COmanage Developers List

[Arlen Johnson <>]

NEWSLETTER

ISSUE #22 | June 4, 2024

Did you know…?

This month we are dedicating the newsletter to several announcements and other items that you might have missed in recent communications. The stories this month highlight COmanage Registry’s accessibility conformance statement, the release of Registry v5 Milestone Release 12, and information about a Registry v4.3.3 update to how HTML markup is handled.

Open Office Hours - June 7

Do you have a question about deploying or configuring Registry or Match? Want to get some input on a solution architecture design? Want to hear how your colleagues in the community are solving problems similar to yours? Each month you can bring your topics for discussion to the call. No need to register or spin up a presentation (but feel free if it suits you!); just show up! A short conversation starter kicks off each session to help get the discussion started.

Friday, June 7 at 12:00 PM (America/New York)
(no registration necessary)

https://us06web.zoom.us/j/86226181846?pwd=T2VCIHTbdCEuiJyHF2avVuD0FwkZGe.1

Subscribe to COmanage Events or, https://www.addevent.com/calendar/Nr648428

2024 Topic Aperitif #1: COmanage Registry 5.0 Update

Much of the COmanage Project development team is focused on development toward the release of COmanage Registry 5.0. We will kick off each of the Office Hours in 2024 with a brief update on the latest developments.

2024 Topic Aperitif #2: PeopleSoft & Registry

During BaseCAMP this week, several people were talking about how to use COmanage with PeopleSoft. If there is interest among Office Hours attendees, we suggest this subject as one of our planned topics for discussion. 

The Importance of Accessibility

COmanage tools have always been designed with accessibility in mind. With version 4.x of Registry, we added the following WCAG 2.1 AA accessibility statement to the COmanage Style Guide:

RELEASE: Registry v5 Milestone Release 12

In early May, we announced the latest Milestone Release for Registry v5. This release adds the following features to version PE 5:

• Message Templates

• Notifications

• Oracle SqlServers (experimental)

• SmtpServers

• Lots of frontend improvements

• Improvements to handling of status during Pipelines

• Various bug fixes, especially for Transmogrification

• Container updates

You can find details about this release, including how to gain access to it, in the release announcement. Many thanks to the following organizations that provided funding for MR 12:

• The CILogon Project and the University of Illinois

• SCG Collaboration Group

• Southern Methodist University

• And an additional funder (pending disclosure approval)

Learn more about Registry v5 Milestone Releases in Newsletter issue #20 (March 2024).

Changes to HTML markup in Registry

To better handle HTML markup in fields where it is allowed, the recently released Registry v4.3.3 makes use of the html-sanitizer library (version 1.5). This library aims to handle, clean, and sanitize HTML supplied by users to prevent the inadvertent or deliberate introduction of application security problems when the HTML is stored and displayed. 

This library has a deep understanding of HTML: it parses and rewrites the HTML DOM output, keeping only the safe elements and stripping any tag or attribute not explicitly allowed. The Registry fields that are impacted by this update include 

-- Announcement header and footer fields, 

-- Dashboard header and footer fields, and

-- Terms and Conditions

These fields are now stripped of <script> tags and most HTML attributes on output. 

For more information about supported tags, see

https://github.com/tgalopin/html-sanitizer/blob/master/docs/3-configuration-reference.md. 

The impacted Registry fields support tags found in the ['basic', 'code', 'image', 'list', 'table', 'details', 'extra'] extensions. The Dashboards header and footer also allow <style> tags with custom CSS.

Themes, which allow for full control over the interface, are unaffected by this change and will accept <script> tags and other custom markup.

COmanage News

Do you have news to share? Let us know on the #incommon-comanage slack channel or by !

That’s it for this month’s newsletter. We hope to see you during our next open office hours!

---

About The COmanage Project

COmanage is an Open Source Project that is focused on streamlining digital lifecycle management for your populations. It consists of two tools: Registry and Match. 

COmanage Registry is an identity registry with flexible enrollment and lifecycle management capabilities that helps you meet your identity management objectives using standardized tools and approaches. It can be used as a central person registry, a guest management system, or a collaboration hub for scholarly collaborations.

COmanage Match performs identity de-duplication in order to help minimize the creation of duplicate accounts for the same individual. It provides a heuristic-based system for matching identity records across multiple authoritative systems of record. Match can be used with Registry or as a standalone product complementary to your other tools.

Learn more about the project and its supporters at https://incommon.org/software/comanage/.

---

Q: Why did I get this awesome email? 

A: Because you have subscribed to one of the COmanage mailing lists!
See the COmanage Email Lists wiki page for more details.