XMedius Cloud Update • 2019-06-07

Administrator -

This article lists the changes of the XMedius Cloud platform and services as of 2019-06-07.

Account Administration

(Update 20)

SAML 2.0 Support for SSO Integration

Enterprise Accounts can now be configured for user Single Sign-On (SSO) through SAML 2.0 (alternatively to WS-Fed / WS-Trust).
  • The SAML 2.0 protocol can now be selected as protocol for SSO integration and your Enterprise Settings can be configured according to your SSO Identity Provider (IdP).
  • SAML 2.0 integration has been validated with IdPs such as AD FS (on Windows 2012 R2+), Okta and F5 – but it is technically compatible with other IdPs (for example, OneLogin).
  • Once configured in your account, SSO login using SAML 2.0 works out-of-the-box with the XMedius Cloud Web applications.
  • To have it work with SendFAX or XM SendSecure for Outlook, your users need to update their application to the latest version, namely:
    • SendFAX 8.1.0.153 (minimum)
    • XM SendSecure for Outlook 2.0.0.075 (minimum)
  • MFP connectors can work with SAML 2.0, if they are configured to use the "shared account" or "device login" mode (conversely, they cannot work in "user prompt" mode).
  • Mobile applications (XM Fax and XM SendSecure), as well as the XM Fax Print To Web printer do not currently support SSO login using SAML 2.0.

For more information, see Single Sign-On (SSO) Integration.

AD FS Server IP Whitelisting for SSO using WS-Fed / WS-Trust

If you are considering to enable SSO using WS-Fed / WS-Trust as protocol, you may now need to have your AD FS server IP address added to an internal whitelist by XMedius, depending on your actual client integrations:
  • AD FS server IP address whitelisting is required if your users are using at least one of the following:
    • MFP connectors in "user prompt" mode
    • Mobile applications (XM Fax and XM SendSecure)
  • AD FS server IP address whitelisting is not required if your users are only using the following:
    • Web applications and the XM Fax Print To Web printer
    • SendFAX 8.1.0.153 (minimum)
    • XM SendSecure for Outlook 2.0.0.075 (minimum)
Important: AD FS server IP whitelisting:
  • is performed on-demand – only if needed, according to the above details – through a specific request sent to XMedius.
  • does not apply to supported SAML 2.0 integrations.
  • is not required if your SSO integration using WS-Fed / WS-Trust was already enabled before Cloud Platform Update 20 (i.e. it has been already done).

Trusted Email Domains for Email-to-Fax

If your corporate environment requires that your faxes are mainly sent by email, you can now simply enable the email-to-fax functionality based on the email address domain of your users, without needing to create user accounts.
  • In this specific use case, no user account creation is required, but your enterprise account must be configured to trust one or several email domains (owned by your company).
  • The Trusted Email Domains configuration is only performed on-demand by XMedius through a dedicated request form.
  • Anyone using an email address that belong to these trusted domains will be able to send faxes by email, but will not benefit from any other functionality of your XMedius cloud solutions – unless this person is also registered (i.e. have a user account) in your enterprise.
  • All faxes sent by email in this context will use the same default settings as defined in the enterprise account: default faxing profile, default user language and main fax number for outbound number – except for registered users (who may have different personal settings).
Important: In this context, the risk of potential abuse increases significantly, as any email address of the specified trusted domains will be accepted by your enterprise account. In all cases, it is strongly recommended to appropriately secure the email communications involved when using the email-to-fax functionality.

For more information, see Allowing Unlisted Users to Send Faxes by Email.

Other Improvements


  • The main menu of the Web portal now has the same style and behavior across all Web pages/applications to provide users with a consistent navigation experience.
  • The Fax Numbers list CSV/Excel export option now includes a new column with the Fax Number Note in the exported file.
  • Various other improvements and security fixes.

XM SendSecure

A new version of XM SendSecure for Outlook (2.0.0.075) is available:
  • XM SendSecure for Outlook now supports SSO using SAML 2.0 (when the Enterprise Account is configured for this).
  • The user login flow is now handled via an embedded browser within the application.
  • Other minor improvements and fixes.

XM Fax

A new version of SendFAX (8.1.0.153) is available within the XM Fax Client Package for Windows:
  • SendFAX now supports SSO using SAML 2.0 (when the Enterprise Account is configured for this).
  • The user login flow in SendFAX is now handled via an embedded browser within the application.
  • Other minor improvements and fixes.
Have more questions? Submit a request

Comments

Powered by Zendesk