ESS 3.0
Major release introducing native IdP support, permanent identifiers, and simplified Access Grants.
Last updated
Major release introducing native IdP support, permanent identifiers, and simplified Access Grants.
ESS 3.0 is a major release of the Enterprise Solid Server. It removes the OIDC Broker, introduces permanent resource identifiers, simplifies Access Grant flows, and adds environment isolation for PostgreSQL services.
Native Identity Provider Support — ESS now integrates directly with external OIDC-compliant IdPs (Okta, Azure AD, Ping Identity, etc.) via token exchange. The ESS OpenID Broker is no longer required.
Permanent Identifiers — ESS assigns globally unique, permanent identifiers to storages, resources, agents, and clients. Resources are accessible via canonical URIs ({storage-id}/sc/{resource-id}) that remain stable even if the resource path changes. Access Grant issuing and notification subscriptions must use canonical URIs.
Simplified Access Grant Flow — The UMA service has been removed. Access Grants now serve as receipts — once approved, the recipient accesses resources directly using their ESS Access Token with no additional token exchange. Access Grants are now fully independent of ACP.
Environment Isolation — Each ESS service can operate within its own named PostgreSQL database schema, supporting both single-instance and multi-instance deployments.
Removed services — UMA Service, Query/QPF (Fragments) Service, Notification Gateway Service, WebSocket Notification Service. See Release Notes for migration guidance.
Last updated