RAC/M Identity™ is our simple and effective identity governance (IGS) solution that lets large and small organizations understand and manage the complex relationships between users and their access to physical and digital resources, on premises or in SaaS.
IMPROVEMENTS
- Added a configuration for the send time of review campaign reminders. #4697
- Added XLSX output format for SQL extraction, in addition to CSV. #4918
- Added a health check endpoint. #4999
MINOR IMPROVEMENTS
- Improved control of the default column width in lists. #4714
- Added the username to JSON logs for successful authentications. #4912
- Added a configuration for the disk location of custom reports. #4957
- Added a configuration for the disk location of the “Scripted” connector’s scripts. #4958
- Changed the quick actions on the identity request list: an in-place notification is now shown instead of a redirect. #4974
- Improved the visual of the asset filter box in review campaign administration. #4992
- Added a configuration to disable the workflow engine on a given server, to avoid duplicate reminders and escalations in a high-availability setup. #4996
- “workflow.engine.enable”: whether scheduled reminders and escalations are processed by this server (default: “true”). The task assignment notification is sent regardless of this setting.
- “workflow.deadline.reload.interval.seconds”: how often deadlines created by other servers are reloaded (default: 60 seconds, absent from the configuration file).
- Added the ability to populate a logical group’s source group via data load using the “ModuleCopyColumnsAndInsertSQL” module. #5085
- Adjusted the permission required to search an identity’s visible roles: read instead of execute. #5114
FIXES
- Fixed deletion of an identity when a workflow is associated with it. #4452
- Fixed deletion of an identity linked to an approver group. #4776
- Fixed the warning on a column that does not accept multiple values: it is no longer repeated for each occurrence, but shown once. #4930
- Fixed reuse of an existing account during an account creation request when the account name differs from the identity’s primary account name. #4965
- Fixed the application of the extended attribute filter on groups in a review campaign, for fiduciary accounts with no owner. #5011
- Fixed the tooltip for the self-delegation warning in review campaigns. #5012
- Fixed reprocessing of a departure when restarting a termination workflow. #5027
- Fixed handling of a role-change task rejected at its deadline; the default status at deadline is now “Rejected”. #5029
- Fixed export of a review campaign’s certifier list. #5037
- Fixed display of labels in sequence audits. #5083
- Fixed loss of the requested URL during SSO (Kerberos) login; SSO is now attempted before the login page is shown. #5098
- Fixed slow display of the sequence list. #5106
- Fixed French localization of the date picker. #5124
- Fixed access to the “Management > Execution” page, again accessible with read-only permission. #5152
- Fixed display of the single sign-on authentication error message on the login page. #5153
- Fixed misalignment of the “Unique identifier” checkbox after removing a mapping row from a collector. #5154
- Fixed the link in review campaign notification emails and the safeguard preventing reviewing one’s own access. #5160
- Fixed accumulation of ICF server libraries: older versions remained alongside new ones, both in the delivery package and in an updated installation, and could be loaded instead of the new ones. #5185
Security
Security fixes. #5013, #5014
BREAKING CHANGES
- Values rendered by an email template are now escaped before reaching the message body. Custom notification templates must be adjusted, otherwise some notifications will no longer be sent.
- In “remove_accesses_request/<language>/task.html”, replace “@if{request.?rolesToRemoveLi == true}” with “@if{request.?rolesToRemoveLi != ”}”.
- The “== true” comparisons should be reviewed for these attributes: “accountsToActivateLi”, “groupsToAddLi”, “groupsToRemoveLi”, “rolesToAddLi”, “rolesToRemoveLi”, “toAddLi”, “toRemoveLi”, “writtenRequestListLi”, “writtenRequestsLi”.
- See the migration documentation: https://www.okiok.com/products-documentation/racm-identity/fr/guides/updating/3-20-2.html