---
title: Connector release notes
description: "Subscribe for automatic updates: ICF release notes RSS Feed"
component: openicf
page_id: openicf:connector-release-notes:connectors
canonical_url: https://docs.pingidentity.com/openicf/connector-release-notes/connectors.html
section_ids:
  1_5_20_34_connectors: 1.5.20.34 Connectors
  updated_connectors_with_change_details: Updated connectors with change details
  ldap_connector: LDAP connector
  microsoft_graph_api_connector: Microsoft Graph API connector
  updated_connectors_without_change_details: Updated connectors without change details
  1_5_20_33_connectors: 1.5.20.33 Connectors
  new_connectors: New connectors
  snowflake_connector: Snowflake connector
  updated_connectors_with_change_details_2: Updated connectors with change details
  google_apps_connector: Google Apps connector
  ldap_connector_2: LDAP connector
  oracle_ebs_connector: Oracle EBS connector
  _1.5.20.33_saascommon: SaaS Common
  sap_successfactors_connector: SAP SuccessFactors connector
  scim_connector: SCIM connector
  workday_connector: Workday connector
  updated_connectors_without_change_details_2: Updated connectors without change details
  1_5_20_32_connectors: 1.5.20.32 Connectors
  updated_connectors_with_change_details_3: Updated connectors with change details
  dropbox_connector_saas_common: Dropbox connector (SaaS common)
  ldap_connector_3: LDAP connector
  _1.5.20.32_saascommon: SaaS Common
  saas_rest_connector_saas_common: SaaS REST Connector (SaaS common)
  sap_hana_database_connector: SAP HANA Database connector
  updated_connectors_without_change_details_3: Updated connectors without change details
  1_5_20_31_connectors: 1.5.20.31 Connectors
  updated_connectors_with_change_details_4: Updated connectors with change details
  docusign_connector: DocuSign connector
  multiple_csv_connector: Multiple CSV connector
  multiple_csv_cloud_connector: Multiple CSV Cloud connector
  sap_successfactors_connector_2: SAP SuccessFactors connector
  saas_rest_connector: SaaS REST Connector
  scim_connector_2: SCIM connector
  updated_connectors_without_change_details_4: Updated connectors without change details
  1_5_20_30_connectors: 1.5.20.30 Connectors
  updated_connectors_with_change_details_5: Updated connectors with change details
  database_table_connector: Database Table connector
  google_apps_connector_2: Google Apps connector
  kerberos_connector: Kerberos connector
  ldap_connector_4: LDAP connector
  microsoft_graph_api_connector_2: Microsoft Graph API connector
  _1.5.20.30_saascommon: SaaS Common
  saas_rest_connector_2: SaaS REST Connector
  salesforce_connector: Salesforce connector
  scim_connector_3: SCIM connector
  servicenow_connector: ServiceNow connector
  updated_connectors_without_change_details_5: Updated connectors without change details
  1_5_20_29_connectors: 1.5.20.29 Connectors
  new_connectors_2: New connectors
  saas_rest_connector_3: SaaS REST Connector
  updated_connectors_with_change_details_6: Updated connectors with change details
  adobe_marketing_cloud_connector: Adobe Marketing Cloud connector
  box_connector: Box connector
  epic_connector: Epic connector
  google_cloud_platform_connector: Google Cloud Platform connector
  hubspot_connector: HubSpot connector
  ldap_connector_5: LDAP connector
  marketo_connector: Marketo connector
  _1.5.20.29_saascommon: SaaS Common
  salesforce_connector_2: Salesforce connector
  sap_successfactors_connector_3: SAP SuccessFactors connector
  scim_connector_4: SCIM connector
  servicenow_connector_2: ServiceNow connector
  1_5_20_28_connectors: 1.5.20.28 Connectors
  new_connectors_3: New connectors
  updated_connectors_with_change_details_7: Updated connectors with change details
  microsoft_graph_api_connector_3: Microsoft Graph API connector
  updated_connectors_without_change_details_6: Updated connectors without change details
  1_5_20_27_connectors: 1.5.20.27 Connectors
  updated_connectors_with_change_details_8: Updated connectors with change details
  google_apps_connector_3: Google Apps connector
  ldap_connector_6: LDAP connector
  1_5_20_26_connectors: 1.5.20.26 Connectors
  new_connectors_4: New connectors
  updated_connectors_with_change_details_9: Updated connectors with change details
  aws_iam_identity_center_connector: AWS IAM Identity Center connector
  epic_connector_2: Epic connector
  ldap_connector_7: LDAP connector
  microsoft_graph_api_connector_4: Microsoft Graph API connector
  mongodb_connector_scripted_groovy: MongoDB connector (Scripted Groovy)
  sap_s4hana_connector: SAP S/4HANA connector
  scim_connector_5: SCIM connector
  _1.5.20.26_scriptedgroovy: Scripted Groovy
  workday_connector_2: Workday connector
  updated_connectors_without_change_details_7: Updated connectors without change details
  1_5_20_23_connectors: 1.5.20.23 Connectors
  new_connectors_5: New connectors
  updated_connectors_with_change_details_10: Updated connectors with change details
  adobe_admin_console_connector_saas_common: Adobe Admin Console connector (SaaS common)
  amazon_web_services_aws_connector: Amazon Web Services (AWS) connector
  ldap_connector_8: LDAP connector
  microsoft_graph_api_connector_5: Microsoft Graph API connector
  _1.5.20.23_saascommon: SaaS Common
  sap_successfactors_connector_4: SAP SuccessFactors connector
  webex_connector_saas_common: Webex Connector (SaaS common)
  workday_connector_3: Workday connector
  updated_connectors_without_change_details_8: Updated connectors without change details
  1_5_20_22_connectors: 1.5.20.22 Connectors
  updated_connectors_with_change_details_11: Updated connectors with change details
  adobe_admin_console_connector: Adobe Admin Console connector
  database_table_connector_2: Database Table connector
  docusign_connector_2: DocuSign connector
  ibm_racf_connector: IBM RACF connector
  mongodb_connector: MongoDB connector
  oracle_ebs_connector_2: Oracle EBS connector
  pingone_connector: PingOne connector
  sap_successfactors_connector_5: SAP SuccessFactors connector
  scim_connector_6: SCIM connector
  workday_connector_4: Workday connector
  updated_connectors_without_change_details_9: Updated connectors without change details
  1_5_20_21_connectors: 1.5.20.21 Connectors
  updated_connectors_with_change_details_12: Updated connectors with change details
  dropbox_connector: Dropbox connector
  epic_connector_3: Epic connector
  google_apps_connector_4: Google Apps connector
  ldap_connector_9: LDAP connector
  pingone_connector_2: PingOne connector
  sap_connector: SAP connector
  scripted_rest_connector: Scripted REST connector
  webex_connector: Webex Connector
  updated_connectors_without_change_details_10: Updated connectors without change details
  1_5_20_20_connectors: 1.5.20.20 Connectors
  updated_connectors_with_change_details_13: Updated connectors with change details
  database_table_connector_3: Database Table connector
  google_apps_connector_5: Google Apps connector
  microsoft_graph_api_connector_6: Microsoft Graph API connector
  salesforce_connector_3: Salesforce connector
  scim_connector_7: SCIM connector
  updated_connectors_without_change_details_11: Updated connectors without change details
  1_5_20_19_connectors: 1.5.20.19 Connectors
  updated_connectors_with_change_details_14: Updated connectors with change details
  scim_connector_8: SCIM connector
  updated_connectors_without_change_details_12: Updated connectors without change details
  1_5_20_18_connectors: 1.5.20.18 Connectors
  updated_connectors_with_change_details_15: Updated connectors with change details
  dropbox_connector_2: Dropbox connector
  google_apps_connector_6: Google Apps connector
  ldap_connector_10: LDAP connector
  microsoft_graph_api_connector_7: Microsoft Graph API connector
  salesforce_connector_4: Salesforce connector
  sap_connector_2: SAP connector
  sap_hana_database_connector_2: SAP HANA Database connector
  scim_connector_9: SCIM connector
  updated_connectors_without_change_details_13: Updated connectors without change details
  1_5_20_17_connectors: 1.5.20.17 Connectors
  1_5_20_16_connectors: 1.5.20.16 Connectors
  1_5_20_15_connectors: 1.5.20.15 Connectors
  1_5_20_14_connectors: 1.5.20.14 Connectors
  1_5_20_12_connectors: 1.5.20.12 Connectors
  1_5_20_11_connectors: 1.5.20.11 Connectors
  1_5_20_9_connectors: 1.5.20.9 Connectors
  1_5_20_8_connectors: 1.5.20.8 Connectors
  1_5_20_7_connectors: 1.5.20.7 Connectors
  1_5_20_6_connectors: 1.5.20.6 Connectors
  1_5_20_5_connectors: 1.5.20.5 Connectors
  1_5_20_4_connectors: 1.5.20.4 Connectors
  1_5_20_3_connectors: 1.5.20.3 Connectors
  1_5_20_2_connectors: 1.5.20.2 Connectors
  1_5_20_1_connectors: 1.5.20.1 Connectors
  1_5_20_0_connectors: 1.5.20.0 Connectors
  1_5_19_6_connectors: 1.5.19.6 Connectors
  1_5_19_5_connectors: 1.5.19.5 Connectors
  1_5_19_4_connectors: 1.5.19.4 Connectors
  1_5_19_3_connectors: 1.5.19.3 Connectors
  1_5_19_2_connectors: 1.5.19.2 Connectors
  1_5_19_1_connectors: 1.5.19.1 Connectors
  1_5_19_0_connectors: 1.5.19.0 Connectors
  1_5_18_0_connectors: 1.5.18.0 Connectors
---

