From 609075e85f90617344b0c0b013e1753a50c5cd69 Mon Sep 17 00:00:00 2001 From: mustafa Date: Thu, 27 Aug 2026 14:42:09 +0200 Subject: [PATCH 1/8] Update application.yml.j2 --- roles/myconext/templates/application.yml.j2 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/roles/myconext/templates/application.yml.j2 b/roles/myconext/templates/application.yml.j2 index 4151c9c3f..5257eaf68 100644 --- a/roles/myconext/templates/application.yml.j2 +++ b/roles/myconext/templates/application.yml.j2 @@ -133,6 +133,10 @@ feature: allow_location: "classpath:/deny-allow/allowed.json" # Do we allow the create-from-institution flow create_eduid_institution_enabled: {{ myconext.feature_create_eduid_institution_enabled }} + # Do we email the eduID account when an institutional account gets linked to it + send_link_notification_to_eduid_account: True + # Do we email the institutional account when it gets linked to an eduID account + send_link_notification_to_linked_account: True # Do we show the landing page for the create-from-institution flow create_eduid_institution_landing: {{ myconext.feature_create_eduid_institution_landing }} # Do we default remember the user for a longer period From 37567b08254586026dc41869f41dea9c0443b64c Mon Sep 17 00:00:00 2001 From: "mustafa.cakir@surf.nl" Date: Wed, 2 Sep 2026 11:50:45 +0200 Subject: [PATCH 2/8] remove ssl health check --- roles/myconext/templates/application.yml.j2 | 3 +++ 1 file changed, 3 insertions(+) diff --git a/roles/myconext/templates/application.yml.j2 b/roles/myconext/templates/application.yml.j2 index 5257eaf68..70eb593fb 100644 --- a/roles/myconext/templates/application.yml.j2 +++ b/roles/myconext/templates/application.yml.j2 @@ -359,6 +359,9 @@ management: access: none metrics: access: unrestricted + health: + ssl: + enabled: false info: git: mode: full From a17d7e8391be696154fa1867ef97d3f06b7f8af7 Mon Sep 17 00:00:00 2001 From: "mustafa.cakir@surf.nl" Date: Mon, 7 Sep 2026 11:01:58 +0200 Subject: [PATCH 3/8] move log levels from application.yml to logback.xml and add DEBUG level voor boot.availability --- roles/myconext/templates/application.yml.j2 | 6 ------ roles/myconext/templates/logback.xml.j2 | 1 + 2 files changed, 1 insertion(+), 6 deletions(-) diff --git a/roles/myconext/templates/application.yml.j2 b/roles/myconext/templates/application.yml.j2 index 70eb593fb..65d6e45bc 100644 --- a/roles/myconext/templates/application.yml.j2 +++ b/roles/myconext/templates/application.yml.j2 @@ -1,11 +1,5 @@ logging: config: file:///config/logback.xml - level: - org.springframework.data.mongodb: INFO - org.springframework.data.convert: INFO - org.springframework.security: WARN - myconext: DEBUG - io.mongock: DEBUG server: # The port to where this Spring Boot application listens to. diff --git a/roles/myconext/templates/logback.xml.j2 b/roles/myconext/templates/logback.xml.j2 index b04d0e0ec..1a9f3d8be 100644 --- a/roles/myconext/templates/logback.xml.j2 +++ b/roles/myconext/templates/logback.xml.j2 @@ -28,6 +28,7 @@ + From 7b18a2b274b70356c0f59a42df4a780511553e75 Mon Sep 17 00:00:00 2001 From: "mustafa.cakir@surf.nl" Date: Mon, 7 Sep 2026 16:32:58 +0200 Subject: [PATCH 4/8] disable readinessstate --- roles/myconext/templates/application.yml.j2 | 2 ++ 1 file changed, 2 insertions(+) diff --git a/roles/myconext/templates/application.yml.j2 b/roles/myconext/templates/application.yml.j2 index 65d6e45bc..27758408d 100644 --- a/roles/myconext/templates/application.yml.j2 +++ b/roles/myconext/templates/application.yml.j2 @@ -356,6 +356,8 @@ management: health: ssl: enabled: false + readinessstate: + enabled: off info: git: mode: full From 17d2fe26d31f3591b19efc40ac8f2f1248977d64 Mon Sep 17 00:00:00 2001 From: "mustafa.cakir@surf.nl" Date: Tue, 8 Sep 2026 15:57:48 +0200 Subject: [PATCH 5/8] try new health properties to ignore Spring readinessState check --- roles/myconext/templates/application.yml.j2 | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/roles/myconext/templates/application.yml.j2 b/roles/myconext/templates/application.yml.j2 index 27758408d..43c95502d 100644 --- a/roles/myconext/templates/application.yml.j2 +++ b/roles/myconext/templates/application.yml.j2 @@ -344,20 +344,17 @@ management: endpoint: info: access: unrestricted - health: - access: unrestricted - show-details: always prometheus: access: read_only mappings: access: none metrics: access: unrestricted - health: - ssl: - enabled: false - readinessstate: - enabled: off + health: + access: unrestricted + show-details: always + probes: + enabled: false # ← readiness (en liveness) uitgeschakeld info: git: mode: full From f18806e0d18e84fb44f01847dfff149f96d37fdc Mon Sep 17 00:00:00 2001 From: Okke Harsta Date: Wed, 19 Aug 2026 10:19:12 +0200 Subject: [PATCH 6/8] Migration 4.1.0 spring boot myconext --- roles/myconext/templates/application.yml.j2 | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/roles/myconext/templates/application.yml.j2 b/roles/myconext/templates/application.yml.j2 index 43c95502d..d15192d1f 100644 --- a/roles/myconext/templates/application.yml.j2 +++ b/roles/myconext/templates/application.yml.j2 @@ -290,9 +290,11 @@ verify: issuers_path: "classpath:idin/issuers.json" spring: - data: - mongodb: - uri: mongodb://{{ myconext.mongo_user }}:{{ myconext.mongo_password }}@{% for mongo_server in myconext.mongo_servers %}{{ mongo_server }}:{{ myconext.mongo_port }}{% if not loop.last %},{% endif %}{% endfor %}/{{ myconext.mongo_database }}?ssl={{ mongodb_ssl | default('true') }} + http: + converters: + preferred-json-mapper: jackson2 + mongodb: + uri: mongodb://{{ myconext.mongo_user }}:{{ myconext.mongo_password }}@{% for mongo_server in myconext.mongo_servers %}{{ mongo_server }}:{{ myconext.mongo_port }}{% if not loop.last %},{% endif %}{% endfor %}/{{ myconext.mongo_database }}?ssl={{ mongodb_ssl | default('true') }} mail: host: {{ smtp_server }} From 02bb6eb701adabfe6827b248b8b5f988695d7ba4 Mon Sep 17 00:00:00 2001 From: Ricardo van der Heijden <20791917+ricardovdheijden@users.noreply.github.com> Date: Tue, 7 Jul 2026 16:18:00 +0200 Subject: [PATCH 7/8] #648 Adds variables for scoped identifier in eppn feature --- environments/template/group_vars/template.yml | 2 ++ roles/myconext/templates/application.yml.j2 | 6 ++++++ 2 files changed, 8 insertions(+) diff --git a/environments/template/group_vars/template.yml b/environments/template/group_vars/template.yml index e448f0747..5a99ee1dd 100644 --- a/environments/template/group_vars/template.yml +++ b/environments/template/group_vars/template.yml @@ -253,6 +253,8 @@ myconext: feature_dry_run_email_cron: true feature_enable_account_linking: true feature_use_app: true + feature_use_global_uid: true + feature_force_global_uid_entities: "dummy_non_existing_entity,playground_client" sms_api_url: "https://rest.spryngsms.com/v1/messages" sms_api_route: "default" sp_entity_id: https://engine.{{ base_domain }}/authentication/sp/metadata diff --git a/roles/myconext/templates/application.yml.j2 b/roles/myconext/templates/application.yml.j2 index d15192d1f..7528c0f36 100644 --- a/roles/myconext/templates/application.yml.j2 +++ b/roles/myconext/templates/application.yml.j2 @@ -161,6 +161,12 @@ feature: enable_account_linking: {{ myconext.feature_enable_account_linking }} # Set to true to show the app login option use_app: {{ myconext.feature_use_app }} + # When true (default) release the global uid in the uid and eduPersonPrincipalName SAML attributes. + # When false, release the per-SP targeted eduID instead. + use_global_uid: {{ myconext.feature_use_global_uid }} + # SP entityIds that always receive the global uid in the uid and eduPersonPrincipalName SAML attributes, + # even when use_global_uid is false. + force_global_uid_entities: "{{ myconext.feature_force_global_uid_entities }}" default_affiliate_email_domain: eduid.nl From 1454599c9a650436fc532248102b5e69a212d02b Mon Sep 17 00:00:00 2001 From: Peter Havekes Date: Fri, 6 Nov 2026 10:54:56 +0100 Subject: [PATCH 8/8] eduID release 8.5.1 --- roles/myconext/templates/application.yml.j2 | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/roles/myconext/templates/application.yml.j2 b/roles/myconext/templates/application.yml.j2 index 7528c0f36..544c12f7b 100644 --- a/roles/myconext/templates/application.yml.j2 +++ b/roles/myconext/templates/application.yml.j2 @@ -166,7 +166,7 @@ feature: use_global_uid: {{ myconext.feature_use_global_uid }} # SP entityIds that always receive the global uid in the uid and eduPersonPrincipalName SAML attributes, # even when use_global_uid is false. - force_global_uid_entities: "{{ myconext.feature_force_global_uid_entities }}" + force_global_uid_entities: "{{ myconext.force_global_uid_entities }}" default_affiliate_email_domain: eduid.nl @@ -262,11 +262,15 @@ account_linking_context_class_ref: validate_names: https://eduid.nl/trust/validate-names validate_names_external: https://eduid.nl/trust/validate-names-external affiliation_student: https://eduid.nl/trust/affiliation-student + iap_medium: https://refeds.org/assurance/IAP/medium + iap_high: https://refeds.org/assurance/IAP/high profile_mfa: https://refeds.org/profile/mfa linked_institution_mfa: https://eduid.nl/trust/linked-institution/mfa validate_names_mfa: https://eduid.nl/trust/validate-names/mfa validate_names_external_mfa: https://eduid.nl/trust/validate-names-external/mfa affiliation_student_mfa: https://eduid.nl/trust/affiliation-student/mfa + iap_medium_mfa: https://refeds.org/assurance/IAP/medium/mfa + iap_high_mfa: https://refeds.org/assurance/IAP/high/mfa account_linking: myconext_sp_entity_id: https://mijn.{{ myconext_base_domain }}/shibboleth