This is not the latest version of Identity Director documentation.View available documentation.
What's New in Identity Director 2021.2
Highlighted Features
In Identity Director 2021.2, we have introduced a feature preview for Access Reviews, in the form of an interactive mock-up in the Web Portal.
In the Active tab of the My Access Reviews section, you will find a prepopulated list of actions waiting to be reviewed. To help you prioritize the items, you can see both the time left until completion and the review progress for each of them.
Click on an item to review the qualifications of the people on the list. You can either Authorize or Revoke access for individual users.
Note that this is a feature preview with made-up data and any actions taken on the page will have no impact on your environment. Refreshing the page will reset the My Access Reviews section.
To disable the section, go the Web Portal installation folder, open the web.config file, and change the value to 1 in the following line: <add key="disableAccessReview" value="0" />.
To improve the security of your environment, starting with Identity Director 2021.2, you can enable multifactor authentication in your environment, from Setup > Multifactor Authentication.
Once the feature is enabled, all users will have to enroll and will be prompted to set up an authenticator during their next log in. From the same page, you can unenroll people separately, or reset enrollments for everyone in your environment.
Identity Director now has a reporting function, allowing for changes to be tracked and logged into a dedicated datastore.
In the Setup and Sync Tool, you will find the newly-added Reporting tab, where you can enable the feature and also choose between connecting to an existing Datastore or creating a new one. You can also modify settings for Reporting from the Management Portal, at Setup >Datastore> Reporting.
Announcements
If you have configured an encryption key in your environment, when upgrading to Identity Director 2021.2, you must resubmit the encryption key. To do so, you can either provide it during the upgrade process, or follow the instructions in the Best Practices Guide to add the key after completing the upgrade.
This applies to both the Management Portal and to the Transaction Engine.
Starting with Identity Director 2021.2, you can only use people attributes of type text as delivery triggers. The option has been removed for attributes of type list and of type table.
Enhancements and Improvements
In the Management Portal , you can now edit your comments on the Versions tab of your service.
Certain workflow actions now have the option to send email notifications to approvers. You can set the time interval at which these reminders are sent out, and they will continue until the action is either approved, canceled, or when it expires.
For this release, we have added more features to the Provide Information workflow action:
-
Auto pop-up window in the Web Portal
Configure the Provide Information window to pop up in the Web Portal, when users have requested a service containing a Provide Information workflow action. -
User input validation
For attributes of the types Text, Date, and DateTime, you can configure user input validation, which will allow you to make sure users provide correctly formatted information, both in the Management Portal and in the Web Portal. -
Dynamic attributes
Use dynamic attributes to provide immediate feedback to your users' input, on the same Provide Information workflow action page. This option is only available for attributes of type Text, Date, DateTime, and Organization. -
Reusable attributes
You can optionally make your attributes reusable, allowing them to be used multiple times throughout the same Provide Information workflow action. Users can change the value of these attributes as they are going through the pages, and only the last value of the attribute is committed at the end of the workflow action.
In the Setup and Sync Tool, you can now add the Organization Unit filter in the People Data Source.
Previous versions of Identity Director 2021.1
Announcements
We are aware of a MySQL bug that is currently affecting one of the entitlement samples provided by Identity Director. This will result in a 'Malformed communication packet' error when setting up a new Datastore.
Note that this will not affect Identity Director functionality.
MySQL has announced a fix for this bug in version 8.0.26.
Announcements
We have identified an issue in Identity Director 2021.1.1 which affected the Setup and Sync Tool, causing it to synchronize organizations incorrectly. Therefore, customers using Identity Director 2021.1.1 are strongly advised to switch to Identity Director 2021.1.2.
Announcements
For Identity Director 2021.1.1, we have rewritten the queries responsible for loading organizations from the database.
For earlier versions, query performance is drastically affected by database index fragmentation, especially for indexes on the OR_Objects and OR_ObjectDescriptions tables. Therefore, if you choose not to upgrade to version 2021.1.1, we strongly recommend close monitoring and frequent reorganize/rebuild operations for those indexes, notably for environments with large numbers of organizations.
Enhancements and Improvements
In order to improve performance and functionality, the Provide InformationSummary page has been enhanced with the following updates:
-
You can now enable or disable the Provide Information summary information from the Properties tab of the workflow action.
-
You can optionally add a custom Display Name to your attributes, which will appear in the summary at the end of the Provide Information wizard.
Loading of the Organizations page in the Management Portal has been improved. With the addition of paged loading, one hundred organizations will be loaded at a time.
