Product Enhancements
Remove Enable SSL Configuration Option from PAL Graph API Settings
#ID 1516461
The Enable SSL option has been removed from the PAL Graph API configuration settings. Secure transport for Graph API communication is managed automatically by the Microsoft Graph endpoints, so a separate SSL toggle is no longer required. Removing it streamlines the configuration screen and prevents confusion from an obsolete setting.
ComponentSpace SAML Library Upgraded
#ID 1506043
The Component Space SAML component in PAL and PAL Config has been upgraded from the previous version to the latest approved stable version. The upgrade strengthens the security and standards-compatibility of the SAML SSO integration while keeping all existing authentication behavior intact:
Existing SSO authentication flows continue to work after the upgrade.
No change to login, logout, or session management behavior.
SAML metadata generation and consumption continue to function correctly.
All existing identity provider (IdP) integrations remain valid and were validated after the upgrade.
Bug Fixes
We’ve made the following security updates in this version of FOIAXpress PAL:
ID | Description |
|---|---|
1487562 | Resolved an issue where, while submitting multiple requests without signing in through the PAL application, the selected Requester Category was not retained correctly. The system previously defaulted to the same category for all submissions regardless of user selection. The system now correctly captures and applies the selected Requester Category for each unregistered request, ensuring accurate categorization. |
1531719 | Resolved an issue where requester and request synchronization failures occurred in the FX PAL production environment due to null values in the prefix and suffix fields for certain requesters. These null values caused query errors and disrupted processing. The system now handles null values appropriately, ensuring stable query execution and reliable synchronization. |
1533356 | Resolved an issue where the Forgot Password functionality in the PAL application did not work reliably and resulted in inconsistent behavior. In some cases, users were unable to proceed to the verification code screen despite receiving the email, while in others, the verification screen appeared but no email was received. Additionally, password reset attempts for synced requesters incorrectly displayed an error indicating the account was not synced. The system now ensures proper handling of password reset flow, consistent email delivery, and accurate validation of synced requester status. |
1546116 | Resolved an issue where CAPTCHA errors in the FX PAL production environment blocked all FOIA request submissions, causing the request submission system to become unresponsive. The system now properly validates CAPTCHA responses and ensures uninterrupted submission of requests, restoring normal functionality. |
1540224 | Resolved an issue where SAML authentication for login failed when POI configuration contained data. The system previously used the POI IdP incorrectly for all authentication levels, breaking the login process. The system now correctly selects the IdP based on the authentication level, ensuring successful login functionality. |