IMPORTANT:
- This is a semi-major upgrade from version 7.2 with fixes and enhancements.
- If upgrading from 7.1.x see Release Notes
- If upgrading from a version prior to 7.1.1 see Release Notes
- If upgrading from version 7.2 or prior review HyperSync thresholds to verify compliance with 5% limits
- If upgrading see Upgrade Identity Panel
- If performing a clean install see Install Identity Panel
Changes
- Allow HyperSync thresholds to be expressed in percentages and require a license key to set a threshold higher than 5% as either raw number or percentage (See details)
- Added queryable TimeStamp to Entitlement Graph Action history (separate from time queryable Id property)
- Improved logic of recipient overrides to prevent assigning request recipients that will result in immediate escalation
- Renamed request response mode from "Advanced" and "Simple" to "Table" and "Card"
- Improved UI experience when doing a bulk (select all) response with only one request
- Improvements to handling of request counters when viewing campaign instance summary before any request synchronizations have executed
- Improvements to request summary page to show history of statuses that don't have any current requests
- Improved card display for identities that don't have any risk attributes
- Enabled deletion of system generated campaigns if campaign deletion is turned on
- Added PUT Unlock option step to Alemba provider
- Allow Panel Action timeouts to be set on a per-provider basis (default value of 10 seconds per action)
- Added Elastic API version header to support Elasticsearch v8 for on-premises installations
- Updated Panel Service guidance to recommend placing Panel Service servers local time in UTC, revised article
- Included object type and attribute data in graph data set even when rules/rule sets are disabled so that a graph reload is not needed when re-enabling a rule
- Hides Service Panel display sections when the section doesn't have any attributes, unless the section displays entitlements
- Improved logging of discovery errors on panel connection run history
- Introduced new web app config.json setting (Application:ForwardForHeader) to allow re-mapping the X-Forwarded-For header used by web proxies to a custom header name. This allows IP address forwarding with proxies that use non-standard header names
Fixes
- Fix to handling of data saves when an object add an update happen at or nearly at the same time, causing attributes to disappear in time traveler
- Fix to counters accuracy on campaign instance summaries
- Fix to tabular display of identity detail columns in emailed request response spreadsheets
- Fix to AD provider scanning ms-DS-ConsistencyGuid as blank
- Fix Service Panel audience values of detail decorators not applying when an attribute value is null
- Allow form summary control to show checkbox results when the unselected value is null
- Include overdue requests in campaign instance summary view
- Fix to membership change requests being flagged as redundant by request synchronization
- Fix to display of timezone dropdown list in request policies editor
- Fix to display of current value for multi-value identity selects in service forms
- Improvements to prevent possibility of logging into a production tenant using a QA url and vice-versa
- Fix to rendering of "Default Table Orientation" toggle, i.e. whether requests are grouped by resource then identity, or by identity and then resource
- Fixes to change timestamp tracking of projected silo job attributes
- Improved error handling when a resource definition has been deleted but is referenced by outstanding requests
- Fixed population of Expires property in request message object when passed to email template rendering
- Fix for prefix wildcard searches e.g. *ohn will match John
- Added API version header to support Elastic 8
Comments
0 comments
Article is closed for comments.