Changelog
Follow up on the latest improvements and updates.
RSS
Provisioning
Changed:
- Reconciliation report filtering on AD account attributes
- Allow person.accounts.<<systemname>>.attributes to set as person correlation field
- A function is required in complex javascript mapping when previewing on source and target systems
Fixed:
- Disable action on Azure AD with Exchange intergration returned error when object could not be found.
- Incorrect logging datetime column size on source system logging
Service Automation
Changed:
- Add recertification reasons to the request details
- Risk factor filter for custom recertification campaign scope
- Backend upgrade for Delegated Forms
Fixed:
- When clearing the search bar in a grid filter, the filter pop-over closes
- Multiselect grid in form with default selection and a data source input can cause infinite loading
- Conditional visibility settings shown in form editor for text input do not match the actual settings
new
August 2024
Provisioning
Changed:
- Reconciliation report + actions on Active Directory permissions
- Export business rules
Fixed:
- Encoding issue in the javascript complex mapping for source
- Evaluation/enforcement popover styling issue
- Custom event isn't triggered when using condition isUpdated and previous value was empty
- Processing logging is shown when archiving a home folder with the option "do not delete account" enabled. This should not be shown because the folder isn't archived when the option is enabled.
- Null value of a mapped field in target resulted in toggle between field available in persons.accounts with null value or no field at all. This is fixed so no field is stored when sending a null value.
Service Automation
Changed:
- Allow URL filtering on searchstring product overview
- Make field request.toDate available in Elastic data
- Custom recertification campaigns with category filter
- Phasing Out Task Data Sources (phase 1: new tenants)
Fixed:
- Small UI fixes on EULA and initial HelloID startup page for new tenants
- Company logo not shown in task email notifications
- Delegated form cannot save custom icon
- Mails are sent for tasks that succeeded of failed in the past
- Fix color highlight for log messages
new
July 2024
Provisioning
Changed:
- Configure & enforce Toxic combination(s) based on permissions
Fixed:
- Total aggregation count on snapshot overview
- Error message incorrect when sending a notification without subject
Service Automation
Changed:
- Recertification insights - Add request detail information
- Optional CSV export for Grid and Multi select grid form elements
- Added support for fullname when searching HelloID users
Fixed:
- Saving multiple new product actions doesn't work
- Dual list shows wrong label in form summary
- Managed users > Products assignment filter does not scope on selected user
- Dropdown search in Dynamic form element doesn't work at all (hotfix)
new
June 2024
Provisioning
Changed:
- Import Active Directory system permission data and use this as granted entitlements
Fixed:
- Margin issue in evaluation/enforcement label on evaluation screen
- Mapping configuration on target system Active Directory (on-premises) and Powershell v2 have too much margin below mapping
- Correlation on primarycontract custom field not working in report and import of entitlements
- Outdated in condition information could be used when the historic action being retried
- Azure Target system correlation report could show an account twice
- Rule conditions: error on load of department or title condition
Service Automation
Changed:
- Additional filters to Recertification insights details report
- Recertification - report improperly assigned products - return on user disable
- Change mail message from "User reports"
- Add support for 'TimeZoneInfo' for SA cloud script executions
- Optional Search Parameter for API GET All Users Endpoint
Fixed:
- Script editor render bug after tab switch
- Search in dropdown doesn't show empty list if no results
- Removing group from delegated form does not revoke access when using HelloID groups directory
- Wrong manager displayed in approval workflow overview
- Dynamic Form default selection on second page broken (hotfixed)
- Automation tasks do not get marked as finished (hotfixed)
- Syncin processlogs to HelloID fails for finished events (hotfixed)
- Tasks datasources get terminated/ cancelled (hotfixed)
new
May 2024
Important
- Provisioning requires the newest agent for communication
Provisioning
Changed:
- Reconciliation suggestions on Active Directory accounts (access)
Fixed:
- Incorrect error when source import preview took too long
- Source mapping escape issue
- No contracts in condition when retrying failed grant action
Service Automation
Changed:
- Recertification - report improperly assigned products - invalid group memberships
- Recertification - report improperly assigned products - conflicting products
Fixed:
- Form elements don't handle a second datasource execution with changed execution results like they should
- Default selection remains selectec after manual deselect in Dynamic form elements dropdown or radio button
- Recertification insights group selector doesn't show selected group when it is not in first 1000 results
- Campaign insights grid filtering does not refresh grid properly
- Dynamic form crud actions on Training do not result in Elastic messages
- Rename Recertification Elastic properties ProductGUID and RequestGUID
- Elastic logs too many iteration and calculation stopped event when no requests in iteration
- Search broken in dropdowns that use a datasource (hotfix)
new
April 2024
Access Management
Fixed:
- QR Code generation for application mfa enrollment doesn't work anymore (hotfix)
Provisioning
Changed:
- The grid when adding an entitlement to a business rule is now limited to 500 records. Please search if your record isn't visible.
