Wildland Fire Application Portal

Release Notes

FAMAuth 2.10

December 3, 2024

The primary objective for this release is to ease the maintenance of the application tiles.

Installation

Verify that the “Help About” page displays 2.10.0.x for the version. If still 2.9.0.16 then use Shift-F5 to reload the page and verify again.

New or Changed Functionality

  • Application tiles can now be added and deleted from the Applications screen, by users with the Application Maintenance role. Users with the role for editing application tiles can now update the client secret.
  • The text for the Help About has been updated to more closely reflect the business needs.
  • The BLM logo has been updated.

Defects Fixed in this Version

  • None.

Additional Changes

  • Inserts, updates and deletes for all database tables are now captured in audit tables.
  • The FAMAuth server has been upgraded to Java v17 and Spring v2.17.18.

FAMAuth 2.9

May 21, 2024

The primary objective for this release is to improve the user experience.

New or Changed Functionality

  • The user interface has been updated with the same web standards as used for FAMAuth Admin (formerly referred to as “iNAP”) to present a more seamless user experience.
  • The “iNAP Admin” tile has been replaced by the “FAMAuth Admin” button, which is only shown for users that have access to FAMAuth Admin.
  • Access to maintaining user notices is now granted via the User Notice Manager role in FAMAuth Admin.
  • The application tile sections of the portal (“Wildland fire applications”, etc) can now be collapsed and expanded. The collapsed/expanded state of each section is saved as a user preference and applied the next time the user logs into FAMAuth.
  • Application teams are now allowed to update the following settings for their application tiles:
    • Short name
    • Long name
    • Description
    • Application URL
    • Redirect URL(s)
  • The error message displayed for a user in the Removed status has been updated to provide better information.
  • The user notices are no longer filtered by default. All active notices are now shown by default.

Defects Fixed in this Version

  • Users without access to manage user notices are no longer able to click the link for this screen as the portal is loading.

Additional Changes

  • The user interface has been rewritten using Angular.
  • The response from the “me” service now includes the “redirectReason”.

FAMAuth 2.8

December 12, 2023

The primary objective for this release is to improve the user experience such that users are not mistakenly clicking on Training tiles, and to improve overall security by logging users out of eAuthenticaion and Login.gov.

New or Changed Functionality

  • The layout of the portal page has been changed to provide greater separation of Production and Training tiles, and also to show more of the application name.
  • The logout button now logs the user out of eAuthentication or Login.gov. Client applications may now also call the logout with a parameter to specify that the user is to be logged out of FAMAuth as well as eAuthentication or Login.gov.

Defects Fixed in this Version

  • The Logos and Tiles radio buttons no longer disappear after adding the first tile to the My Applications section.

Additional Changes

  • The FAMAuth back-end has been upgraded to Java 11.
  • Redis has been replaced with Spring for session management and cache in the FAMAuth back-end.
  • The FAMAuth client has been upgraded to use Node 18.

FAMAuth 2.7

November 7, 2023

The primary objective for this release is to upgrade the FAMAuth back-end and migrate FAMAuth to a wildfire.gov URL.

New or Changed Functionality

  • FAMAuth has been migrated to a new URL: https://famauth.wildfire.gov. The old URL (iwfirp.nwcg.gov) will continue to be supported until all applications are using the new URL. A user notice will be added in FAMAuth for each application that has migrated to the new URL.
  • Release notes may now be viewed from the Help menu.
  • An environment label has been added to the Development site.

Defects Fixed in this Version

  • None.

Additional Changes

  • The FAMAuth back-end has been upgraded to Red Hat 8 and SQL Server 2019 and re-hosted from DISC PaaS to DISC FireNESS.
  • Sensitive configuration data (such as database password) is no longer checked in to the Forest Service GitHub.
  • Unused reporting functionality has been removed.

FAMAuth 2.6

April 4, 2023

The primary objective for this release is to allow F&AM applications to be accessed via FAMAuth from a browser on a mobile device.

New or Changed Functionality

  • The login and portal screens have been optimized for usability in a browser on a mobile device such as a phone. The mobile view is used for screen sizes less than or equal to an iPad mini in portrait mode.

Defects Fixed in this Version

  • None.

Additional Changes

  • The names of the menu items for performing tasks in iNAP (“Edit/view profile”, etc) are now provided by iNAP.

FAMAuth 2.5

December 6, 2022

The primary objective for this release is to expand the “My Applications” functionality.

New or Changed Functionality

  • All application tiles can now be added or removed from the My Applications section of the FAMAuth portal. The contents of the My Applications section are saved as a user preference for the eAuthentication or Login.gov account that was used to login to the portal.
  • The login method (eAuthentication or Login.gov) is now displayed in the upper-right of the FAMAuth portal.
  • The user notices now default to the applications in the My Applications section, or all if there are no applications in the My Applications section.
  • The tile layout on the FAMAuth portal has been changed from 3 tiles per row to 4.

Defects Fixed in this Version

  • None.

Additional Changes

  • The user notices application model has been improved to consistently relate each user notice to an application tile.
  • The comma-separated list of redirect URLs associated with an application tile has been increased from 256 to 1,024.

