Gravitee.io AM 3.1
We are pleased to announce that Gravitee.io Access Management version 3.1 is now available.
Don’t miss a thing by subscribing to our newsletter to hear about our new releases and the Gravitee.io community.
What’s new ?
Here are the new features we want to highlight :
- UMA 2.0 support
- Virtual hosting support
User Managed Access — UMA 2.0
User-Managed Access (UMA) 2.0 is all about resource sharing and differs from OAuth 2.0 in certain ways. Let us describe this via a simple use case.
Let’s assume Alice wants to use her mobile bank app to access account balances and lists of latest transactions. This task can be achieved using OAuth 2.0 because it only involves Alice accessing her own resources by using a third party application.
Now, imagine that Alice wants to share bank transactions with her accountant who is not member of either the bank or Alice’s company. The accountant uses a requesting party application e.g. professional accounting software to gain access to where relevant bank transactions should be maintained. In such situations UMA 2.0 is valuable.
Using Gravitee.io Access Manager, Alice can apply fine grained criteria to control third party access to resources, in this case, her accountant. A more complete UMA 2.0 use case may be that Alice has three bank accounts and allows her accountant to have ‘read access’ to two of the accounts and allows ‘write access’, or transaction creation, for the third. This is all now possible with Gravitee.io Access Manager version 3.1 via our easy to use portal.
You can find more information about the Gravitee.io implementation of this in our official documentation.
Virtual hosting support
The Gravitee.io Access Management version 3.1 release introduces the ability to define virtual hosts on the entrypoints of a specific security domain.
This can be useful for making your security domains accessible on different hosts and / or different context paths, a new step for multi-tenancy support.
This can be easily configured in the Settings -> Entrypoints section of your Gravitee.io Access Management portal (please see image below).
And more …
You can find the full change log here and the list of deprecations here. We have also added:
- Management API which is now stateless
- Enhancements for the Financial-grade API (FAPI) certification.
- An email can be sent when an account is blocked
To discover all these new features, just follow the installation guide or start to play with Gravitee.io by using Docker.
Waiting for your feedback, we would be happy to talk and help you from Gitter channel.
