> For the complete documentation index, see [llms.txt](https://help.cumuluspro.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.cumuluspro.net/release-notes/january-2019.md).

# January 2019

### SAML-Based Single Sign-On (SSO) with Microsoft Azure Active Directory

* Straatos now supports Single Sign-On (SSO) via Security Assertion Markup Language (SAML).
* Users do not need to sign in again if they have already been authenticated by Microsoft Azure Active Directory (IdP).
* User accounts are automatically created in Straatos upon the first successful login.

***

### Custom Password Policy

* Administrators can define separate password policies for different user groups.
* Policies can enforce:
  * Maximum login attempts.
  * Session timeout limits.
  * Password history restrictions (preventing reuse of old passwords).
  * Minimum password age enforcement (forcing users to change passwords periodically).

***

### Enhanced Straatos Security

* New user password policies include:
  * Minimum password length.
  * Password complexity requirements (e.g., passwords cannot contain usernames).
  * Weak password checks.

* Incremental-delayed login enforcement: 
  * After three unsuccessful attempts, login attempts will be gradually delayed, in addition to the existing account lockout feature.

***

### User Management Enhancements

* New "Manage User" Role:
  * Users with this role can:
    * Create new user accounts.
    * Assign roles.
    * Enable/disable accounts.
    * Reset passwords.

* Enable/Disable User Accounts:
  * Administrators and users with the "Manage User" role can now enable or disable user accounts.

***

### Performance & System Improvements

* Improved Backend Performance:
  * A new queuing framework has been implemented to handle high-volume task processing and backend operations more efficiently.

***

### Enhanced iConnector Framework Security

* A new security feature enforces authenticated user sessions for document uploads.
* Beneficial for mobile applications built using CumulusPro Mobile SDK, ensuring that only authenticated Straatos users can upload documents.

***

If you have any questions, please contact CumulusPro support at <support@cumuluspro.com>.