SSO Connect On-Prem 17.1.4

Released September 29, 2026

Keeper SSO Connect On-Prem version 17.1.4 delivers critical security enhancements, administrative interface hardening, Windows environment access control improvements, and third-party library updates.

All administrators operating SSO Connect On-Prem instances are encouraged to upgrade to version 17.1.4.

Improvements

• KSC-535: Administrative Interface Security Hardening Implemented comprehensive protections across all management endpoints to protect administrative configuration.

• KSC-556: SAML Endpoint Hardening Strengthened verifications on SAML authentication callbacks with trusted endpoints.

• KSC-539: Windows File System Access Lockdown Restricted file system permissions (ACLs) on Windows installations for SSO Connect configuration, log, and keystore directories to administrative and system service accounts only.

• KSC-557: Third-Party Component & Dependency Updates Upgraded underlying third-party dependencies to remediate reported component vulnerabilities and maintain a secure software supply chain.

• Code Quality & Static Analysis Remediation Addressed CodeQL security findings and performed code-level optimizations to improve stability and maintainability.

• Information Disclosure Mitigation Suppressed runtime server version banners from HTTP response headers.

Compatibility & Upgrade Notes

• Configuration Changes: No administrative configuration or IdP schema changes are required.

• Automatic ACL Updates (Windows): Upgrading on Windows automatically updates directory permissions on existing data and log folders.

• Deployment Validation: It is recommended to perform a test sign-in with your Identity Provider (e.g., Microsoft Entra ID / ADFS, Okta, PingFederate, Keycloak) after upgrading.

• Supported OS: Windows Server 2022/2025, Red Hat Enterprise Linux 6.8+, Ubuntu 16.04+, openSUSE 15.0+

• Java Runtime: Java 17 LTS

Update Instructions

If you are performing a regular update of SSO Connect On-Prem (from a recent version):

• Open the Admin Console and visit the privisioning tab of the node

• Download, unzip and run the installer