Features

EIM-8955 History tab for agent (Beta)

Beta version of agent history tab created. It is now possible to view historical information of the selected agent (all agent's attributes). By default, 100 rows of changes are shown. Maximum of 1000 rows of changes can be shown at a time. This functionality requires IGM2_HistoryReader permission.

Following functionalities are available:

Save agent history data as csv file:
This will always save the whole result set that is shown when there is no additional filters used. Therefore, maximum row amount is 1000 for each export.

Hide/show changes:
This will highlight with orange color all the cells which have different value in the cell above or below.

Show/hide empty columns:
This will hide columns which don’t have any values in any cell.

Hide/show same columns:
This will hide all columns which have the same value for each cell.

NOTE:

• Saving to csv file only works with Chrome and Edge browsers.

•  comma characters "," in the data are changed to pipe characters "|".

• There can be performance issues when the shown data set is big and/or filters are used

• Some fields are calculated based on data (not exist in history data): displayName and combinedEmail, combinedLocale

EIM-10521 REST API for changing SSO service’s certificates

SSO Signing and Decryption certificates can be changed with REST API endpoint: POST /rest-api/configuration/add-sso-certificate
See Chapter 2.2.5 Adding SSO certificates in the efecte_identity_rest_api_reference.pdf

Improvements

EIM-10376 Upgrade esapi-2.0.1.jar and xmlsec-1.5.6.jar

Upgraded two opensaml dependencies to versions xmlsec-3.0.1.jar and esapi-2.1.0.1.jar. Backported fix for path traversal issue CVE-2022-23457 in esapi-2.1.0.1.jar.  CVE-2022-24891 is not applicable in esapi-2.1.0.1.jar.

EIM-10550 RepresentationEndpoint Search for service agreements improvement

providerId and customerId parameters were added to RepresentationEndpoint Search for service agreements. Those can be used for eliminating the possible slow query with serviceProviderOrCustomerId parameter. This is documented in efecte_identity_rest_api_reference.pdf Chapter "2.9.2 Search for service agreements".

EIM-10629 Update installation guide about PostgreSQL 13 to 15 database upgrade

Chapter "13. PostgreSQL database migration from another major version" was updated in Efecte Identity Management
Installation Guide to support PostgreSQL 15.

EIM-10709 DB constraint for preventing duplicate permissions

There are situations when duplicate permissions could have been created in the database. To prevent those, it is possible to add database constraints to the permission table. See efecte_identity_upgrade_guide.pdf 6.4 Optional step to disallow duplicate permissions.

Bug fixes

EIM-10623 Userinfo endpoint returns wrong content-type header value

Response of userinfo endpoint now returns content-type header with value "application/json". Earlier "text/plain;charset=ISO-8859-1" was returned.

EIM-10643 NullPointerException when viewing task list

In some rare cases it is possible that assignment table contains NULL in asstypeid column. This caused a NullPointerException when viewing task list containing given assignment. This is now fixed.

EIM-10693 Account case sensitivity does not work as expected in authentication

Authentication has been changed to utilize case sensitive comparison when multiple accounts are found and only their case is different.