# January 2019

### SAML-Based Single Sign-On (SSO) with Microsoft Azure Active Directory

* Straatos now supports Single Sign-On (SSO) via Security Assertion Markup Language (SAML).
* Users do not need to sign in again if they have already been authenticated by Microsoft Azure Active Directory (IdP).
* User accounts are automatically created in Straatos upon the first successful login.

***

### Custom Password Policy

* Administrators can define separate password policies for different user groups.
* Policies can enforce:
  * Maximum login attempts.
  * Session timeout limits.
  * Password history restrictions (preventing reuse of old passwords).
  * Minimum password age enforcement (forcing users to change passwords periodically).

***

### Enhanced Straatos Security

* New user password policies include:
  * Minimum password length.
  * Password complexity requirements (e.g., passwords cannot contain usernames).
  * Weak password checks.

* Incremental-delayed login enforcement:&#x20;
  * After three unsuccessful attempts, login attempts will be gradually delayed, in addition to the existing account lockout feature.

***

### User Management Enhancements

* New "Manage User" Role:
  * Users with this role can:
    * Create new user accounts.
    * Assign roles.
    * Enable/disable accounts.
    * Reset passwords.

* Enable/Disable User Accounts:
  * Administrators and users with the "Manage User" role can now enable or disable user accounts.

***

### Performance & System Improvements

* Improved Backend Performance:
  * A new queuing framework has been implemented to handle high-volume task processing and backend operations more efficiently.

***

### Enhanced iConnector Framework Security

* A new security feature enforces authenticated user sessions for document uploads.
* Beneficial for mobile applications built using CumulusPro Mobile SDK, ensuring that only authenticated Straatos users can upload documents.

***

If you have any questions, please contact CumulusPro support at <support@cumuluspro.com>.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.cumuluspro.net/release-notes/january-2019.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