# Connector release notes

Subscribe for automatic updates: [icon: rss-square, set=fa][ICF release notes RSS Feed](./feed.xml)

Refer to [Connector framework release notes](framework.html) for details regarding any changes to the ICF Connector Framework that can affect connector behavior.

Downloads are available on [Backstage](https://backstage.forgerock.com/downloads/browse/idm/featured/connectors).

|   |                                                                                           |
| - | ----------------------------------------------------------------------------------------- |
|   | All updated connectors can include security, formatting, and other internal-facing fixes. |

## 1.5.20.34 Connectors

### Updated connectors with change details

#### [LDAP connector](../connector-reference/ldap.html)

* OPENICF-3437: Improved LDAP server discovery for PingDS and PingDirectory.

* OPENICF-3438: The LDAP connector correctly populates LDAP modify operation context, preventing accumulation of replicated control requests.

#### [Microsoft Graph API connector](../connector-reference/ms-graph-api.html)

* OPENICF-3435: The Microsoft Graph API connector now correctly handles adding passwords to application objects.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* Adobe Admin Console connector

* Adobe Marketing Cloud connector

* AWS connector

* Box connector

* Cerner connector

* DocuSign connector

* Dropbox connector

* Duo connector

* Epic connector

* Google Cloud Platform connector

* HubSpot connector

* Marketo connector

* Multiple CSV Cloud connector

* Oracle EBS connector

* Peoplesoft connector

* PingOne connector

* RACF connector

* SaaS REST connector

* Salesforce connector

* SAP S/4HANA connector

* SCIM connector

* Scripted REST connector

* Snowflake connector

* SuccessFactors connector

* Webex connector

## 1.5.20.33 Connectors

### New connectors

#### [Snowflake connector](../connector-reference/snowflake.html)

### Updated connectors with change details

#### [Google Apps connector](../connector-reference/google.html)

* OPENICF-3302: The connector now clears the user `aliases` field through patch actions.

* OPENICF-3332: The connector now uses the Equals (`EQ`) filter on the new `parentOrgUnitPath` attribute to allow querying an `OrgUnits` object. Learn more in [Deprecated functionality](deprecated-functionality.html#_1_5_20_33) and in [Supported search filters](../connector-reference/google.html#google-apps-search-filters).

#### [LDAP connector](../connector-reference/ldap.html)

* OPENICF-3320: The connector configuration no longer includes the obsolete property `respectResourcePasswordPolicyChangeAfterReset`. Learn more in [Changed functionality](changed-functionality.html#_1-5-20-33-changed-fx).

#### [Oracle EBS connector](../connector-reference/ebs.html)

* OPENICF-3379: The connector now doesn't require the `__NAME__` attribute in `__ACCOUNT__` attribute updates. Learn more in [Changed functionality](changed-functionality.html#_1-5-20-33-changed-fx).

* OPENICF-3389: The connector now supports the delete operation on the `__ACCOUNT__` object type. Learn more in [Changed functionality](changed-functionality.html#_1-5-20-33-changed-fx).

* OPENICF-3389: The connector now includes a new boolean configuration property to enable queries to return only active accounts or all accounts. Learn more in [Changed functionality](changed-functionality.html#_1-5-20-33-changed-fx).

* OPENICF-3394: The connector now handles updates on the `__ENABLE__` attribute based on the UID of the updated user instead of in the content of the payload `__NAME__` attribute. Learn more in [Changed functionality](changed-functionality.html#_1-5-20-33-changed-fx).

#### [SaaS Common](../connector-reference/preface.html#saas-common)

* OPENICF-3371: OAuth access tokens are now renewed at a minimum of 60 seconds before their expiration.

#### [SAP SuccessFactors connector](../connector-reference/successfactors.html)

* OPENICF-3412: The SuccessFactors connector now correctly stores the schema caching mechanism in the connector configuration.

#### [SCIM connector](../connector-reference/scim.html)

* OPENICF-3360: The SCIM connector now supports finer rate-limiter granularity to control the operation execution rate. For example, you can configure the rate limiter to any positive rational number, such as `0.5/sec` or `30/min`. Learn more in [Changed functionality](changed-functionality.html).