Database table indexes have been improved for overall shorter response times.
Highlighted Features
PowerShell is one of the most versatile tools available to IT professionals. Integrating the use of PowerShell into Identity Director ensures access to quick and powerful custom solutions for our customers.
A new Workflow Action was included in Identity Director that allows running PowerShell scripts in one or more places inside a business workflow. This feature is currently in the Technical Preview stage and will be fully launched in the fall of 2021. However, features such as ensuring security for credentials and using the script result in the workflow are already included.
Use cases such as message editing, workflow enhancement, and password reset flexibility can now be handled by PowerShell through Identity Director.
Following the addition of this Workflow Action, minor configuration changes are required for the Management Portal to function correctly.
-
If you will not be using Execute PowerShell Script, following a clean installation:
-
Browse to C:\Program Files (x86)\RES Software\IT Store\Web Console\Config.
-
Within this folder, locate the WebConsole.config file and open it.
-
Go to webConsoleConfiguration > managementService > database > encryptionKey.
-
Remove the default value for encryptionKey , leaving only the quotation marks.
The end result should be encryptionKey="".
-
-
If you will be using Execute PowerShell Script:
Before applying the encryption key for the Management Portal, make sure that, in IIS, the Load User Profile option for the Management Portal is set to True.How to check the Load User Profile status-
Open the IIS Management Console.
-
Navigate to Application Pools > IT Store Management.
-
Open the Advanced Settings for IT Store Management.
-
In the Process Model section, make sure that the Load User Profile is set to True.
-
If the Load User Profile is set to False, set it to True and click Recycle.
-
If you have to change the configuration, make sure to exit the Management Portal first.
-
-
Feel free to experiment with this technical preview feature in your test environments. We are waiting for your feedback and improvement suggestions either through UserVoice or directly at [email protected].
In response to the many requests to enhance the Identity Director UI, we decided to adopt a phased rollout strategy of implementation.
The current release brings forward a new and redesigned menu, aligning to the new design paradigms of web-based applications. The dashboard and the base colors of highlighted items were also changed and aligned to a new color scheme that will be gradually implemented throughout the whole product. This makes tracking changes much easier when working on a wide screen.
Announcements
In the 2020.3 version, we introduced the list person attribute to expand the people management and delegation capabilities of Identity Director. That feature contained a component - being able to add services as triggers in the attribute definition - that proved to produce undesired effects such as performance and load issues, under certain conditions.
That is why, in the 2021.1 version, services can no longer be added as triggers in the list attribute definition. Additionally, after installing the 2021.1 version, any services added to any list attribute will be disregarded, to free the Transaction Engine component from unnecessary workloads.
We are aware that some of you might have configured attributes like this already and would like to assure you that this behavior will come back again in the 2021.2 release in September.
We are currently going through a wide range of feedback regarding product performance and we understand the importance of such a use case. For this reason, we want to use this time to bring you a feature that is not only useful but, in addition, has a fast response times for triggers and qualifications.
Due to very limited use and demand, support for Oracle and IBM DB2 Datastores was deprecated as of Identity Director 2020.1.
Enhancements and Improvements
In order to improve performance and functionality, the Provide Information wizard in the Web Portal has been enhanced with the following updates:
-
The ability to search for an organization within the current level.
-
Organizations in the current level are loaded progressively, as the user scrolls through the drop-down list.
The improvements enable users to more easily select organizations.
The Provide Information Wizards in the Web Portal and in the Management Portal were improved by adding an extra summary section at the end. This allows for an easier review of the choices the user has made throughout the wizard.
The choices made throughout the pages of the wizard can be displayed here for the user and administrator’s convenience.
The Transaction Engine and Windows Client processes and services were renamed to match product naming across the whole set of components. This has caused issues in the past by not allowing administrators to quickly identify the product’s running processes.
When a list service attribute is used to set the values of a people attribute with Add or Overwrite if the people attribute is of type list, all values from the list service attribute will be added.
The People Data Connection synchronization log now offers additional details. The feature can be turned on in the People Data Connection, by checking the "Show Advanced Synchronization Details" option in the "Properties" tab. The synchronization log will offer advanced details on what exactly has changed for the persons concerned.
The synchronization log details will be displayed similarly to the following example:
Updated person "Eric Brown"
Employee Number changed from 00 to 99
Last Name changed (restricted)
Manager changed from David to ""
Role changed from Engineer to Senior Engineer
For the release notes of previous versions, please refer to the Previous Versions page.