--- schema_version: "1" id: b824e3bc150e7b888afb7176cc3053d1116919c7708ecd203c66bc7bd939757e title: OpenID Connect Access Token Enforcement collection: mulesoft version: current locale: ja-jp portal_url: https://docs.salesforce.com/mulesoft/current/ja-jp/release-notes/policies/openid-connect-oauth-token-enforcement-policy-release-notes.md canonical_url: https://docs.mulesoft.com/jp/release-notes/policies/openid-connect-oauth-token-enforcement-policy-release-notes source_site: docs.mulesoft.com content_type: documentation content_hash: d5079f95f6a7203bd02bddacc1062124e1941eb74ff97f29367d6de4276b7023 description: MuleSoft Documentation Site latest: true --- # OpenID Connect Access Token Enforcement ## [](#1-6-1)1.6.1 **October 1, 2026** ### What’s New - This release updates policy metadata only. There’s no functional change. ## [](#1-6-0)1.6.0 **February 07, 2024** ### What’s New - The policy definition and policy implementation file are now separate. This enables stronger validations for policy configuration parameters. ## [](#0-9-0)0.9.0 **May 17, 2022** ### [](#new-features-and-enhancements)New Features and Enhancements - Flex support for the Policy. ## [](#1-5-1)1.5.1 **March 15, 2022** ### [](#minimum-mule-version)Minimum Mule Version **Mule 4.1.0** ### [](#fixed-issues)Fixed Issues - Error handling responses revised for JSON compliance. ## [](#1-5-0)1.5.0 **June 24, 2021** ### [](#minimum-mule-version-2)Minimum Mule Version **Mule 4.1.0** ### [](#new-features-and-enhancements-2)New Features and Enhancements - Introduced the capability to configure timeouts when validating OAuth2 tokens for incoming requests. ## [](#1-4-0)1.4.0 **December 22, 2020** ### [](#minimum-mule-version-3)Minimum Mule Version **Mule 4.1.0** ### [](#new-features-and-enhancements-3)New Features and Enhancements - Added support for policies to validate one or all of the scopes defined in API Manager. - Added OAS3 code snippet in the policy YAML. ## [](#1-3-3)1.3.3 **September 28, 2020** ### [](#minimum-mule-version-4)Minimum Mule Version **Mule 4.1.0** ### [](#fixed-issues-2)Fixed Issues - Because the `Content-Type` header of the JSON response from the validate endpoint had additional information, such as charset, the response returned was interpreted as String instead of JSON. The additional modifier is now disregarded. - Responses from the validation endpoint in which the value of the `expires_in` field was equal to 0 were not being parsed as an expired token. ## [](#1-3-2)1.3.2 **Apr 30, 2020** ### [](#minimum-mule-version-5)Minimum Mule Version **Mule 4.1.0** ### [](#new-features-and-enhancements-4)New Features and Enhancements - Error handling responses revised for WSDL APIs to be compliant with SOAP 1.1 and 1.2. - Performance improvements are introduced to the header manipulation engine. - Several performance improvements are introduced in error handling. ### [](#fixed-issues-3)Fixed Issues - After a policy was applied, HTTP headers did not follow the RFC 2616 requirement of case-sensitivity: [https://www.w3.org/Protocols/rfc2616/rfc2616-sec4.html#sec4.2](https://www.w3.org/Protocols/rfc2616/rfc2616-sec4.html#sec4.2). ## [](#1-3-1)1.3.1 **December 18, 2019** ### [](#minimum-mule-version-6)Minimum Mule Version **4.1.0** ### [](#fixed-issues-4)Fixed Issues - Authorization entity attributes that contain non-primitive values were not correctly parsed. These values are now ignored. - An error occured when an object within a JSON object was treated as String type instead of JSON type. This issue is now resolved. - The `Fault` element in the WSDL APIs now includes the `Detail` element, with additional error details. ## [](#1-3-0)1.3.0 **Sep 4, 2019** ### [](#minimum-mule-version-7)Minimum Mule Version **4.1.0** ### [](#new-features-and-enhancements-5)New Features and Enhancements - Introduced configuration flag to enable TLS validation on the Authorization Servers' certificates. - Performance improvements. ### [](#fixed-issues-5)Fixed Issues - Fixed expiration time field being mandatory. ### [](#known-issues)Known Issues - An error occurs in Mule versions v4.1.1, v4.1.2, 4,1,3 and 4.1.4 when a policy is deployed to applications that have the mule-secure-configuration-property-module plugin configured. To resolve this issue, upgrade the specified plugin in the application to version 1.1.0. ## [](#1-2-0)1.2.0 **Apr 26, 2019** ### [](#minimum-mule-version-8)Minimum Mule Version **4.1.0** ### [](#new-features-and-enhancements-6)New Features and Enhancements - Introduces support to encrypt sensitive information related to the policy. The runtime version needs to support encryption and needs to be properly configured. Encryption is supported since Mule Runtime v4.2.0. - The default configuration has been modified to avoid propagating or returning policy headers unless explicitly configured by checking the "Expose headers" option. - Performance improvements. ### [](#known-issues-2)Known Issues - An error occurs in Mule versions v4.1.1, v4.1.2, 4,1,3 and 4.1.4 when a policy is deployed to applications that have the mule-secure-configuration-property-module plugin configured. To resolve this issue, upgrade the specified plugin in the application to version 1.1.0. ## [](#1-1-4)1.1.4 **Feb 22, 2019** ### [](#minimum-mule-version-9)Minimum Mule Version **4.1.0** ### [](#fixed-issues-6)Fixed Issues - Fixed performance issue concerning scheduling. ## [](#1-1-3)1.1.3 **Jan 11, 2019** ### [](#minimum-mule-version-10)Minimum Mule Version **4.0.0** ### [](#new-features-and-enhancements-7)New Features and Enhancements - Improved the RAML and OAS snippets. ## [](#1-1-2)1.1.2 **Oct 9, 2018** ### [](#minimum-mule-version-11)Minimum Mule Version **4.0.0** ### [](#fixed-issues-7)Fixed Issues - Fixed `ExpressionRuntimeException` error when a WSDL proxy receives an empty payload, or an invalid XML. ## [](#1-1-1)1.1.1 **Jun 27, 2018** ### [](#fixed-issues-8)Fixed Issues - Fixed error preventing federated and client ID based policies to apply when a Security Manager is defined in the same app with a tracked endpoint. ### [](#minimum-mule-version-12)Minimum Mule Version **4.0.0** ## [](#1-1-0)1.1.0 **Jan 25, 2018** ### [](#minimum-mule-version-13)Minimum Mule Version **4.0.0** ### [](#fixed-issues-9)Fixed Issues - Fixed issue causing federated policies to lose query and URI parameters of the requester. ## [](#1-0-0)1.0.0 **Nov 14, 2017** ### [](#minimum-mule-version-14)Minimum Mule Version **4.0.0** ## [](#see-also)See Also - [OpenID Connect OAuth 2.0 Token Enforcement Policy for Mule 4](https://docs.mulesoft.com/gateway/latest/policies-included-openid-token-enforcement) - [Known Issues](https://help.salesforce.com/s/issues)