* OPENICF-3377: The connector now supports the `filterAttributesToGet` boolean configuration property that determines if the SCIM `attributes` parameter should be included when reading resources using the SCIM endpoint. Learn more in [Changed functionality](changed-functionality.html) and in [SCIM connector configuration](../connector-reference/scim.html#scim).

#### [Workday connector](../connector-reference/workday.html)

* OPENICF-3324: Fixed the XPath transformation logic that could incorrectly alter expressions and lead to invalid results.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* Adobe Admin Console connector ([SaaS common](#_1.5.20.33_saascommon))

* Adobe Marketing Cloud connector

* AS400 connector

* AWS IAM Identity Center connector

* Box connector ([SaaS common](#_1.5.20.33_saascommon))

* Database table connector

* DocuSign connector([SaaS common](#_1.5.20.33_saascommon))

* Dropbox connector ([SaaS common](#_1.5.20.33_saascommon))

* Groovy connector ([Scripted Groovy](../connector-reference/preface.html#scripted-groovy))

* HubSpot connector

* Microsoft (MS) Graph API connector

* MongoDB connector ([Scripted Groovy](../connector-reference/preface.html#scripted-groovy))

* Multiple CSV Cloud connector

* Multiple CSV connector

* PingOne connector ([SaaS common](#_1.5.20.33_saascommon))

* SaaS REST connector ([SaaS common](#_1.5.20.33_saascommon))

* Salesforce connector

* SAP connector ([Scripted Groovy](../connector-reference/preface.html#scripted-groovy))

* SAP Hana DB connector

* Scripted REST connector ([Scripted Groovy](../connector-reference/preface.html#scripted-groovy))

* Scripted SQL connector ([Scripted Groovy](../connector-reference/preface.html#scripted-groovy))

* ServiceNow connector

* SSH connector ([Scripted Groovy](../connector-reference/preface.html#scripted-groovy))

* Webex connector ([SaaS common](#_1.5.20.33_saascommon))

## 1.5.20.32 Connectors

### Updated connectors with change details

#### [Dropbox connector](../connector-reference/dropbox.html) ([SaaS common](#_1.5.20.32_saascommon))

* OPENICF-3266: The connector throws a proper error when attempting to perform an unsupported PATCH operation.

#### [LDAP connector](../connector-reference/ldap.html)

* OPENICF-3048: New `enforceADPasswordPolicyOnReset` configuration property specific for Active Directory to enable the enforcement of password policies on password resets.

  |   |                                                                                                                               |
  | - | ----------------------------------------------------------------------------------------------------------------------------- |
  |   | You can't set `enforceADPasswordPolicyOnReset` using the UI. You must edit the provisioner file directly or use the REST API. |

* OPENICF-3273: Ensure proper decoding of LDAP referral URLs.

* OPENICF-3284: Improved password policy validation error feedback for PingDS and Active Directory.

* OPENICF-3286: Fixes LDAP change log sync strategy for IBM Security Directory Server type to correctly skip changes.

* OPENICF-3287: You can't set port 0 in the connector configuration.

* OPENICF-3288: Port 3268 and 3269 (SSL) are now enforced for Active Directory Global Catalog detection.

#### [SaaS Common](../connector-reference/preface.html#saas-common)

* OPENICF-3263: JWT bearer flow no longer requires the `client_secret` to obtain an access token.

#### [SaaS REST Connector](../connector-reference/rest.html) ([SaaS common](#_1.5.20.32_saascommon))

* OPENICF-3272: Fixes an issue where `__UID__` resources that contained a space weren't properly URL-encoded when injected within the request URL.

* OPENICF-3277: Fixes a `NullPointerException` that can occur when attempting to unflatten attributes not present in the request payload.

#### [SAP HANA Database connector](../connector-reference/saphanadb.html)

* OPENICF-3241: The connector no longer uses the cascade option when dropping users.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* Adobe Admin Console connector ([SaaS common](#_1.5.20.32_saascommon))

* AWS IAM IC connector

* Box connector ([SaaS common](#_1.5.20.32_saascommon))

* Database table connector

* DocuSign connector ([SaaS common](#_1.5.20.32_saascommon))

* MS Graph API connector

* Multiple CSV Cloud connector

* Oracle EBS connector

* PingOne connector ([SaaS common](#_1.5.20.32_saascommon))

* ScriptedSQL connector

* Webex Connector ([SaaS common](#_1.5.20.32_saascommon))

* Workday connector

## 1.5.20.31 Connectors

### Updated connectors with change details

#### [DocuSign connector](../connector-reference/docusign.html)

* OPENICF-3150: The connector now returns an empty query result instead of throwing an `UnknownUidException` when it cannot find a resource for queries using the UID.

#### [Multiple CSV connector](../connector-reference/multicsv.html)

* OPENICF-3270: Fixes complex queries against multiple special attributes such as `_id` and `__NAME__`.

#### [Multiple CSV Cloud connector](../connector-reference/multicsvcloud.html)

* Initial release of the [Multiple CSV Cloud connector](../connector-reference/multicsvcloud.html).

#### [SAP SuccessFactors connector](../connector-reference/successfactors.html)

* OPENICF-3139: The connector now uses a OpenSAML to generate SAML assertions locally.

#### [SaaS REST Connector](../connector-reference/rest.html)

* OPENICF-3157: Support for dynamic ICF resource filtering.

* OPENICF-3158: Support for restricting fields using `OP_ATTRIBUTES_TO_GET`.

* OPENICF-3233: Fixes invalid `__ACCOUNT__` object type definition when using the `createCoreConfig` action.

* OPENICF-3253: Fixes issue when a DELETE request requires a `requestBody`.

#### [SCIM connector](../connector-reference/scim.html)

* OPENICF-3260: The connector could incorrectly inject a `multiValuedAttributes` attribute into Create and Update payloads sent to the remote SCIM Provider.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* AWS IAM IC connector

* Box connector

* CSV File connector

* Kerberos connector

* MongoDB connector

* MS Graph API connector

* SAP connector

* SAP HANA DB connector

* Scripted REST connector

* Webex connector

* Workday connector

## 1.5.20.30 Connectors

### Updated connectors with change details

#### [Database Table connector](../connector-reference/dbtable.html)

* OPENICF-2250: Connector attributes with the configuration property `changeLogColumn` can pass to the connector object.

#### [Google Apps connector](../connector-reference/google.html)

* OPENICF-3081: Use the `passwordHashAlgorithm` property to hash the connector `__PASSWORD__` attribute during transport.

* OPENICF-3088: Bug fix preventing update for `__ACCOUNT__` and `__GROUP__` secondary objects when the payload didn't include changes for the primary Google object.

#### [Kerberos connector](../connector-reference/kerberos.html)

* OPENICF-3170: The `scriptRoots` value returned by the `createCoreConfig` action was invalid.

