Important WebUI Update: SAML Compatibility Issue and Site Reprovisioning

BigFix Community,

The recent BigFix WebUI release, which included an upgrade to address a security vulnerability, unfortunately introduced a backward compatibility break for some customer configurations utilizing SAML (Security Assertion Markup Language).

This particular issue represents a highly specific edge case that, due to the myriad of unique customer SAML setups, we acknowledge many of you may never encounter. However, we take all regressions seriously. Updates to SAML are inherently complex because the variations in customer configurations are vast, limiting the scope of in-house testing. Although we conducted thorough testing and involved the services team for change validation, this scenario was not identified.

Corrective Action

To restore service stability for the affected users, we have taken the immediate step of republishing the previous WebUI Site version (Site 97).
Guidance for Our Users

  • If your system is displaying Site 99 or if you do not utilize SAML, your WebUI should be fully operational.

  • Should you encounter any issues, please contact BigFix Support immediately for assistance.

We are actively working on the edge case. Our next steps will involve attempting to replicate this specific issue in-house or collaborating directly with customers and our support team to troubleshoot and resolve the underlying problem.

Thank you for your understanding

2 Likes

To view the Site Versions, in the WebUI interface you may click the gears icon at upper-right and then select "Application Updates".

The specific Site with the issue is "Common", the problematic version is Version 98.

1 Like

Best Practice for WebUI Auto Update

AutoUpdateDelay using _WebUIAppEnv_APP_UPDATE_DELAY_DAYS to delay the update if auto update is required. Update the Lower environments (Dev / Test / UAT / QA) before rolling out the update before to production. So Higher value for production environment and lower values for Lower environments.

AutoUpdate Disable using _WebUIAppEnv_APP_UPDATE_ENABLE_AUTO = 0 to disable the auto update and manually apply WebUI Updates.

Reference : Managing Application Updates

1 Like