Issues

Issues

• Login page keeps a stale CSRF token/cookie after the session ends

  cloudfoundry/uaa#4156 · opened on Nov 13, 2026

• Support named allowed-resource policies for mTLS clients

  cloudfoundry/uaa#4125 · opened on Oct 28, 2026

• Refresh token grant fails with "Bad credentials" after original client secret is deleted during rotation

  cloudfoundry/uaa#4086 · opened on Sep 27, 2026
  1

• Identity Zone Create/Update should validate subdomain

  cloudfoundry/uaa#3736 · opened on Feb 5, 2026
  1

• uaa.yml - Do we have sensible defaults in our integration tests

  cloudfoundry/uaa#3735 · opened on Feb 3, 2026

• Guidance Required: Recommended Databases and Configuration for Session Store in UAA (v78.0.2)

  cloudfoundry/uaa#3714 · opened on Jan 9, 2026
  1

• [Feature Request] Configurable pre-login notice / consent page in UAA

  cloudfoundry/uaa#3692 · opened on Dec 3, 2025

• read/write split in UAA

  cloudfoundry/uaa#3609 · opened on Sep 4, 2025

• Invalid State Param in request after upgrade to UAA 78.1.0

  cloudfoundry/uaa#3589 · opened on Aug 18, 2025

• [Feature] pattern matching for Client JWT sub

  cloudfoundry/uaa#3507 · opened on Jun 4, 2025
  1

• CF UAA Does Not Store or Use External IDP's Refresh Token

  cloudfoundry/uaa#3450 · opened on May 8, 2025
  2

• Facing issue while fetching List Users, with groups.display and groups.value, as scim filter.

  cloudfoundry/uaa#3384 · opened on Apr 4, 2025
  1

• Lack of Scope Validation for client_credentials grant type

  cloudfoundry/uaa#3374 · opened on Mar 25, 2025

• Fix length limitation of secrets and passwords

  Bug

  cloudfoundry/uaa#3333 · opened on Mar 11, 2025
  1

• Announce the password grant deprecation in DOCs

  cloudfoundry/uaa#3290 · opened on Feb 12, 2025

• Improve JWT bearer usage - deprecate password grant

  cloudfoundry/uaa#3285 · opened on Feb 12, 2025

• Configuration to Not to allow IDP to update UAA User

  cloudfoundry/uaa#3281 · opened on Feb 8, 2025
  1

• Fix and improve configuration validation when using the strict profile

  cloudfoundry/uaa#3279 · opened on Feb 6, 2025

• Overall performance issue for Get All User api - GET /Users

  cloudfoundry/uaa#3261 · opened on Jan 30, 2025
  9

• RP initiative logout is not working if identity zone is having SAML type identity provider configuration

  cloudfoundry/uaa#3249 · opened on Jan 21, 2025
  11

• Add option for SAML to validate or ignore invalid X509 Certificates

  cloudfoundry/uaa#3170 · opened on Nov 29, 2024

• [Feature] Paging for retrieval of all identity providers for a given identity zone

  cloudfoundry/uaa#3145 · opened on Nov 20, 2024

• Paging for retrieval of all identity zones

  cloudfoundry/uaa#3144 · opened on Nov 20, 2024

• Issue in Redirection

  cloudfoundry/uaa#3099 · opened on Oct 28, 2024
  11

• listGroups fetching all the rows from DB although the methods is taking count as parameter which can be used in the query as well

  cloudfoundry/uaa#3094 · opened on Oct 24, 2024
  1