Hub 2018.2 introduces SAML Authentication Module, Throttling by Login, Personal Data Management, and other improvements.
Built-in TLS Support
Hub installation packages now provide out-of-the-box support for secure connections over TLS. Upload your server certificate during installation or upgrade and encrypt data in transit without setting up a reverse proxy.
SAML Authentication module
This authentication module lets you configure Hub as a SAML service provider. This lets users log in to Hub and the services that are connected to it with credentials from a third-party SAML identity provider.
Throttling by Login
In Hub 2018.2 the IP-based throttling feature has been replaced with the option to apply rate limits to failed login attempts per login. When used together with a reCAPTCHA challenge, this feature protects your installation from brute-force attacks without blocking users who have simply forgotten their passwords.
We have also moved the settings that affect user authentication from the System Settings page to a single page that stores common settings for all authentication modules.
Personal Data Management
We’ve added new options that help you comply with requests from users who want to access or erase their personal data.
Updates and Enhancements
Project Overview Enhancements
Project Overview pages now show widgets and README files on separate tabs. This means that you can view widgets without scrolling to the bottom of the page.
Groups and Teams
New views on the Groups page show you a list of project teams and a mixed mode that shows both groups and teams. We also added an action on this page that lets you merge a group into a team.
Use this operation to eliminate group assignments that duplicate permissions that are granted to a project team.
Create a role that is similar but not identical to an existing role with just a few clicks. Use this action to create a new role with a set of permissions that is identical to an existing role, then add or remove permissions as desired.
Common Settings for Auth Modules
All authentication-related settings have moved from the System Settings page to a new Common Settings page for all authentication modules. This page also contains configuration options for the new login-based throttling feature and the input fields for connecting to Google reCAPTCHA.
Attribute Configuration for SAML Service Providers
When using Hub as a SAML identity provider, you now have the option to specify the attributes that the SAML service provider uses to store the user login, full name, and email address.
For more information, please check the Release Notes.