#### [LDAP connector](../connector-reference/ldap.html)

* OPENICF-3101: The LDAP connector can read the Novell eDirectory GUID attribute.

#### [Microsoft Graph API connector](../connector-reference/ms-graph-api.html)

* OPENICF-1911: Support for the ability to use environment variables when authenticating with Azure.

#### [SaaS Common](../connector-reference/preface.html#saas-common)

* OPENICF-3097: JWT auth flow now supports PEM-formatted private keys.

#### [SaaS REST Connector](../connector-reference/rest.html)

* OPENICF-3114: Ability to send a payload in a delete request.

* OPENICF-3167: Fixes a Gson serialization issue preventing the SaaS REST connector from working with an RCS.

#### [Salesforce connector](../connector-reference/salesforce.html)

* OPENICF-3122: Adds the `initialSyncTokenOffset` configuration property. Use this property to define a period, in hours, to subtract from the current time when generating the initial Salesforce sync token. Default value is `0` hours.

#### [SCIM connector](../connector-reference/scim.html)

* OPENICF-3091: When generating the ICF Schema, the ICF ObjectClass type was incorrectly set to the SCIM Schema name instead of the ResourceType name.

#### [ServiceNow connector](../connector-reference/servicenow.html)

* OPENICF-2422: The connector supports the ServiceNow user object property `cost_center`.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* Box connector

* CSV connector

* Scripted REST connector

* Hubspot connector

* Webex connector

## 1.5.20.29 Connectors

### New connectors

#### [SaaS REST Connector](../connector-reference/rest.html)

### Updated connectors with change details

#### [Adobe Marketing Cloud connector](../connector-reference/adobe.html)

* OPENICF-2983: Connector invalidates access token on authentication failure.

* OPENICF-3044: Removed runtime configuration properties. Learn more in [Changed functionality](changed-functionality.html#_1-5-20-29-removed-props).

#### [Box connector](../connector-reference/box.html)

* OPENICF-2978: Connector invalidates access token on authentication failure.

#### [Epic connector](../connector-reference/epic.html)

* OPENICF-2982: Connector invalidates access token on authentication failure.

* OPENICF-3046: Removed runtime configuration properties. Learn more in [Changed functionality](changed-functionality.html#_1-5-20-29-removed-props).

#### [Google Cloud Platform connector](../connector-reference/gcp.html)

* OPENICF-2980: Connector invalidates access token on authentication failure.

#### [HubSpot connector](../connector-reference/hubspot.html)

* OPENICF-2979: Connector invalidates access token on authentication failure.

#### [LDAP connector](../connector-reference/ldap.html)

* OPENICF-3018: For DS 8.0 or later LDAP servers, the connector pages the change log with a search control cookie instead of filtering against change numbers. Change numbers are no longer required to set up and use the sync action.

#### [Marketo connector](../connector-reference/marketo.html)

* OPENICF-2984: Connector invalidates access token on authentication failure.

* OPENICF-3045: Removed runtime configuration properties. Learn more in [Changed functionality](changed-functionality.html#_1-5-20-29-removed-props).

#### [SaaS Common](../connector-reference/preface.html#saas-common)

* OPENICF-2967: Support for JWT authentication flow with framework 1.5.20.24 or later and RCS 1.5.20.24 or later.

* OPENICF-2985: Connector invalidates access token on authentication failure.

#### [Salesforce connector](../connector-reference/salesforce.html)

* OPENICF-2977: Connector invalidates access token on authentication failure.

#### [SAP SuccessFactors connector](../connector-reference/successfactors.html)

* OPENICF-2981: Connector invalidates access token on authentication failure.

#### [SCIM connector](../connector-reference/scim.html)

* OPENICF-2975: Connector invalidates access token on authentication failure.

#### [ServiceNow connector](../connector-reference/servicenow.html)

* OPENICF-2976: Connector invalidates access token on authentication failure.

## 1.5.20.28 Connectors

### New connectors

* [Multiple CSV connector](../connector-reference/multicsv.html)

### Updated connectors with change details

#### [Microsoft Graph API connector](../connector-reference/ms-graph-api.html)

* OPENICF-2910: You can now read the following [Contacts](../connector-reference/msgraph-contacts.html) attributes:

  * `directReports`

  * `memberOf`

  * `transitiveMemberOf`

  * `manager`

  |   |                                               |
  | - | --------------------------------------------- |
  |   | These attributes are not returned by default. |

* OPENICF-3005: You can now read the following [`servicePrincipal`](../connector-reference/msgraph-servicePrincipal.html) attributes:

  * `owners`

  * `memberOf`

  * `transitiveMemberOf`

  * `oauth2PermissionGrants`

  |   |                                               |
  | - | --------------------------------------------- |
  |   | These attributes are not returned by default. |

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* AWS IAM Identity Center connector

* LDAP connector

* [SaaS Common](../connector-reference/preface.html#saas-common) connectors

* [Scripted Groovy](../connector-reference/preface.html#scripted-groovy) connectors

* Workday connector

## 1.5.20.27 Connectors

### Updated connectors with change details

#### [Google Apps connector](../connector-reference/google.html)

* OPENICF-2996: Correctly maps License Assignment read operation parameters to Google API calls.

#### [LDAP connector](../connector-reference/ldap.html)

* OPENICF-2992: Improved support for IBM directory changelog "changes" binary attribute.

## 1.5.20.26 Connectors

### New connectors

* [Duo connector](../connector-reference/duo.html)

### Updated connectors with change details

#### [AWS IAM Identity Center connector](../connector-reference/aws-iam-identity-center.html)

* OPENICF-2968: Error when renewing access token.

#### [Epic connector](../connector-reference/epic.html)

* OPENICF-2941: Querying Epic accounts could fail.

#### [LDAP connector](../connector-reference/ldap.html)

* OPENICF-2931: PingDirectory is now a recognized LDAP directory.

#### [Microsoft Graph API connector](../connector-reference/ms-graph-api.html)

* OPENICF-2900: Added a user resource attribute `authenticationMethods` that is a read-only list of objects containing the authentication methods associated with a user.

* OPENICF-2901: User email authentication methods can be added/updated/deleted using a new String attribute `__emailAuthenticationMethod__` that contains the email associated with the user's authentication preference.

* OPENICF-2902: The connector can now manage phone authentication methods on a user using a new virtual multivalued String attribute `__phoneAuthenticationMethods__` that contains a definitive list of concatenated `"{phoneNumber}:{phoneType}"`.

* OPENICF-2903: Adds multivalued string attribute `__removeFido2Methods__` to the user schema. This attribute takes a list of String GUIDs to be deleted as Fido2 auth method IDs associated with a user.

* OPENICF-2912: Adds multivalued string attribute `__removeMicrosoftAuthenticatorMethods__` to the user schema. This attribute holds a list of GUIDs associated with MicrosoftAuthenticator authentication method IDs to be removed from a user.

