Dashboard Views
* Multi-tenancy
* Scalability

== New Features ==

* Add support for [[enportal/5.6/admin/system_administration/System_Settings#Navigation_Breadcrumb_Support|breadcrumbs]] in default enPortal look and feel. (EN-195)
* Add support for [[enportal/5.6/admin/user_administration/sso/kerberos|Kerberos authentication]] for Single Sign On (SSO). (EN-169)
* Add support for HTTP <tt>DELETE</tt> method in CRS. This allows for better support with modern web applications using REST interfaces. (EN-211)
* New default CRS rule to automatically handle proxied content that includes <tt>X-Frames-Options</tt> headers. (EN-220)
* Inclusion of a new request processor to limit users to one active session. This processor is disabled by default. Please contact support for more information. (EN-193)
* Improve [[enportal/5.6/admin/system_administration/System_Settings#System_Login_Page|Login Page]] admin page by providing a list of valid options and a preview window. (EN-217)
* New example promotional [[enportal/5.6/admin/system_administration/System_Settings#System_Login_Page|login page]] <tt>edgeMarketing</tt>. (AB-970)
* Additional [[enportal/5.6/admin/system_administration/Log_Files|logging]] of per-user accesses to enPortal Channels for usage statistics purposes. (AB-1002)
* Introduced a short random authentication delay to reduce the risk of brute force password attacks. (EN-242)

== Resolved Issues ==

* Removed Apache Standard Taglib to address CVE-2015-0254. This library is not used by the product. (EN-196)
* Fix sub-menu loading on slower links to prevent wrong menu contents being shown. (EN-184)
* Fix CRS resetting enPortalComponentInfo and enPortal_sessionid cookies without appropriate <tt>HttpOnly</tt> or <tt>Secure</tt> flags. (EN-190)
* Fix enPortal when refreshing/reloading page via browser so that the selected channel remains selected. (EN-195)
* Removed un-necessary JSESSIONID cookie being set for the root content (Path = <tt>/</tt>). (EN-202)
* Fix incorrect encoding of protocol-relative URLs. These URLs are now by default allowed to pass through without encoding. (EN-203)
* Better handling of username case sensitivity with [[enportal/5.6/admin/user_administration/ldap_configuration#Note_on_Case_Sensitivity|LDAP Domain Adapters]]. (AB-939)
* Fix issue introduced in 5.5.1 with managing SSO tokens provisioned to Roles. (EN-221)
* Fix concurrency exceptions on high-concurrency deployments. (EN-207)
* Avoid client-side generated cookies being echoed back in enPortal responses via Set-Cookie. (EN-198)
* Permit HTTP 3xx redirects to include URL fragments according to the HTTP specification. (EN-228)
* Fix Session Manager failure when a role is deleted for an active user session using that role. (EN-205)
* Fix handling of "\" characters in SSO passwords. (EN-142)

== Known Issues ==

* no known issues

== Contact Information ==

For questions or assistance with this release of enPortal, please see the [[support/technical_support|support]] page for contact information.