Re: [Architecture] [IS] SAML SSO Agent for .NET

Hi Chiran, Have we tested this ? Can this be used with the latest Identity Server (5.5.0) to test with ? Thanks! *Jayanga Kaushalya* Senior Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Wed, Feb 28, 2018 at 5:31 PM, Chiran Wijesekara wrote

Re: [Architecture] [Dev] [VOTE] Release WSO2 Identity Server 5.5.0 RC2

Hi all, I have tested the following, 1. Forget-me tool in IS RC2 pack. 2. Forget-me tool in IS Analytics RC2 pack. No blocking issues found. [+] Go ahead and release. Thanks! *Jayanga Kaushalya* Senior Software Engineer Mobile: +94777860160 <+94%2077%20786%200160> WSO2 Inc. | http://ws

Re: [Architecture] [Dev] [VOTE] Release WSO2 Identity Server 5.5.0 RC1

Hi Sagara, Yes I have suggested other teams also to follow the IS convention in [1]. APIM team told me offline that they already changed. Hope others will do the same. [1] [GDPR] Anonymization Tool default configurations/references are differed over the Products Thanks! *Jayanga Kaushalya

Re: [Architecture] Embedding Identity Anonymization Tool with Identity Server

Hi Harsha, For more information about the tool, please refer this [1] mail. [1] GDPR - Compliance Tool (Right to be forgotten) Thanks! *Jayanga Kaushalya* Senior Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Mon, Feb 19, 2018 at 7:44 AM

[Architecture] Embedding Identity Anonymization Tool with Identity Server

installation. The binaries and configurations related to the tool will reside on the location /repository/components/tools/forget-me. [1] https://github.com/wso2/identity-anonymization-tool [2] https://github.com/wso2/product-is Thanks! *Jayanga Kaushalya* Senior Software Engineer Mobile

Re: [Architecture] GDPR - Pseudonyms For Username

We have decided to move on to a new approach. Please see the details related to new approach in [1] [1] GDPR - Compliance Tool (Right to be forgotten) *Jayanga Kaushalya* Senior Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Mon, Jan 22, 2018

[Architecture] GDPR - Compliance Tool (Right to be forgotten)

to address each area such as Logs, Registry, Analytics etc... Please see the mail related to previous approach in [2] Please provide you thoughts. [1] WSO2 Product Stack - GDPR Compliance [2] GDPR - Pseudonyms For Username Thanks! *Jayanga Kaushalya* Senior Software Engineer Mobile: +9477786016

Re: [Architecture] GDPR - Pseudonyms For Username

CIM requests/responses also, rather than maintaining a > separate identifier for SCIM? > > Thanks, > Maduranga. > > On Thu, Jan 18, 2018 at 7:59 PM, Jayanga Kaushalya > wrote: > >> On Tue, Jan 16, 2018 at 2:45 PM, Asela Pathberiya wrote: >> >>> >>>

[Architecture] WSO2 Identity Server 5.4.0 is now OIDC Certified

://openid.net/certification/ Thanks! *Jayanga Kaushalya* Senior Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware ___ Architecture mailing list Architecture@wso2.org https://mail.wso2.org/cgi-bin/mailman/listinfo

Re: [Architecture] GDPR - Pseudonyms For Username

On Tue, Jan 16, 2018 at 2:45 PM, Asela Pathberiya wrote: > > > On Fri, Jan 5, 2018 at 5:50 PM, Jayanga Kaushalya > wrote: > >> Hi all, >> >> According to the GDPR act [1] Chapter 3, Section 3, Article 17 (Right to >> erasure) the data subject has the

[Architecture] GDPR - Pseudonyms For Username

will guaranty the compliance. [1] http://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/en/pdf Thanks! *Jayanga Kaushalya* Senior Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware ___ Architecture mailing

[Architecture] WSO2 Identity Server 5.4.0 Released!

al resources. Thank you for your interest in WSO2 Identity Server. The WSO2 Identity and Access Management Team. *Jayanga Kaushalya* Senior Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware ___ Architecture

[Architecture] WSO2 Identity Server 5.4.0 Beta Released !!!

- [IDENTITY-6980 <https://wso2.org/jira/browse/IDENTITY-6980>] - Add wildcard * support for scim group name filtering *Contribute to WSO2 Identity Server* *Mailing Lists* Join our mailing lists and correspond with the developers directly. We also encourage you to take part in discussio

[Architecture] WSO2 Identity Server 5.4.0 Alpha 10 Released !!!