* OPENICF-2913: Adds multivalued string attribute `__removeSoftwareOathMethods__` to the user schema. This attribute holds a list of GUIDs associated with Software Oath authentication method IDs to be removed from a user.

#### [MongoDB connector](../connector-reference/mongodb.html) ([Scripted Groovy](#_1.5.20.26_scriptedgroovy))

* OPENICF-2987: Update MongoDB driver to version 4.11.4.

#### [SAP S/4HANA connector](../connector-reference/sap-hana.html)

* OPENICF-2915: You can specify the `instanceUrl` of the SAP Hana instance in the connector configuration properties.

* OPENICF-2934: Query paging fixes.

#### [SCIM connector](../connector-reference/scim.html)

* OPENICF-2880: Reduce logging noise when a schema extension overrides a core schema attribute.

#### [Scripted Groovy](../connector-reference/preface.html#scripted-groovy)

* OPENICF-2955: The Scripted Groovy `scriptRoots` configuration property can now reference Groovy scripts embedded within the connector JAR file using the `!` prefix.

#### [Workday connector](../connector-reference/workday.html)

* OPENICF-1148: Support for updating the primary work phone number using the `primaryWorkPhone` connector attribute.

* OPENICF-2622: You can use [XPath transformations](../connector-reference/workday.html#workday-xpath-transformations) to simplify and map Workday attributes directly to read-only connector object type properties.

  |   |                                                          |
  | - | -------------------------------------------------------- |
  |   | Requires connector framework version 1.5.20.24 or later. |

* OPENICF-2891: Deprecate Workday connector schema attribute `mobile`.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* Adobe Admin Console connector

* Adobe Marketing Cloud connector

* AS400 connector

* AWS connector

* Box connector

* Cerner connector

* CSV connector

* Database table connector

* DocuSign connector

* Dropbox connector

* Google Apps connector

* Google Cloud Platform (GCP) connector

* HubSpot connector

* IBM RACF connector

* Kerberos connector

* Marketo connector ([Scripted Groovy](#_1.5.20.26_scriptedgroovy))

* Oracle EBS

* Peoplesoft connector

* PingOne connector

* Powershell connector toolkit

* Salesforce connector

* SAP connector ([Scripted Groovy](#_1.5.20.26_scriptedgroovy))

* SAP HANA Database connector

* SAP SuccessFactors connector

* ScriptedREST connector ([Scripted Groovy](#_1.5.20.26_scriptedgroovy))

* ScriptedSQL connector ([Scripted Groovy](#_1.5.20.26_scriptedgroovy))

* ServiceNow connector

* SSH connector ([Scripted Groovy](#_1.5.20.26_scriptedgroovy))

* Webex connector

## 1.5.20.23 Connectors

### New connectors

* [AWS IAM Identity Center connector](../connector-reference/aws-iam-identity-center.html)

* [Box connector](../connector-reference/box.html) ([SaaS common](#_1.5.20.23_saascommon))

### Updated connectors with change details

#### [Adobe Admin Console connector](../connector-reference/adobe-admin-console.html) ([SaaS common](#_1.5.20.23_saascommon))

* OPENICF-2792: Set the type for the `orgSpecific` and `businessAccount` schema attributes to boolean.

* OPENICF-2845: Ability to update the user's email address.

* OPENICF-2851: Updating group memberships for an Adobe account may result in excessive email notifications.

#### [Amazon Web Services (AWS) connector](../connector-reference/aws-iam.html)

* OPENICF-2755: Support for groups, roles, managed policy, inline policy, service control policy, and org unit object types.

#### [LDAP connector](../connector-reference/ldap.html)

* OPENICF-2805: SASL-EXTERNAL (mTLS) is now available with the LDAP connector.

#### [Microsoft Graph API connector](../connector-reference/ms-graph-api.html)

* OPENICF-2834: The virtual resource displaying service plans as their own object now includes the `skuPartNumber` as a readable attribute. Additionally, the display name of service plans is now a combination of the `skuPartNumber` and the `servicePlanName`.

#### [SaaS Common](../connector-reference/preface.html#saas-common)

* OPENICF-2781: During token renewal, properly cache new refresh token in the connector configuration.

#### [SAP SuccessFactors connector](../connector-reference/successfactors.html)

* OPENICF-2847: Resolve `ArrayIndexOutOfBoundsException` when consuming older connector configuration.

#### [Webex Connector](../connector-reference/webex.html) ([SaaS common](#_1.5.20.23_saascommon))

* OPENICF-2619: Properly handle HTTP 400 error responses during Webex user creation.

#### [Workday connector](../connector-reference/workday.html)

* OPENICF-2524: Paged queries with no results throw an internal server error.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* Adobe Marketing Cloud connector

* AS400 connector

* Cerner connector

* CSV connector

* Database table connector

* DocuSign connector ([SaaS common](#_1.5.20.23_saascommon))

* Dropbox connector ([SaaS common](#_1.5.20.23_saascommon))

* Epic connector

* Google Apps connector

* Google Cloud Platform (GCP) connector

* Groovy connector toolkit

* HubSpot connector

* IBM RACF connector

* Kerberos connector

* Marketo connector

* MongoDB connector

* Oracle EBS

* Peoplesoft connector

* PingOne connector ([SaaS common](#_1.5.20.23_saascommon))

* Powershell connector toolkit

* Salesforce connector

* SAP connector

* SAP HANA Database connector

* SAP S/4HANA connector

* SAP SuccessFactors connector

* SCIM connector

* ScriptedREST connector

* ScriptedSQL connector

* ServiceNow connector

* SSH connector

## 1.5.20.22 Connectors

### Updated connectors with change details

#### [Adobe Admin Console connector](../connector-reference/adobe-admin-console.html)

* OPENICF-2559: Initial release of the Adobe Admin Console connector. Refer to [Adobe Admin Console connector](../connector-reference/adobe-admin-console.html) for more information.