- Reconciliation report on Active Directory accounts (access)
Fixed:
- Slug replacement of person.accounts.<systemname> now searches for the full path ".accounts.<systemname>." instead of ".<systemname>." this could lead to a systemname which isn't resolved properly please check the code if this is the case.
- AD container field is empty in notifications
- Stored account data is missing casing check not preventing duplicates
- Psv2 preview update script account reference has value of 00000-00000-0000 when there is no account entitlement (now it's null value just like the other actions)
- Memory exception when returning to many permissions in Powershell V2 & V1
Service Automation
Changed:
- Recertification - report improperly assigned products - multiple assignments
Fixed:
- Product without a resource owner configured cannot be requested through managed users
- GitHub code snippets remembers filter
General
Changed:
- Allow to update the source of a group in HelloID API
new
March 2024
Provisioning
Changed:
- Ability to import the current account state from Active Directory as HelloID entitlement state.
- Fields from all target system types configured for notification are now available as data. instead account. Already configured notification & notification templates are migrated.
- Fields from PowerShell v2 update action are filtered based on the mapping before the differences between previousData and Data are calculated.
Fixed:
- Blocked incident should only appear on enforcement and not when running evaluation
- External ID is not visible in the blocked person grid when a contract is missing in the source import
- [hotfix] Update tasks fails with an error that the person couldn't be found in the vault.
Service Automation
Changed:
- Add GitHub topic filters to snippet overview
- Add optional parameter to get disabled Automation Tasks with API v1
- PowerShell code snippet icon + readme change of source (main branch) and filename ("Icon.png")
Fixed:
- Page subtitle too large
- Change "Unassign managers" to "Unassign resource owners"
- A single Task data source that is used for multiple fields gets cancelled too much (hotfix)
- Product ‘create’ gets logged as ‘update’ in elastic (hotfix)
- Product API v1: managerCanOverrideDuration cannot be changed (hotfix)
General
- Remove Scheduled reports for Access Management (end of life)
- License count snapshot time/date is unclear
Provisioning
Changed:
- Expected\pending entitlement state is removed. Only granted entitlements are shown in the entitlement overview
- Import/Export of the field mapping in Active Directory & Powershell v2 target systems (A preview of the import is shown) - Import is limited to 50 fields
- It could be that only last week's historic actions are visible in your portal due to a one-time migration. In this case, actions over a week are visible in the audit logging.
