New Admin OIDC Authentication for HostBill

New plugin for Admin OIDC Authentication, improvements in Estimates & multiple modules updates!

New HostBill update introduces new Admin OIDC Authentication module for secure single sign-on with external identity providers, enhanced estimates workflow, improved metered billing and multiple integration upgrades including our e-invoicing modules, Cloud Signup, Swish payments and more!

Admin OIDC Authentication module

The Admin OIDC Authentication module for HostBill enables secure and centralized authentication for staff members using an external OpenID Connect (OIDC) or OAuth2 identity provider. With this integration, administrators can log in to the HostBill admin area using credentials managed by a trusted identity provider, allowing organizations to unify authentication across multiple internal systems and improve overall security.

To ensure uninterrupted access, the module includes a fallback mechanism that allows administrators to log in using the standard HostBill authentication method if the external identity provider is unavailable or if local credentials are required for recovery or emergency access. The module can also automatically create missing staff profiles when a user authenticates through the identity provider for the first time. New accounts are generated based on a predefined staff template, ensuring consistent permissions and configuration for newly onboarded administrators. Additionally, the module supports synchronization of staff groups with the OAuth2/OIDC provider. This allows role assignments and access levels in HostBill to reflect the group structure defined in the external identity system, helping organizations maintain consistent access policies and simplifying user management.

Overall, the Admin OIDC Authentication module provides a modern single sign-on solution for HostBill, improving security, streamlining staff onboarding, and enabling centralized identity management.

Release notes – admin area improvements

Managing metered services just became more flexible. When an administrator changes or upgrades a package that uses metered billing, HostBill now provides an option to rewrite the metered billing variables to match the new package configuration. This allows admins to immediately recalculate and align metered variables with the newly selected plan, ensuring that usage metrics remain consistent with the updated product settings. The option appears during admin-initiated package changes and helps avoid manual corrections when upgrading accounts with resource-based billing.

HostBill now provides improved monitoring for external application connections used by provisioning modules and integrations. If a module that supports metrics collection cannot connect to the target application, the connection will automatically be flagged. Administrators will see a notification in the admin dashboard under the widget indicating that some items may require attention. The flagged connection will also appear in the Apps Connections list within the settings. Additionally, administrators with the new permission Notification System → Failed app connection can receive email alerts about these issues. The connection will remain flagged until the administrator successfully runs the Test configuration / connection option for that integration. This helps teams detect and resolve provisioning connectivity issues much faster.

To improve visibility into sales activity, three new widgets have been added to the admin dashboard: Sent Estimates, Accepted Estimates and Invoiced Estimates. These widgets provide quick insight into the current state of quotes and proposals, helping teams track conversions and monitor pending opportunities directly from the dashboard.

Converting an estimate into an invoice is also now more flexible. When performing the conversion, administrators will see a modal window allowing them to set a custom payment deadline for the generated invoice. Instead of using a fixed payment term, admins can now easily select a due date such as 30, 45, or 60 days. This small improvement greatly simplifies handling custom payment agreements and negotiated sales terms.

A new automation task has been added to automatically remove banned IP entries. This cron task helps keep IP ban lists clean and manageable without requiring manual maintenance.

HostBill now allows administrators to include the product description directly on generated invoices enabling clients to have more context about the services they are being charged for.

Modules updates

Several modules and integrations have been updated to improve compatibility and expand functionality.

The Domainr module now supports the Fastly API as an alternative to the deprecated RapidAPI service. This ensures continued domain availability search functionality with a modern and supported API.

The Swish payment module has been updated to use the latest v2 API, improving compatibility with the current Swish payment infrastructure.

The XML/UBL module received several enhancements for organizations using structured e-invoicing. Administrators can now enforce the inclusion of bank account details when exporting UBL invoices. A new option also allows specifying which product form variable should store the generated UBL purchase order number, enabling better integration with procurement workflows.

For users of the KSeF e-invoicing module, two new export options are now available. Invoices can always be exported in their secondary currency when required, and invoice lines can optionally be exported in a secondary language. These improvements help companies comply with localization and reporting requirements when working with Poland’s KSeF system.

The Cloud Signup plugin now includes a new configuration option called Auto-add product on returning client logins. When enabled, a product can be automatically added when an existing client logs in during the signup flow.