#### [Database Table connector](../connector-reference/dbtable.html)

* OPENICF-2679: Reduce log level of many operations

#### [DocuSign connector](../connector-reference/docusign.html)

* OPENICF-2557: DocuSign connector v2

  * OPENICF-2583: Add ObjectClass UserGroups

  * OPENICF-2587: Add filter support for Users ObjectClass

  * OPENICF-2588: Add filter support for the UserGroups ObjectClass

  * OPENICF-2766: Wrong exception message when the connector is configured incorrectly

#### [IBM RACF connector](../connector-reference/racf.html)

* OPENICF-2757: Support for new object types, segments, and attributes

#### [MongoDB connector](../connector-reference/mongodb.html)

* OPENICF-2784: Update MongoDB driver to version 4.11.2

#### [Oracle EBS connector](../connector-reference/ebs.html)

* OPENICF-1760: EBS Connector v2, support responsibilities

#### [PingOne connector](../connector-reference/pingone.html)

* OPENICF-2740: Enhance user password to accept external password assignments

#### [SAP SuccessFactors connector](../connector-reference/successfactors.html)

* OPENICF-2428: Account Object: Group Name not required

* OPENICF-2528: Support schema discovery and writeback

#### [SCIM connector](../connector-reference/scim.html)

* OPENICF-1617: Ability to assign groups to users

* OPENICF-2669: The read rate limit may be exceeded during queries

* OPENICF-2672: Reconciliation after patch remove on managed user throws NPE and full updates omit remove operations

* OPENICF-2682: Using dynamic schema, multivalued attributes of schema extensions are improperly handled

* OPENICF-2710: Creating users/groups with multivalued extension attributes fails

* OPENICF-2726: Do not fail on unknown Enum values when deserializing schemas

* OPENICF-2735: The endpoint in use for a given ResourceType was incorrectly derived from the objectClass defined by the IDM provisioner configuration instead of from the endpoint specified by the ResourceTypes response from the SCIM Provider

#### [Workday connector](../connector-reference/workday.html)

* OPENICF-2524: liveSync on Workday custom fields now works

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* Adobe Marketing Cloud connector

* AS400 connector

* AWS connector

* Cerner connector

* CSV connector

* Dropbox connector

* Epic connector

* Google Apps connector

* Google Cloud Platform (GCP) connector

* Groovy connector toolkit

* HubSpot connector

* Kerberos connector

* LDAP connector

* Marketo connector

* MS Graph API connector

* Peoplesoft connector

* Powershell connector toolkit

* Salesforce connector

* SAP connector

* SAP HANA Database connector

* SAP S/4HANA connector

* ScriptedREST connector

* ScriptedSQL connector

* ServiceNow connector

* SSH connector

* Webex connector

## 1.5.20.21 Connectors

### Updated connectors with change details

#### [Dropbox connector](../connector-reference/dropbox.html)

* OPENICF-2664: SaaS Client Initializer should not automatically add default HTTP headers

* OPENICF-2655: Logging levels in use by generated connector class are too verbose

#### [Epic connector](../connector-reference/epic.html)

* OPENICF-2233: Add support for managing SER resources

* OPENICF-2492: EMP Enhancements

#### [Google Apps connector](../connector-reference/google.html)

* OPENICF-2617: Deprecate \_\_SECONDARY\_EMAIL\_\_ in favor of \_\_SECONDARY\_EMAILS\_\_ attribute

#### [LDAP connector](../connector-reference/ldap.html)

* OPENICF-2544: LiveSync timestamp strategy may lose changes when remote handler returns `false`

#### [PingOne connector](../connector-reference/pingone.html)

* OPENICF-2507: Initial release of the PingOne connector. Refer to [PingOne connector](../connector-reference/pingone.html) for more information.

#### [SAP connector](../connector-reference/sap.html)

* OPENICF-2410: Additional attributes in the Profile Object Type

* OPENICF-2411: Additional attributes in the Activity Groups Object Type

#### [Scripted REST connector](../connector-reference/scripted-rest.html)

* OPENICF-1917: Support for throttling

#### [Webex Connector](../connector-reference/webex.html)

* OPENICF-2047: Initial release of the Webex connector. Refer to [Webex Connector](../connector-reference/webex.html) for more information.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* AWS connector

* Kerberos connector

## 1.5.20.20 Connectors

### Updated connectors with change details

#### [Database Table connector](../connector-reference/dbtable.html)

* OPENICF-2606: Schema is unnecessarily regenerated for every operation.

#### [Google Apps connector](../connector-reference/google.html)

* OPENICF-2194: PATCH remove operation doesn't update the object when both the field and value are provided.

* OPENICF-2351: Include 503 errors in the retry logic for GoogleApps connector.

* OPENICF-2490: Requests hang if the Google Admin SDK API has not been enabled within the configured Google Project.

#### [Microsoft Graph API connector](../connector-reference/ms-graph-api.html)

* OPENICF-2593: Upgrade azure-identity dependency to latest version.

#### [Salesforce connector](../connector-reference/salesforce.html)

* OPENICF-2626: A duplicate header sent by the connector prevents successful OAuth flow.

#### [SCIM connector](../connector-reference/scim.html)

* OPENICF-2575: Running liveSync for object classes other than the Account object results in an error.

* OPENICF-2601: Inject common attributes within dynamically generated schemas for all resource types.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* Adobe Marketing Cloud connector

* Marketo connector

* ScriptedREST connector

* ScriptedSQL connector

## 1.5.20.19 Connectors

### Updated connectors with change details

#### [SCIM connector](../connector-reference/scim.html)

* OPENICF-1296: HTTP Status and Error Response Handling.

* OPENICF-2574: Authorization header contains an extra space which breaks client\_credentials flow.

* OPENICF-2579: TestOp should catch all exceptions thrown by the initial attempt to read the alternate ServiceProviderConfig endpoint.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* Microsoft Graph API connector

## 1.5.20.18 Connectors

### Updated connectors with change details

#### [Dropbox connector](../connector-reference/dropbox.html)

* OPENICF-2354 Missing property messages.

#### [Google Apps connector](../connector-reference/google.html)

* OPENICF-2487 License assignment account attribute should be an array of strings.

#### [LDAP connector](../connector-reference/ldap.html)

* OPENICF-2296: Bad IP address for the LDAP host should be caught, and a 503 error code should be returned by IDM.

* OPENICF-2401: `queryFilter` true or false against isActive attribute returns all results.

* OPENICF-2526: Specify a negative offset (in seconds) to be applied to the timestamp token when querying for changes on the remote LDAP server using the `timestampSyncOffset` configuration property.

* OPENICF-2555: Ability to define custom octet string attributes using the `customOctetStringAttributes` configuration property.

#### [Microsoft Graph API connector](../connector-reference/ms-graph-api.html)

* OPENICF-2006: Clicking on Azure AD connector for the first time throws a 500 error.

* OPENICF-2027: Support single quotation marks in query filters.

* OPENICF-2140: Info level logging is overused for this connector.

#### [Salesforce connector](../connector-reference/salesforce.html)

* OPENICF-1527: Returns a generic ConnectorException 'Error: 400' on expired/revoked refresh\_token.

* OPENICF-2246: Implement support for Client Credentials Grant type. Refer to [Configure the Salesforce connector](../connector-reference/salesforce.html#salesforce-provisioner).

* OPENICF-2266: User schema is not cached.

* OPENICF-2505: createFullConfig NPEs when supportedObjectTypes contains FeatureLicense.

#### [SAP connector](../connector-reference/sap.html)

* OPENICF-2371: Scripts for SAP HR searching and filtering.

* OPENICF-2465: Prevent activity group assignment from being deleted when the assignment is end-dated.

* OPENICF-2480: SAP Central User Administration (CUA) support.

