All relevant changes are listed below.

New Features

• [ONEP-1702] - Add capability to create custom permissions to be consumed by external applications or microservices

• [ONEP-1858] - Biz extension: New API end-point for external sales orders

• [ONEP-1866] - API for setting user's student state (student status scraper)

• [ONEP-1870] - Add optional 'id' field to User's addresses

• [ONEP-1872] - Use email template to configure email-address-verification message

• [ONEP-1874] - Find wallet by user's PersonalID

• [ONEP-1877] - Discount Campaign to apply discounts to multiple products

• [ONEP-1880] - Support embedding login in iframe with top=true parameter

• [ONEP-1882] - Wallet API: Add an externally generated 'referenceNumber' field to deposit/withdraw transactions

• [ONEP-1885] - API for reading User's event log

Improvements

• [ONEP-1862] - Use email templates to verify email addresses

• [ONEP-1867] - User list API filter supports searching by PersonalIdentityCode

• [ONEP-1883] - Improve SAML User Directory usability

Bug fixes

• [ONEP-1853] - Incorrect handling of 'claims.value' and 'claims.values' during OIDC auth

• [ONEP-1868] - Logout servlet should not work as an open redirector

• [ONEP-1871] - OpenID client frontchannel URLs not called with iframe during /ui logout

• [ONEP-1886] - Datastorage API: delete single key sets value to null instead of deleting key