- Added static analysis of javascript on all the mapping fields Target & Source (Limited) when running a preview
Fixed:
- Popup overflow not working correctly on the actions screen in some scenarios
- Could not save RAW HTML notifications after editing
- Notification (Evaluation overview & Blocked overview) logging is now available in the enforcement logging
- Notification (actions) logging is now available in the entitlement logging
- Non-granted entitlements are seen as granted
- Custom fields in notifications fallback not resolved correctly
- Errors in the AD OU scripts are now logged (also visible in preview)
- Show a more detailed error when no accountRef is returned from an update account script (PowerShell)
- Fixed overlay position of some origins in the enforcement overview
- When removing a field the correlation settings didn't update correctly
- Only create an incident for blocked entitlements when running an enforcement
- Snapshot differences could grow larger than the visible area
- The preview spinner could indicate that the preview mapping was finished while it was not yet completed
Service Automation
Changed:
- General improvements of grid overviews on Admin portal
- GitHub code snippet support for Delegated Form tasks
- GitHub code snippet support for powershell data sources
- Made the department and Job title filters searchable in managed users/products
Fixed:
- Managed Products > user overview does not reload on product request / return
- Product request time in request details is not correct (different timezone)
- Slashes in product name result in 404 error in managed products
- Fixed infinite task status spinner in delegated form activities overview for deleted forms
- Fixed missing task status in the request history & my products screens
- Fixed some cases of missing information on sent emails cards in product requests in request history
- HelloID User groups could get temporarily out of sync after AD sync
- A product’s risk factor is still shown in managed users details even if risk factor was disabled for that product
- Updating a product or category using the old API V1 endpoints will no longer remove the non-english translations of their properties
- Request history card layout was fixed (column width not wide enough)
- Request comments in the request timeline (inbox and my products) now fully displays long comments
new
January 2024
Provisioning
Changed:
- Added elastic audit log when entitlement is manually unmanaged
- Show null values while mapping or viewing raw data
- hotfix: Allow - and _ in names of fields in Active Directory & Powershell v2 target connectors.
Fixed:
- Text overflows when you publish a Rule when using long rule or system names
- The location of the Sub-permission pop-over from the person overview is not correct
- Active Directory target system external uniqueness preview is missing custom system configuration
- New custom fields are not selectable in source system mapping without refreshing the page
- Error is triggered when a create action ended in a correlation and the update action script was empty on a Powershell V2 target system.
Service Automation
Changed:
- Added enhanced request state column and filter to Managed users > product overview
- Added enhanced request state column and filter to Managed products > user overview
- Added category and availability state filters for Managed users > product overview
- Allow specific product return instead of default the latest for Managed products > user overview
- Various smaller UI enhancements for managed users and managed products
- HelloID page title is a bit smaller resulting in a better fit for tablet and mobile view
Fixed:
- Validate regex pattern in form editor UI
- Disabled approval workflow can still be selected in Admin product CRUD
- Managed users > request on behalf doesn't close modal upon request
Important
- Provisioning requires the newest agent for communication
Provisioning
Changed:
- Export to csv for blocked users in source import
Changed in AD:
- Support conditional notification events
- Improved account mapping UI
- Ability to configure mapping for enable, disable, and delete actions including updating these attributes on the configure action (delete only updated when the "delete account" option is disabled)
- Removed the additionalFields object for the account which makes using data in post AD scripts and notifications easier (current notifications & post AD scripts are automatically migrated)
- Selection of attributes for which the built-in uniqueness check is executed (limited to 10 fields)
- Select for which action(s) the external uniqueness check is executed.
- Which action is executed is available in the external uniqueness check.
- No required mapped fields anymore but when the field is (potentially) required for AD we've added [Required] to the field description
- Import & export mapping is not available
- Allow override of iteration value, however, the internal fields first need to be unique to get to the external check
- Account create fails when correlation configuration incomplete
- Only fields that are mapped are selectable for correlation (this is not a static list of selectable fields anymore)
- Mapping type none allows for retrieval of properties for notification use as example
Fixed:
- Warning shown as Information icon in connector logging
- Entitlements are revoked when unmanaged was selected when removed from a Business rule in specific situations
- Scheduled import was skipped when we were downscaling the schedular instances (only appeared a single time)
- RAW data on mandatory DisplayName field issue with casing
- No error if supplied contracts have an unsupported format
Service Automation
Changed:
- Show user selection in a page instead of a modal for managed products
- Show product selection in a page instead of a modal for managed users
- Added search bar to Self Service category view
Fixed:
- Back-end enhancements for product assignments
- Data source execution during data source configuration fails
- Snippet icon not displayed correctly in snippet catalog
- Can not navigate back to categories overview for none EN languages
General
Fixed:
- license information popup was not in the correct positions in some browsers
- Could not delete custom mail domain when the wizard wasn't finished on our West US cluster
- Security issue: No limit on the maximum number of retries for Legacy Mail, SMS & Radius MFA (We extend special recognition to Max van der Linden of Secura for the discovery of this issue)
Load More
→