Enhancements

Force user logout

Now you can force your users to log out of OneLogin. This is especially handy if you suspect a security breach and you need to reset user passwords directly in an external directory like AD, because a password reset alone won't necessarily destroy active user sessions in OneLogin.

You can select the Force Logout User operation from the User Bulk Operations menu, or select Force Logout for an individual user from the More Actions menu on the User Details page.

For more information, see Forcing Users to Log Out.

User search improvements

OK. We'll admit it. User search on the All Users page was funky. Now it's pretty darn nice, and it works the way you'd expect. Any combo of name and filter works, and it's easy to add and remove filters. Give it a try.

For more information, see Searching for Users.

Fixes

Event generated when you create new directory
We now display an event in Activity > Events when you create a new directory using the directory wizard. (PROV-558)

Internet Explorer browser extension
We fixed an issue in which the blue bar wasn't disappearing. (PROV-2005)

Chrome browser extension
Using the latest Chrome browser extension, some form-based connectors were not passing credentials to the app on some browsers and operating systems. This issue has been fixed. (PROV-2046)

Security questions
We fixed an issue in which, in some circumstances, a user could accidentally add two sets of identical security questions to their user profile. (SWAT-14)

Links to OneLogin's IDEAS portal
Users without active OneLogin sessions received 404 errors rather than the expected login prompt when clicking through to a OneLogin IDEAS portal link from an email message. This has been fixed. (SWAT-72)

App connector edit page
If an app had a role assigned to it that no longer exits, the edit page for the app connector could in some cases become unreachable, with a 404 page not found error. But now defunct or incorrect roles no longer cause app edit page errors. (SWAT-110)

Account owner locked out
In some circumstances, it would be impossible to unlock an Account owner that authenticates against an external directory like Active Directory. This issue has been fixed. (SWAT-152)

Redirect when user tries to append admin page path to end-user URL
Admins who are logged into the end-user portal (your-subdomain.onelogin.com) were getting errors when they tried to get to administrative pages like /apps or /apps/edit by tacking those paths onto their end-user portal URL. Now they are redirected to the admin portal at your_domain.admin.[us|eu].onelogin.com. (SWAT-238)

Google Group entitlement provisioning
Group entitlements were displayed in reverse order (Z to A) on the Edit Groups Parameter dialog in the Google Apps connector, but now they're in the right order. Tell all your friends. (SWAT-347)

Personal app blocked because it's a business app
When you try to add a personal app that's been defined by OneLogin as a business app, now you get a message that correctly explains the situation. (SWAT-517)

No Any option for report conditions
Didn't we already fix this? The option to choose whether reports returned values that meet "any" of multiple conditions was displaying in the reports UI, but it doesn't work: your results will always meet "all" of your conditions. We told you that we'd removed the "any" option from the reports UI, but apparently we didn't remove it all the way. Now we have. (SWAT-549)