Migration to 1.41+

Usage of multifactor authentication for elevated functions in Nexeed modules

This feature enables Nexeed modules to use multifactor authentication based on conditional access authentication context feature from EntraID for their elevated functions, and is available only for the Entra ID Identity Providers of type 'microsoft-entra-id-oidc'. Additional configurations are necessary in the related Azure application of this identity provider for this feature to work:

acrs claim should be added to the ID Token

For existing Entra ID Identity Providers,

a user attribute mapper is added automatically during MACMA migration, to map the acrs claim from the Entra ID Token to a user attribute "idpAcrs".
in "NEXEED_IAM" protocol scope, a mapper is added automatically during MACMA migration, to map the user attribute "idpAcrs" to the idp_acrs claim.
"claims,domain_hint" is added automatically in the forward parameters of Entra ID Identity Provider, to forward the required authentication context and domain hint information to Entra ID.

For new Entra ID Identity Providers, the user attribute mapper needs to be created manually.

For more details please refer to the user manual.