Bremen, February 5, 2025 – Univention today announced the release and immediate availability of Univention Corporate Server (UCS) 5.2. The latest version of its all-in-one Identity & Access Management solution delivers significant improvements in security, stability, and maintainability. The release of UCS@school 5.2, the education-focused extension of UCS, will follow on March 11.
Keycloak Becomes the Central Identity Provider
With UCS 5.2, Keycloak is fully integrated and replaces the previously used SimpleSAMLphp and Kopano Konnect components. Keycloak provides users and administrators with significantly expanded functionality and configuration options in the following areas:
- Single Sign-on (SSO) and Single Logout (SLO) using OpenID Connect (OIDC), SAML, or Kerberos
- Identity federation
- Custom conditional authentication flows
Migrating to Keycloak requires a migration process, which can already be performed with UCS 5.0. A detailed migration guide and an overview of validated application scenarios are available.
Daniela Grebe, Teamlead Product Management Univention: „UCS 5.2 represents a major step forward in security and extensibility. It equips IT administrators in public authorities and enterprises with a solution that enables them to manage complex IT environments confidently, reliably, and without compromise.“
Updated to Debian 12 “Bookworm” and Python 3.11
The latest UCS release includes two major Debian operating system upgrades—from Debian 10 “Buster” to Debian 11 “Bullseye”, and finally to Debian 12 “Bookworm”. The included Linux Kernel 6.1 introduces new exploit mitigation mechanisms that improve protection against zero-day exploits, buffer overflows, and kernel exploitation techniques.
UCS 5.2 also upgrades Python from version 3.7 to 3.11. This affects both core product components and custom extensions such as hooks and scripts. The Univention Support team assists customers with any required adjustments to customer-specific extensions.
Additional Highlights of UCS 5.2
- Univention Config Registry (UCR) now validates configuration values based on their defined data type, preventing configuration errors before they occur. Validation can be disabled if required.
- Single Sign-on and Single Logout now support conditional authentication flows (for example, based on network ranges) and improve onboarding and offboarding processes using OpenID Connect and SAML.
- New allow and deny filters for the Active Directory Connector significantly reduce administrative effort by enabling more granular synchronization.
- Attribute blocklists in the Univention Directory Manager (UDM) help prevent invalid data entries, such as duplicate email addresses.
Detailed information and step-by-step guidance are available in the Release Notes and the installation help article.
You can also learn more about the release in our UCS 5.2 blog post, and download the software from our download section.
Download
Univention Corporate Server 5.2
UCS Logo
Keycloak in UCS 5.2
UI in UCS 5.2
About Univention
Univention, headquartered in Bremen, is a provider of open source solutions for the efficient management of digital identities and the integration of applications. Openness, scalability and ease of use are central features of Univention products and serve to realize digital sovereignty, which ensures that user organizations have control over their own data and identities as well as the ability to independently design information technology.
The product Nubus bundles central Identity & Access Management, a web portal for easy access to applications and the option of integrating applications via standardized interfaces and integration packages.
Univention Corporate Server (UCS) is an open integration platform that includes Nubus and its own App Center and enables the central management of heterogeneous IT domains. UCS can be operated as a software appliance in your own data center as well as in the cloud.
And the solution UCS@school, which is tailored to the education sector, offers school authorities an optimized platform for the simple provision of services from different providers such as learning management systems, e-mail, cloud and office applications for schools via their own school portals. Users can be imported – also automatically – from national directories and managed centrally.
Univention’s solutions are used by numerous federal states, municipalities and districts, administrations and companies throughout the DACH region.
Further information:
www.univention.de
Press contact:
Univention GmbH
Alice Horstmann
Head of Communication
presse@univention.de
+49 (0)421 222 32 27