- Architecture List: architecture@wso2.org - User Forum: StackOverflow <http://stackoverflow.com/questions/tagged/wso2is> Reporting Issues We encourage you to report issues, improvements, and feature requests regarding WSO2 Identity Server through our public

[Architecture] WSO2 Identity Server 5.4.0 Alpha 8 Released !!!

ues, improvements, and feature requests regarding WSO2 Identity Server through our public WSO2 Identity Server JIRA <https://wso2.org/jira/projects/IDENTITY/issues>. ~ The WSO2 Identity and Access Management Team ~ *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http:/

[Architecture] WSO2 Identity Server 5.4.0 Alpha 7 Released!

ver JIRA <https://wso2.org/jira/projects/IDENTITY/issues>. ~ The WSO2 Identity and Access Management Team ~ *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware ___ Architecture mailing list Architecture@wso2.org https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

Re: [Architecture] [C5][IS] Get claims from User object when it is get from cache.

object. Personally I am +1 for the second approach. Please advice if there are any better approaches. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 <+94%2077%20786%200160> WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Sat, Mar 11, 2017 at 9:27 PM, Harsha Thir

Re: [Architecture] [C5][IS] Get claims from User object when it is get from cache.

cached in the IdentityStore side and when you retrieve the user 2nd time it'll be from cache most probably. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Sat, Mar 11, 2017 at 8:49 PM, Hasintha Indrajee wrote:

Re: [Architecture] [C5][IS] Get claims from User object when it is get from cache.

Hi Harsha, It was designed to be like that. User object will be cached in the IdentityStore. So when you retrieving the user object from IdentityStore again, it will be most probably from cache instead of connector. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 <+94%2

Re: [Architecture] Extension point for Password management in user store manager (JDBCUserStoreManager)

*Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Wed, Feb 15, 2017 at 1:18 PM, Sagara Gunathunga wrote: > > > On Wed, Feb 15, 2017 at 1:11 PM, Jayanga Kaushalya > wrote: > >> >> On Wed, Feb 1

Re: [Architecture] Extension point for Password management in user store manager (JDBCUserStoreManager)

On Wed, Feb 15, 2017 at 11:58 AM, Sagara Gunathunga wrote: > > > On Wed, Feb 15, 2017 at 11:44 AM, Jayanga Kaushalya > wrote: > >> Hi Sagara, >> >> We have this feature [1] already in C5. >> >> [1] https://github.com/wso2-extensions/carbon-securi

Re: [Architecture] Extension point for Password management in user store manager (JDBCUserStoreManager)

Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Wed, Feb 15, 2017 at 11:18 AM, Sagara Gunathunga wrote: > > We have the same requirement in 5.3.0 and will go ahead with custom user > store approach. We need to inc

Re: [Architecture] C5 - Groups vs Roles

On Mon, Feb 6, 2017 at 7:18 AM, Isuru Haththotuwa wrote: > Hi Jayanga, > > On Fri, Jan 27, 2017 at 1:53 PM, Jayanga Kaushalya > wrote: > >> On Fri, Jan 27, 2017 at 12:18 PM, Johann Nallathamby >> wrote: >> >>> Hi Nuwan, >>> >>> On F

Re: [Architecture] Carbon C5 - Server Configuration Model

or to the component related values and product-is should always override them from deployment.yaml. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 <+94%2077%20786%200160> WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Wed, Nov 30, 2016 at 10:57 AM, Danesh K

Re: [Architecture] C5 - Groups vs Roles

On Sun, Jan 29, 2017 at 1:52 PM, Nuwandi Wickramasinghe wrote: > > > On Fri, Jan 27, 2017 at 12:18 PM, Johann Nallathamby > wrote: > >> Hi Nuwan, >> >> On Fri, Jan 27, 2017 at 10:40 AM, Nuwan Dias wrote: >> >>> Hi, >>> >>> In C5, since Groups and Roles are supposed to be treated as two >>> diff

[Architecture] WSO2 Identity Server 6.0.0-M1 Released !!

porting Issues We encourage you to report issues, improvements and feature requests regarding WSO2 Identity Server through public WSO2 Identity Server JIRA <https://wso2.org/jira/browse/IDENTITY>. ~ The WSO2 Identity Server Team ~ *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 <

Re: [Architecture] C5 - Groups vs Roles

On Fri, Jan 27, 2017 at 12:18 PM, Johann Nallathamby wrote: > Hi Nuwan, > > On Fri, Jan 27, 2017 at 10:40 AM, Nuwan Dias wrote: > >> Hi, >> >> In C5, since Groups and Roles are supposed to be treated as two different >> entities, we need to clearly understand how to use them and a bit of their >

