What’s new
in JSS SSO.
Every fix, refinement and feature we ship to the JSS Single Sign-On plugin, written for humans, in plain language, with every release.
5.1.33.6May 20, 2026
“The quiet one”
ImprovedFaster Active Directory group resolution
Nested AD group lookups are cached per session, cutting first-page load against large directories by roughly a third.
ImprovedLeaner Mid Tier filter footprint
Re-pooled the servlet filter so a busy Mid Tier holds steady at noticeably lower heap under sustained load.
FixedKerberos ticket renewal on long sessions
Service-account tickets are renewed ahead of expiry, ending the occasional 401 that surfaced after eight-hour shifts.
5.1.33.4May 6, 2026
“Housekeeping”
NewScheduled Active Directory sync
Provision and de-provision BMC users on a schedule straight from AD, with a dry-run preview before any change is written to AR System.
ImprovedPlain-language SAML diagnostics
The built-in status page now explains assertion failures in readable terms instead of raw stack traces, which helps when an IdP changes its signing certificate.
FixedSelf-registration field mapping
Custom AR form fields populated during self-registration no longer drop multi-value attributes.
5.1.33.2April 22, 2026
“Tenants, tidied”
NewPer-tenant identity providers
Each Mid Tier tenant can point at its own identity provider, all managed from a single SSO administration console.
ImprovedAuthentication Service health endpoint
The standalone Authentication Service now exposes a /health probe for load balancers and Kubernetes readiness checks.
FixedDaylight-saving drift in audit logs
SSO audit events are recorded in UTC, so they line up across regions around clock changes.
5.1.33.0April 8, 2026
“Foundations”
ImprovedInstaller pre-flight checks
The installer validates Java version, AR plugin port availability, and keystore access before it changes anything on the server.
FixedSpecial characters in service-account passwords
Passwords containing $, ! or @ are handled correctly during silent, unattended installs.