This new release includes defect fixes for the 4.6 release, and is recommended for all 4.6 installations.
Bug fixes
- PHX-3037 Add PKCE support to the OIDC RP Relay authenticator
Now supports PKCE when acting as Relying Party in OIDC. See documentation of Open ID Connect Relying Party under Authenticators for how to enable in your setup
- PHX-3049 WCAG MyApps
MyApps GUI now updated to align with WCAG 2.1
- PHX-3100 XML Parser security improvements
Updated handling of XML parsing
- PHX-3104 OIDCToSAMLBroker when session already available
OIDCToSAMLBroker returns login data when an authenticated OIDC session already exists and prompt is set to “none”
Read the full release notes for PAS 4.6.2 here:
Read full release