This release adds a major feature: SAML SSO support via web browser. Additional changelog:
- IPSec tunnel is now implemented using IKE exchange instead of HTTP call for key management. This is required for SAML support.
- Refactored internal handling of S-expressions used in Checkpoint tunnels
- Refactored handling of user passwords: because of SAML support they are no longer required and no longer prompted by default. User may still be prompted for a password via the tunnel MFA request.