Release notes for Magnolia CMS 6.2.8

LTS release • Delivered on April 26, 2021 • Changelog: 20303

Magnolia CMS 6.2.8 is a bug-fixing and security release that comes earlier than planned to fix a compatibility issue related to the Connector Packs, the Digital Asset Management module and the External DAM module. The issue was identified in specific configurations of some of our customers who intended to upgrade to Magnolia CMS 6.2.7.


New SSO module released

Shortly before Magnolia CMS 6.2.8, we introduced the SSO module. This module delegates authentication from a Magnolia instance to an OpenID Connect identity and access management application. In the recently released version 1.1, we have decoupled the module from Keycloak and improved the parsing of the groups property.

JCR Browser and Pages apps added to App launcher via decoration

The JCR Browser and Pages apps have been removed from the JCR App launcher configuration and added via decoration instead. In case of a custom App launcher configuration, you might need to update this resource file or provide your own decoration to move it from the default location. For example:

    edit: #Remove from the default location
          enabled: false
    manage: #You can still use the old JCR configuration here instead
          enabled: true

Assets app can check whether asset providers are enabled

In the DAM API, the new info.magnolia.dam.api.AssetProvider#enabled property allows you to disable a particular asset provider if, for instance, it does not have the necessary credentials to access the assets. The default value for the property is true. Setting the property to false hides the related DAM subapp in the UI and prevents it from starting.

You can also use definition decoration to configure the property. For example:

    identifier: bynder
    enabled: false
    class: info.magnolia.external.dam.bynder.BynderAssetProvider
        class: info.magnolia.external.dam.bynder.BynderAssetRenderer
        proxyMode: true
          audio: 'audio/*'
          video: 'video/*'

Specific metadata stripped when nodes are duplicated or copied

With this release, the following publishing-related node type properties and their values are excluded when you duplicate a node:

  • mgnl:activationStatus

  • mgnl:lastActivated

  • mgnl:lastActivatedBy

  • mgnl:lastActivatedVersion

  • mgnl:lastActivatedVersionCreated

The mgnl:lastModified and mgnl:lastModifiedBy properties are also excluded when you copy a node.

Third-party library updates

This release comes with third-party library updates to fix some security and compatibility issues as well as improve performance. The following are the most notable updates:

We keep the details of security fixes private in line with our security policy. Contact our Support team if you need more information.


Known issues

If you are upgrading from an earlier version, read the Upgrading to Magnolia page first and check the Known issues page.

Documentation screenshot updates

Some of the screenshots in the documentation still show the legacy Magnolia 5 UI. Please bear with us as we work to update them.

Updated modules

  • Community Edition 6.2.8

  • DAM 3.0.7

  • DX Core 6.2.8

  • External DAM 1.0.6

  • Magnolia 6.2.8

  • Pages 6.2.7

  • Third-party library BOM 6.2.8

  • UI 6.2.8

  • Workflow 6.0.4


The Magnolia team would also like to thank everyone who reported issues, contributed patches or simply commented on issues for this release. Your continued interest helps us make Magnolia better. Special thanks go to Christopher Chard and Florian Reiser.


DX Core



This widget lets you know where you are on the docs site.

You are currently perusing through the DX Core docs.

Main doc sections

DX Core Headless PaaS Legacy Cloud Incubator modules