FAMAuth 2.4

October 26, 2022

The primary objective for this release is to further streamline user access requests and provide further capabilities for client applications.

New or Changed Functionality

  • Requesting access to a dispatch center can now be performed from the FAMAuth portal using the “Request dispatch center access” menu item.
  • The login page for FAMAuth now displays a warning for use of a government computer system.
  • Support for refresh tokens has been added. The access token now expires after 30 minutes, and FAMAuth now provides a reusable refresh token that expires after 12 hours.

Defects Fixed in this Version

  • The cookie containing the FAMAuth session ID is now deleted from the browser when the Logout button is clicked.

Additional Changes

  • None.

FAMAuth 2.3

June 28, 2022

The primary objective for this release is to improve the user experience, and to upgrade the server to a contemporary version.

New or Changed Functionality

  • The “My Applications” section on the Portal page has been added, which displays logos or tiles for the applications that the user is authorized for in iNAP. All other applications will continue to be shown in the “Wildland Fire Applications” section of the page.
  • User notices can now be filtered to show more than one application. The default is to show notices for the portal and applications that the user is authorized for in iNAP and applications that do not use iNAP for authorization.
    • Applications that use iNAP for authorization: Data Warehouse, e-ISuite, FEPP, IROC, LESO, OIS, SIT-209 and WIMS.
    • Applications that do not use iNAP for authorization: FRx, ROAD, Unit ID and WXx.
  • The Group filter has been removed from the Portal page. The application tiles can still be filtered by typing part of the name.
  • The user profile service (or “me” service) now includes the “user_authenticated_by” claim which will contain the system that the user logged into FAMAuth with: “e-authentication” or “login.gov”.

Defects Fixed in this Version

  • None.

Additional Changes

  • The FAMAuth server has been upgraded to SpringBoot v2.5.11.

FAMAuth 2.2

April 26, 2022

The primary objective for this release is to allow users to request additional access and roles without having to login to iNAP, and to improve the user experience.

New or Changed Functionality

  • Users with a FAM profile can now edit their profile using the “Edit/view profile” menu item, and request additional access using the “Request app access and roles” menu item. Users of FAMAuth integrated applications no longer need to login to iNAP to request additional roles.
  • The “Access” button has been removed from the tiles on the Portal page and clicking anywhere on the tile now launches the application. More space has also been provided on the tiles for an application icon.
  • Privacy, Disclaimer and Accessibility links have been added to the footer.

Defects Fixed in this Version

  • The “silent” (or “bookmark”) mode has been fixed for new users with a Login.gov account that have never logged into FAMAuth.

Additional Changes

  • The log4j libraries used by the FAMAuth server have been upgraded to v2.17.2.

FAMAuth 2.1

November 2, 2021

The primary objective for this release is to improve the user experience for FAMAuth.

New or Changed Functionality

  • The FAMAuth header has been updated from “National Fire & Aviation Management” to “Wildland Fire Application Portal”. Partner agency logos are also now displayed in the header (as well as the footer).
  • Additional instructions for the user have been added to the FAMAuth login page where the user selects eAuth or Login.gov. The reference to “USDA” has also been removed from the eAuth selection, to make the process less confusing for users that are not affiliated with USDA.
  • The notice board has been improved. Notices are no longer limited to a maximum of three, a start and stop date can now be set on each notice, all active notices are displayed to the user and can be filtered for ones of interest, and notices are displayed on the login page as well as the dashboard.
  • Helpdesk information has been added and is displayed on both the login page and the dashboard.
  • The version number for FAMAuth is now displayed on both the login page and the dashboard.
  • Filtering of application tiles on the dashboard has been fixed such that all tiles belong to at least one group, and all groups contain at least one tile, and “Search” has been renamed to “Filter”.
  • Application tiles on the portal are now capable of displaying an application logo.
  • Application tiles that are non-Production (Practice, Training, etc) are now separated from the Production tiles and displayed at the bottom of the portal.
  • The default page for authenticating a user has been changed from eAuth to the page that allows the user to select eAuth or Login.gov. This change allows applications to provide their own login button which skips the FAMAuth dashboard and directly opens the client application upon successful authentication in either eAuth or Login.gov.
  • Attributes (claims) for “email” and “sub” have been added to the information returned by the /me service.

Defects Fixed in this Version

  • The URLs for the DOI and BLM footer icons have been corrected.
  • The session timeout on the FAMAuth portal has been improved to display the login page.

Additional Changes

  • Failover and redundancy have been improved for the back end FAMAuth servers.
  • The access token used for the OAuth 2.0 interaction no longer contains any PII.

FAMAuth 2.0

July 20, 2021

The primary objective for this release is to simplify the onboarding for FAM applications.

New or Changed Functionality

  • Application onboarding has been simplified by eliminating the need for applications to make a separate web service call to iNAP. Authorization and roles are now returned to the application by FAMAuth. Backwards compatibility is maintained for FAM applications that are already integrated with FAMAuth and iNAP.

Defects Fixed in this Version

  • None.

Additional Changes

  • FAMAuth has been modernized to run as a service, rather than from the command line.