RAC/M Identity™ is our simple and effective identity governance and administration (IGA) solution that enables large and small enterprises to understand and manage the complex relationships between users and their access to physical and digital resources, on-premise or SaaS.
Important improvements
ICF server management rebuilt
An ICF server is now created and configured from its own page, step by step, and offers three connection modes. #4819
- A new “Configuration > ICF Servers” page, which is now where a server is created. This was previously done from an ICF connector’s detail page. #4820, #4821
- A new step-by-step flow for creating and editing an ICF server: connection type, host and port, runtime environment, then verification. #4823, #4995
- New connection modes, with revised labels and help text: “Internal” for the server hosted by RAC/M Identity, “Agent”, and a direct connection. #4880, #4993
- A new “Agent” mode (SaaS only): the ICF server runs in a Docker container deployed in the target environment and opens the connection to RAC/M Identity itself, with no inbound port to open, using an authentication token generated and renewable from the interface. Its libraries, connectors and scripts are synchronized from RAC/M Identity, and the ICF server restarts automatically when they change. #4822, #4824, #4825, #4826, #4829, #4831, #4832, #4837, #4838, #4839, #4864
- A new direct connection mode: the host and port are configured, and the matching ports must be open in the environment. #4884, #4914
- A new deployment instructions section for the agent container, shown and copyable from the server page, with automatic restart and image update. The image is distributed by RAC/M Identity, in the version compatible with the installation. #4827, #4881, #4882, #4927
- A new “Test” button to validate the connection from the interface. #4828
- Full audits of ICF servers: history side panel, creation, save and deletion. #4870
Bulk editing in the identity list
Several identities are selected in the list, then one or more attribute changes are applied to them from a side panel. #4977
Other improvements
- Added a quick filtering link in the audit history: hovering over a row offers to remove the matching record type from the displayed list. #3045
- Added a start date on review campaigns, allowing them to start automatically on the scheduled date. #3969
- Improved the selection of reference campaigns for incremental campaigns: campaigns in progress are now offered alongside completed ones, with their status shown and the gap calculation revised. #3971
- Added a review campaign option to not require the review of the identity itself. Only the associated accesses are then reviewed. #4804, #4971
- Standardized identity birth dates: they no longer carry a time component, which eliminates the one-day shifts by timezone and the duplicate identities that followed from them. #4865, #5089
- Added the ability to change the JAR file used by an existing ICF connector. #4885
- Added a modal SQL editor for SQL-type settings on configuration pages, with syntax highlighting and a format button. #4987, #4988, #4989
Minor improvements
- Added the reviewer to the attribute list of the identity criteria builder’s basic filter. #380
- Added the escalation setting to the notifications section of a review campaign’s detail page. #401
- Added the asset owner to the asset list. #2460
- Improved execution tracking for the index rebuild and reorganization modules: progress is now reported table by table. #4621
- Removed the search box from lists where filtering is not available. #4955
- Aligned the “Campaign type” filter on the campaign lists with the selector on the creation page: same order, same grouping and same labels. #5022
- Added the email address to the identity list. #5101
- Added a page size of 250 items to lists. #5143
- Changed how fiduciary accounts are marked in review campaigns: a badge replaces the gear icon. #5190
Fixes
- Fixed spelling and terminology in the French labels on an identity’s page. #2557
- Fixed loading of an ICF connector’s attributes when several versions of the same JAR file are present. #4238
- Fixed creation of an account policy. #4803
- Fixed the redirect after deleting an ICF server, which now returns to the list. #4928
- Fixed an error occurring while a review campaign was being created. #5095
- Fixed the cursor on the “Send a reminder email” option of a review campaign’s “Actions” menu. #5159
Security
Security fixes. #4859