GUEST/IDM/CONNECT

Introduction

This bulletin provides an overview of product improvements and an introduction to new features included in Symmetry CONNECT/GUEST/IDM for hosted and on-premise deployments.

Important Deployment Information

For general deployment guidance, please refer to the Connect & Guest Deployment Guide (Issue 1.75.0)

On-Premise Deployments:

For Customers Upgrading from versions earlier than 1.71.0, upgrade to 1.71.0 before upgrading to this release.

This release requires additional rollback steps.

DELETE
FROM [logging].[dbo].[amag_bash_scripts]
WHERE [name] = '01.094.CopyCacIdentityCredentialsToIdm.sh'

Symmetry Integration Client:

The AMAG.Symmetry.Client has been updated to version 7.29.0.1866. Certain new features or corrections will not be fully functional until the new client has been installed; any such items will be highlighted in the proceeding notes.

The Checksum for this Symmetry client is:

2f9253bf2703c6c9abf94b2da46fc2b177a4fb42eded43cae31ccfe60b41a910.

New / Changed Functionality

As part of our continued efforts to improve IDM, we are excited to release version 2.0.0 of our application. Below will list our key changes to our User interface:

CONNECT:

Identities list view, as well as Credential and Access Management has been removed from CONNECT and moved to IDM. The following features will remain in CONNECT:

IDM Identities List

The major change has been to IDM. We have remodelled the Identities page, as well as the incorporation of Credential and Access Management. The new Identities view provides a clearer and more streamlined picture of Identities and has incorporated the same components as CONNECT for quick and easy access to Credential and Access Assignments.

IDM Identities - Filters

The filters have been remodelled to be intuitive and consolidated. The new ‘More Filters' option provides a clean modal. The new filters component allows for a multi-select function with an active filter count, providing immediate feedback on selected filters. We have also provided a ‘Clear all filters option’ for a quick and easy function to clear all applied filters. The IDM application provides a total identities count in the upper left of the Identities modal as well as a filtered identity count on the right with another ‘Clear all Filters’ button outside of ‘More Filters’.

Consolidated Identities - IDM Identities - Quick Access / Credential Assignment

We have modernized the look of the user interface for quick Access and Credential Assignments from the Identities list. The functions have not changed; however, we have provided a more intuitive and uniform display.

IDM Identities - Bulk Access Assignment / Delete

We have made changes to the Bulk Access Assignments within the new IDM Identities page. Now, with the incorporation of Access Management in IDM, we have modernized the Interface accordingly.

IDM Identities - Identity Details

Major changes have been made to Identity Details. Firstly, Identity information has been modularized by criteria, making it easier to edit and display identity data as required. In addition, ancillary features previously available in CONNECT Identities have been migrated, including:

There is also the allowed allocation for quicker access to see and manage the status of an Identity. From the Identity Details page, users can quickly set the status of an Identity (Active/Suspend/Terminate). Furthermore, quicker access has been provided for users to send Web Credential requests and for administrators to delete identities within the Actions section.

Identity Expiration

There has been an enhancement to the function of un-expiring an identity. They can still re-activate the Identity by removing the Expiration Date (or setting it to a date in the future) within the ‘Company’ section. But now they can also use the identity Status dropdown. Selecting the ‘Active’ status from the dropdown list will present the user with a modal allowing them to re-input any updated Activation or Expiration Date as necessary.

Identity Photos

Significant improvements have been made to the management of Identity Photos. Users can now hover over the photo placeholder to reveal a new button that opens an updated modal, allowing photo image files to be uploaded, dragged and dropped, or captured using a camera.

Access and Credential Management

A major change has been to migrate Credential and Access Management to IDM, allowing for management within a single application. All role-based permissions have been implemented across the new User Interface. All existing functions and features have been maintained.

Consolidated Identities - IDM Identities - Roles

Rather than have Roles as a subsection of each module’s Configuration, users can now add/remove roles via each individual Identity in IDM. An individual’s module-based administrator role will determine which Roles can be applied.

Settings

To streamline module configuration management, a global administrative setting has been introduced, centralizing access to configurations for all modules based on administrator roles. The new Global Settings feature (Cog Icon) can be found in the upper-right corner of the user interface, next to the ‘Sign Out’ button.

Reverting to Classic View

For a limited time, users can revert to the classic view of IDM. By navigating to the User Profile, the original display can be restored.

Key Issues Addressed