CRED-7889

Filtering in Self-Service search buttons

With this release the Self-Service portal supports filtering in the search buttons of user forms. This means, that the search config that is used in the forms can now also contain filters in a similar way as in Identity Manager Operator.

CRED-10612

Improved error handling in "execute P10 service task"

Error handling in the standard service task to execute Pkcs#10 certificate requests has been improved. It is now possible to catch the errors via an ErrorBoundaryEvent in the BPMN process. Two types of errors are supported - a "CaConnectionFailed" is thrown for general connection issues to the CA and a "CaRequestFailed", if the PKI is refusing the request (e.g. because of weak key size, missing attributes etc.) See Certificates - Standard service tasks in Identity Manager.

DA-458

Upgrade possible directly from 5.13.x to 6.0.5 and above

Added ability to upgrade directly from 5.13.x to 6.0.5 or above using docker-swarm. The same script also can also migrate Digital Access from appliance to other system by following steps mentioned in the document. See Upgrade Digital Access from 5.13.1 and above to 6.0.5 and above.

IDC-1813

Added support for Salto Space version 6.3.

IDC-1785

Added HTTPS support for Integra version 8.1.

CRED-10538

CSV Export of search results in Extended Search failed on Edge browser. this has been fixed now.

CRED-10756

Creating a mapping, with same data pool as source and target was throwing an error message. Even though that this mapping was technically possible in previous releases, a value of such a mapping was not given. Therefore this kind of mapping is no longer possible due to internal restructuring. With this release, the corresponding error handling was fixed, a user friendly error message is now provided.

CRED-10829

Pushing BPMN process configuration from (Eclipse based) Activiti Designer into Identity Manager Admin, did not work anymore. This has been fixed with this release.

CRED-10836

Fixed an issue in the database update script for MS SQL server. When updating the system from previous versions that had existing BatchSyc Jobs configured, the update script did run into an error when using MS SQL databases.

CRED-10894

Running BatchSync on an LDAP source with a large result list resulted in an error. This has been fixed with 21.04.1.

CRED-10895

Fixed an issue regarding search config filters: When using search filters from both source and target data pool in a multi-level search, it could result in a NullPointerException in Self-Service.

CRED-10936

Fixed an issue in SCIM export: NULL values have not been exported as NULL but changed to the field name instead. This has been corrected, so that NULL remains NULL in the target system.

CRED-10971

Fixed an issue when selecting the card template for card production: When the 'dynamic card template selection' is configured in a process, resolving the template from the process map via JUEL expression did not work. This has been fixed in this release.

DEVOPS-860

Better handling of how to enable/disable languages in Identity Manager Operator and Identity Manager Admin. See Set properties for Identity Manager Operator and Set properties for Identity Manager Admin.

DA-3

Improved the CLI script to relink/delete users from internal Digital Access database if the users are deleted in AD or have broken links.

1. Run the command export prefix=/etc/nexus

2. Run the script run-link.sh inside the administrator service container using CLI.

DA-138

Added support for multiple assertion consumer service URLs specified in AuthnRequest and redirect according to the AssertionConsumerServiceIndex.

DA-237

When provisioning from Digital Access to Hermod, and if the display name contains a space or other characters, the encoding for the same in the URL is now fixed.

Also, if the value of ‘Issuer’ field is changed, the same will reflect in the provisioned profile (which was not the case before).

DA-297

Fixed the Digital Access Admin crash while adding SAML resource with blank Relay state.

DA-310

Added validation for User ID to not allow leading or trailing spaces in Digital Access Admin and in XPI calls. The users already added with spaces will remain unaffected.

DA-314

Fixed TLS/SSL vulnerabilities in admin, policy, authentication, and distribution services.

DA-316

Fixed the issue where administration service considers non-local oath database server as local database server.

DA-317

Added the configuration for encoding so that users can set in the customize.conf the type of encoding for SMS and Email notifications, default is UTF-8.

DA-416

Fixed the issue with empty diagnostics when SMB logging is enabled.