Inventu Viewer+ Base Product and Components
(Version: 6.0.113 January 8, 2025)
FVTerm Web Terminal Emulator
- Added Microsoft’s Aptos Mono font to the list of fonts users can select for their terminal emulation sessions.
- SAML2 can now have a customized user name based on a custom logon assertion value. For example, rather than showing the user’s email address in the Admin Console (or IP address when no IAM in use), a custom attribute can be specified. For example, custom attributes like “MainframeID” or “EmployeeNumber” can be associated with each active session. When InventuSSO or server-side storage for user preferences is active, this will also be used to manage the user’s saved emulator file names.
- Logout is now supported for OIDC connections using a configured URL at the IAM provider. If the URL is defined, when a user logs-out of OIDC, the FVTerm application will find any and all of a user’s sessions and stop them when configured. This is optional and only will occur when the IAM configuration includes a reference to the FVTerm web server external URL such as https://fvterm.newco.com/oidcacs.aspx?logout=yes with Microsoft Entra ID this appends the user’s sid (session ID) to enable locating the user’s internal dictionary and stop any active sessions with the same owner/id. This has been tested with Microsoft Entra ID only.
- The Microsoft GraphAPI used for retrieving groups and Custom Security Attributes was improved to accommodate detection of expiry of the Graph API Access Token. When originally used for retrieving active Groups the access token was only used once after startup. Now, with the custom security attributes retrieved for each user’s OIDC session start, the access token needs to be valid for the duration of the active FVTerm v4.0 IIS Application Pool process.
- Server-side Macros sometimes would have startup issues after the first execution when run from a browser on localhost, due to a race condition between separate initialization calls. This was fixed and presumably will fix rare conditions in requests off the local machine.
Profiles Configuration and Runtime
- Added the ability to customize the active user name in FVTerm (displayed in the Console for the connected user and used for server-side user preference storage) with the SAML 2.0 Custom UserID Attribute Name. When this is specified, the normal ID (typically the user’s email address or other name) will only be used if the assertions sent at user login do not include the specified attribute name, or the name is blank/empty.
- Added new checkbox in Web Server / Security when SAML is the active IAM type: Detailed SAML2 Connect Logging which when checked will log details of user connections in order to verify the assertions being sent for a user.
- For Microsoft Entra ID OIDC, a new property Entra ID Security Attributes Group will read custom attributes for a user making them available to other FVTerm programs. While it is possible to add custom attributes to a user profile, such as “ftpFlags”, these are added as part of a group and are not sent automatically with the user logon information. To retrieve custom attributes for a user, a Microsoft Graph API call is needed and this property is used to specify the group of custom attributes to retrieve at user logon.
Installer
- Added additional configuration help pages
- Added installation of the Microsoft Aptos Mono font, which is now available to users to select as the active font for a host profile. The installer will run a special FVIISApi command to add the font to the list found in web.config.
ViewerLib API
- New HostConnection static call StopOwnerSessions(string owner) was added to enable stopping all sessions for a user that has signed-out of an OIDC or SAML session.