#### [SAP HANA Database connector](../connector-reference/saphanadb.html)

Initial release of the SAP HANA Database connector. Refer to [SAP HANA Database connector](../connector-reference/saphanadb.html) for more information.

* OPENICF-2368: SAP HANA Database connector.

#### [SCIM connector](../connector-reference/scim.html)

* OPENICF-1528: Salesforce returns a generic ConnectorException 'Error: 400' on expired/revoked refresh\_token.

* OPENICF-2472: access\_token validation checked on `issued_at` claim instead of `expires_in` for refresh\_token grant.

* OPENICF-2500: Extension attributes not flattened when converted to ConnectorObject.

* OPENICF-2504: Map JSON integer type to Java Long.

### Updated connectors without change details

|   |                                                                                                      |
| - | ---------------------------------------------------------------------------------------------------- |
|   | Connectors without change details can include security, formatting, and other internal-facing fixes. |

* Adobe Marketing Cloud connector

* AS400 connector

* AWS connector

* Box connector

* Cerner connector

* CSV connector

* Database Table connector

* DocuSign connector

* Epic connector

* GCP connector

* HubSpot connector

* IBM RACF connector

* Oracle EBS connector

* Peoplesoft connector

* SAP S/4HANA connector

* SAP SuccessFactors connector

* ScriptedREST connector

* ScriptedSQL connector

* ServiceNow connector

* Workday connector

## 1.5.20.17 Connectors

> **Collapse: Database Table Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Microsoft Graph API Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Oracle EBS connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Salesforce connector**
>
> * OPENICF-1723: Clarify usage of `proxyUri` configuration property

> **Collapse: SCIM connector**
>
> * OPENICF-900: Implement the `/Schemas` endpoint discovery
>
> * OPENICF-2297: Roles attribute should be a list of Strings, not a list of Objects
>
> * OPENICF-2482: Dynamic schema does not default to static schema on all exceptions
>
> * OPENICF-2483: Creating a user with special attributes fails with dynamically generated schema
>
> * OPENICF-2484: PUT w/schemas attribute fails for Providers that support Patch
>
> * OPENICF-2448: HTTP Client fails to handle OAuth errors
>
> * OPENICF-2453: Persist optional refresh\_token issued upon successful access\_token renewal

> **Collapse: ScriptedSQL Connector**
>
> No public changes were made specific to this connector, though a new version was released.

## 1.5.20.16 Connectors

> **Collapse: Dropbox connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: DocuSign connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Google Apps connector**
>
> * OPENICF-2356: GoogleApps Connector doesn't allow listing of licenses

> **Collapse: Groovy connector toolkit**
>
> * OPENICF-2394: Align Scripted Connector templates

> **Collapse: HubSpot connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Kerberos Apps connector**
>
> * OPENICF-2400: Kerberos Search operation logs incorrect operation type
>
> * OPENICF-2394: Align Scripted Connector templates

> **Collapse: Marketo Connector**
>
> * OPENICF-2394: Align Scripted Connector templates

> **Collapse: Microsoft Graph API connector**
>
> * OPENICF-2355: MSGraphAPI Connector doesn't support assigning `servicePlans` to an Azure user

> **Collapse: MongoDB Connector**
>
> * OPENICF-2394: Align Scripted Connector templates

> **Collapse: Salesforce connector**
>
> * OPENICF-2357: Salesforce Connector doesn't allow listing of licenses

> **Collapse: SAP connector**
>
> * OPENICF-2035: SAP Account Object Type attributes
>
> * OPENICF-2036: SAP Role Object Type Attributes
>
> * OPENICF-2037: SAP UM Profile Object Type Attributes
>
> * OPENICF-2292: Group Object Type attributes
>
> * OPENICF-2350: R3 script uses deprecated methods to parse date
>
> * OPENICF-2360: NPE getting SAP configuration
>
> * OPENICF-2377: Active Group memberships should not sync activity group name
>
> * OPENICF-2379: Should not retrieve, display, or allow manipulation of password hashing attributes
>
> * OPENICF-2386: Router should not be a required attribute
>
> * OPENICF-2388: Must throw an error upon user create/update/delete error
>
> * OPENICF-2394: Align Scripted Connector templates
>
> * OPENICF-2397: Add pagination
>
> * OPENICF-2419: Timestamp filtering support
>
> * OPENICF-2432: Default location for the ScriptRoots is incorrect
>
> * OPENICF-2435: Respect boolean response from search result handler
>
> * OPENICF-2452: Filter CODVN, CODVC, and CODVS from User LOGONDATA
>
> * OPENICF-2459: Query with `_queryFilter=true` no longer returns full user object

> **Collapse: ScriptedREST Connector**
>
> * OPENICF-2430: Search and Sync operations do not respect handler result
>
> * OPENICF-2394: Align Scripted Connector templates

> **Collapse: ScriptedSQL Connector**
>
> * OPENICF-2429: Search and Sync operations do not respect handler result
>
> * OPENICF-2394: Align Scripted Connector templates

> **Collapse: SSH Connector**
>
> * OPENICF-2394: Align Scripted Connector templates

> **Collapse: Workday connector**
>
> * OPENICF-2438: `externalFieldAndParameterCriteria` config parameter should not be set to null by default

## 1.5.20.15 Connectors

> **Collapse: Adobe Marketing Cloud connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Database Table Connector**
>
> * OPENICF-2308: Database Table Connector - Possible regression of OPENICF-903
>
> * OPENICF-1987: ORA-00933 - SQL command not properly ended error using Database Table Connector

> **Collapse: Dropbox Connector**
>
> Initial release of the Dropbox connector. Refer to [Dropbox connector](../connector-reference/dropbox.html) for more information.
>
> * OPENICF-2051: Dropbox connector

> **Collapse: Microsoft Graph API connector**
>
> * OPENICF-2306: MS Graph API Connector: Creating and updating applications with certificates fails
>
> * OPENICF-2269: MS Graph API Connector: Implement application role assignments
>
> * OPENICF-1964: MS Graph API Connector: Add the ability to handle User's Contacts object
>
> * OPENICF-2315: MS Graph API Connector: otherMails attribute should be an array of strings

> **Collapse: Salesforce connector**
>
> * OPENICF-2343: Cannot delete a list of PermissionSetAssignments

> **Collapse: SCIM connector**
>
> * OPENICF-2320: SCIM Connector: totalResults is not used when query is using paging
>
> * OPENICF-2321: SCIM Connector: pagedResultsOffset is not used properly
>
> * OPENICF-2325: SCIM Connector: HTTP error 429 should have a more explicit message
>
> * OPENICF-2323: SCIM Connector: prevent query with sorting when the Service Provider does not accept sorting
>
> * OPENICF-1916: SCIM Connector: Support for throttling

> **Collapse: ScriptedSQL Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: ServiceNow connector**
>
> No public changes were made specific to this connector, though a new version was released.

