About the Role
With version 5.1.0 โRed Deerโ, FLECS takes a major leap in security and access management, built directly into the FLECS Core. This release introduces two critical new features: TLS encryption for all internal communication and a robust implementation of Role Based Access Control (RBAC).
๐ TLS Encryption Built into FLECS Core
FLECS has always used encryption for outbound communication. With this release, internal communication between system services and apps is now also fully encrypted via TLS, powered by a built-in reverse proxy within the FLECS Core.
Apps and services no longer need to manage their own certificates, they benefit automatically from centralized encryption.
Highlights:
- All internal device communication is secured
- Apps run behind a centralized TLS certificate
- No custom TLS implementation required in apps
- Aligned with Cyber Resilience Act security standards
๐ฅ RBAC & OpenID Connect โ Unified Role Management
Also new in FLECS Core is the enhanced Role Based Access Control (RBAC). This allows you to manage users and roles both locally and through central identity providers like LDAP, Active Directory, or OpenID Connect.
Users can now sign in once and gain access to all connected apps โ delivering true device-level Single Sign-on.
Even better: Apps can directly integrate with the central RBAC system, eliminating the need for their own login mechanisms. This not only streamlines development but also creates a unified and secure access layer across the entire platform.
Key Features:
- Single Sign-on across all apps on the device
- OpenID Connect support for centralized identity management
- Direct app integration with shared user roles (no individual login logic required)
- Optional local user management
- Fully aligned with CRA compliance requirements
Further Details & Bug Fixes
Dozens of minor improvements and bug fixes further improve the overall stability, security, and user experience.
See the full changelogs here:
Get Started Now
Update your devices to FLECS 5.1.0-red-deer and experience next-level security, transparency, and centralized access control.