Identity Panel Upgrade to Version 7

This article will provide a framework to follow when upgrading Identity Panel and other suite components to version 7.

Identity Panel

Providers - no changes are required to existing providers.  However, Panel Connections are now available for user.

HyperSync

The configuration for HyperSync will work without any changes being made to the configuration.  However, there are some necessary synchronization steps to consider.

• A full synchronization of HyperSync has to be run to repopulate and join Hyperverse objects.
• Any attributes sourced only in the Hyperverse in v6 will need to be scripted.
  • Create a report from the v6 Hyperverse.  Utilize a Load Fixture to repopulate attributes in v7.

1. Delete any old Hypersync synchronization schedules.
2. Disable Delta Sync
3. Add a Manual Sync Schedule
   1. Reload Graph
   2. HyperSync Sync
   3. Projected Silo Sync
   4. Campaign Sync
   5. Request Sync
4. Reload Identity Graph
5. Synchronize a single user and check for errors
6. Execute HyperSync Sync.
7. Perform a Silo Reindex
8. Verify that searches include Hyperverse objects in TimeTraveler.
9. Lookup Definitions
   1. Create a join for each Lookup Definition that exists.
   2. The Join Rule can be as simple as location|DN|DN
   3. Apply Join Rules
   4. This will allow the Lookup Definitions to be included in the Join Graph that resides in memory.

Test Panel

No changes required unless Panel Connections will be used.

Service Panel

There are multiple updates that are required for Service Panel to operate in v7.

1. Theme - initialize a light theme
2. Projected Silo
   1. Check name and object type after upgrade.
   2. Self Claim - update to match groups defined in roles
   3. Silo Data
      1. List Join Graphs that will contribute to a Projected Silo.
      2. Reference Attributes can be used. (AzureAD: manager)
   4. Audience - the filters must return a matching string for the Audience rule to evaluate to True.  Alternately, the filters can be left blank if the specified role has unfiltered access.
      1. Id Filter - applies to object being viewed
      2. Viewer Filter - applies to user logged in
   5. Attributes
      1. Normalize attribute names to match source attributes.  The new Display Names can remain as they are.
      2. When using the dropdown list to select attributes, you may select more than one attributes.  It will be considered with a FirstNotNull() function in the order the attributes were selected.
      3. If consideration of data from multiple silos are necessary:
         1. Clear the Silo Selection
         2. Utilize a functions such as FirstNotNull(AD.title, HV.title)
   6. Special Properties
      1. Name
         1. Usually Display Name
         2. Will be displayed in Thumbnails
      2. Title
         1. Usually Job Title
         2. Will be displayed in Thumbnails
      3. Email
         1. Usually email.  UPN may be valid.
         2. Access Panel will use this attribute for sending notifications.
   7. Reference Attributes
      1. No need to create reverse references.
      2. Bi-directional attributes are created automatically.
   8. Grid Sections
      1. Update any Grid sections to use the new normalized names that were set on attributes.
   9. HTML Templates
      1. Either copy from a v6 version or create a blank Projected Silo.
      2. Copy and past HTML template and HTML Row template
   10. Decorators
       1. Any links to Service Panel forms can be updated to call the form from the attributes in Projected Silos
       2. Caveat - only a pencil icon can be used
       3. Audience rules on the form will apply
       4. If a different icon is necessary, or if additional logic is to be applied to audiences, the URL can still be manually configured in a decorator.
   11. isAccoutType
       1. Utilized by Access Panel.  Refers to user/person object types.
   12. isResourceType
       1. Utilized by Access Panel.  Refers to group object types.
   13. Job Attributes
       1. Used for sorting and attestation
       2. Job Title, Department, EmployeeType
       3. Select only the lowest  of nested. 
          1. Only subSub... 
          2. Only DepartmentId or DepartmentDescription
   14. Risks
       1. Used in Attestation
       2. EmployeeStatus - if A, then 0, otherwise 2.