Re: [Architecture] [Dev] [VOTE] Release WSO2 Identity Server 5.3.0- RC3

Tested the OAuth 2 Form Post response mode with an OWIN client in Windows 2012. No issues found. [+] Stable - Go ahead and release. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware

Re: [Architecture] [BPS][C5] New Permission model for BPMN in C5

Hi Vinod, This document [1] is about the C5 Permission Model. [1] https://docs.google.com/document/d/1yosWL_kTxUWFukcoU7DtrtZdRuiK0ghySs96u4lfUHU/edit#heading=h.34u8lqvsr4ci Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com

[Architecture] Carbon Security Userstore JDBC 1.0.0 M2 Released

Identity Server Team *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware ___ Architecture mailing list Architecture@wso2.org https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

[Architecture] WSO2 Carbon Security CAAS 1.0.0-M2 Released

List: d...@wso2.org - WSO2 Architecture List: architecture@wso2.org ​Thank you for your interest in WSO2 Carbon Security CAAS​. Thanks! Identity Server Team *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.

[Architecture] C5 Usercore - Caching

Permissions related operations are the more frequently used operations in the user core. Please share your thoughts. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware ___ Architecture mailing

[Architecture] C5 Usercore - Password Hashing

#SecretKeyFactory [3] https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet [4] https://www.owasp.org/index.php/Password_Storage_Cheat_Sheet#Work_Factor Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.e

Re: [Architecture] C5 User Core - Realm Service API

rized can be called like User.isAuthorized(Permission). Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Tue, May 3, 2016 at 11:56 AM, Kishanthan Thangarajah wrote: > Most of the API methods we could see that we need

[Architecture] Carbon Security Userstore JDBC 1.0.0 M1 Released !

* You may install carbon-security-userstore-jdbc feature to your product with: org.wso2.carbon.security.userstore org.wso2.carbon.security.userstore.jdbc.feature 1.0.0-m1 zip Best Regards Identity Server Team *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http

Re: [Architecture] C5 User Core - Realm Service API

Hi Darshana, Yes, those links are correct. We have changed the package name from org.wso2.carbon.security to org.wso2.carbon.security.caas since that is the name we are going to use in future. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com

[Architecture] C5 User Core - Realm Service API

/master/components/org.wso2.carbon.security/src/main/java/org/wso2/carbon/security/user/core/store/CredentialStore.java [5] https://github.com/wso2/carbon-security/blob/master/components/org.wso2.carbon.security/src/main/java/org/wso2/carbon/security/user/core/store/IdentityStore.java *Jayanga

Re: [Architecture] [BPS] User management integration of BPMN

Hi Hasitha, We are planing to release an m1 withing this week. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Mon, Apr 18, 2016 at 12:30 PM, Hasitha Aravinda wrote: > Hi Jayanga, > > Any update on

Re: [Architecture] [BPS] User management integration of BPMN

Hi Himasha, We will be able to finish a JDBC based implementation for Platform with Authentication, Authorization, basic CRUD operations and claim management in around 3 weeks. We'll update you when we are done. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. |

Re: [Architecture] Proposed architecture for the C5 User Core

Moving to architecture. *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Wed, Feb 10, 2016 at 4:06 PM, Jayanga Kaushalya wrote: > Hi all, > > We are currently in the process of designing the User Core architecture >

[Architecture] Best approach to filter debug logs according to the data sensitivity

ble or not. What should be the better approach? Or is there any other better approach? Please give your ideas. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware ___ Architecture ma

Re: [Architecture] [IS] OAuth 2.0 Authenticator for Yahoo.

Hi Malaka, I'll add the authenticator to the yahoo/yahoo-authenticator path and will send the PR when finished. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware On Tue, Oct 13, 2015 at 10:32 AM, Malaka Silva wrote:

[Architecture] [IS] OAuth 2.0 Authenticator for Yahoo.

Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160 WSO2 Inc. | http://wso2.com lean.enterprise.middleware ___ Architecture mailing list Architecture@wso2.org https://mail.wso2.org/cgi-bin/mailman/listinfo/architecture

[Architecture] XSS Vulnerability Scanner

Utility will be used as a maven plugin to detect and give potential warnings that are identified in each WSO2 component as a XML document. Utility will be running in the pre-compile phase of the maven. Please share your thoughts. Thanks! *Jayanga Kaushalya* Software Engineer Mobile: +94777860160