## 1.5.20.14 Connectors

> **Collapse: AS400 Connector**
>
> * OPENICF-2236 - AS400 Connector: does not expose all the AS400ConnectionPool configuration properties

> **Collapse: Google Apps connector**
>
> * OPENICF-2252: GoogleApps Connector: Unable to configure connector via UI

> **Collapse: LDAP connector**
>
> * OPENICF-2225: LDAP Connector: syncToken nativeType to be configurable / updated - mismatch with DS type stops livesync

> **Collapse: Marketo connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Microsoft Graph API connector**
>
> * OPENICF-1976: MS Graph API Connector: Ability to create guest users
>
> * OPENICF-2208: MS Graph API Connector: add the ability to read "application" and "servicePrincipal" object
>
> * OPENICF-2238: MS Graph API Connector: unable to retrieve roles
>
> * OPENICF-2247: MS Graph API Connector: Query filters on collections and filters requiring advanced query parameters cause errors
>
> * OPENICF-2248: MS Graph API Connector: Implement role assignment and role eligibility schedules
>
> * OPENICF-2251: MS Graph API Connector: \_\_ACCOUNT\_\_ data listing fails in native console for assignedLicenses
>
> * OPENICF-2257: MS Graph API Connector: Clicking Role Assignment in Data tab throws a Graph API error
>
> * OPENICF-2267: MS Graph API Connector: Proxy -→ Java.lang.ClassCastException: class okhttp3.OkHttpClient cannot be cast to class com.azure.core.http.HttpClient (okhttp3.OkHttpClient and com.azure.core.http.HttpClient are in unnamed module of loader
>
> * OPENICF-2270: MS Graph API Connector: Adding API permissions to applications fails
>
> * OPENICF-2271: MS Graph API Connector: proxy basic auth not implemented but referenced
>
> * OPENICF-2275: MS Graph API Connector: Refactor connector new object handlers and UnsupportedOperationException handling

> **Collapse: Oracle EBS connector**
>
> Initial release of the EBS connector. Refer to [Oracle EBS connector](../connector-reference/ebs.html) for more information.
>
> * OPENICF-1781: EBS Connector V1.0

> **Collapse: Peoplesoft connector**
>
> * OPENICF-2311: PeopleSoft Connector: Remove embedded `psft-2.0` and `psjoa-1.0` Jar files

> **Collapse: Salesforce connector**
>
> * OPENICF-2176 - Salesforce Connector: Support Feature License Elements as List on User Object

> **Collapse: SCIM connector**
>
> * OPENICF-1922 SCIM Connector: PATCH operation should use `path` attribute for "add" and "replace"
>
> * OPENICF-2241: SCIM Connector: Service Provider Config settings don't work for Salesforce

## 1.5.20.12 Connectors

> **Collapse: AS400 Connector**
>
> Initial release of the AS400 connector. Refer to [AS400 connector](../connector-reference/as400.html) for more information.

> **Collapse: Google Apps connector**
>
> * OPENICF-2192: NPE when updating LicenseAssignments through a user update
>
> * OPENICF-2117: Hide Alternate Emails from the schema
>
> * OPENICF-2195: Intermittent NPE when we try to read newly created user

> **Collapse: LDAP connector**
>
> * OPENICF-400: LDAP connector should be able to properly handle reading the AD tokenGroups attribute

> **Collapse: PeopleSoft connector**
>
> * OPENICF-2033: PeopleSoft Connector v2.0

> **Collapse: SAP connector**
>
> * OPENICF-2183: Exception when SAP connector is running in OpenIDM

> **Collapse: SAP SuccessFactors connector**
>
> * OPENICF-2007: SAP SuccessFactors v2

> **Collapse: SCIM connector**
>
> * OPENICF-1916: Support for throttling
>
> * OPENICF-2207: Ability to define Accept: and Content-Type: HTTP headers

> **Collapse: Workday connector**
>
> * OPENICF-2030: Connector breaks when workerID is empty when using RCS
>
> * OPENICF-2150: Ability to add field and parameter to the request criteria

## 1.5.20.11 Connectors

> **Collapse: Adobe Marketing Cloud connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: AWS connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Box connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Cerner connector**
>
> * OPENICF-1960: Cerner Connector v2

> **Collapse: CSV connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: DocuSign connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Epic connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: GCP connector**
>
> Initial release of the GCP connector. Refer to [Google Cloud Platform connector](../connector-reference/gcp.html) for more information.
>
> * OPENICF-1749: GCP Connector

> **Collapse: Google Apps connector**
>
> * OPENICF-2039: GoogleApps Connector: missing some user attributes
>
> * OPENICF-2040: GoogleApps Connector: Manage role attributes
>
> * OPENICF-2041: GoogleApps Connector: Group attributes
>
> * OPENICF-2064: Google Apps Connector: Query the Google Workspace instance for Licenses
>
> * OPENICF-2066: GoogleApps Connector: Ability to query Roles and RoleAssignments
>
> * OPENICF-2136: Google Apps Connector: Exponential Back off for reading google objects required

> **Collapse: HubSpot connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: IBM RACF connector**
>
> * OPENICF-1762: IBM RACF API Connector
>
> |   |                                                                                                                                     |
> | - | ----------------------------------------------------------------------------------------------------------------------------------- |
> |   | There was a previous RACF connector, which is deprecated. Users of the previous RACF connector should migrate to the new connector. |

> **Collapse: LDAP connector**
>
> * OPENICF-1856: LDAP Connector: Assignment of static group to IDM User fails to assign it on LDAP side if user is already a member of a Dynamic Group on LDAP side
>
> * OPENICF-2089: LDAP Connector: ldapGroups membership does not take into account nested membership of other groups
>
> * OPENICF-2108: LDAP Connector: slow group membership updates with unindexed member/uniqueMember attributes in DS
>
> * OPENICF-2126: Assignment Issue: Managed User to DS Groups Failure to Select Target Group

> **Collapse: Marketo connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Microsoft Graph API connector**
>
> * OPENICF-2068: MSGraphAPI Connector: Implement Azure AD Directory Roles support
>
> * OPENICF-2088: MSGraphAPI Connector: Implement Azure AD custom role creation

> **Collapse: PeopleSoft connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Salesforce connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: SAP S/4HANA connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: SAP SuccessFactors connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: SCIM connector**
>
> * OPENICF-2112: SCIM Connector: caseSensitive
>
> * OPENICF-2113: SCIM Connector: problem with "issuedAt" from OAuth neg
>
> * OPENICF-2114: SCIM Connector: use authenticationBasic as an option for OAuth neg
>
> * OPENICF-2125: SCIM Connector: Fix Filter

> **Collapse: Scripted REST connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: ServiceNow connector**
>
> * OPENICF-2130: ServiceNow connector query results do not match what is returned from API

> **Collapse: Workday connector**
>
> No public changes were made specific to this connector, though a new version was released.

## 1.5.20.9 Connectors

> **Collapse: LDAP Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Microsoft Graph API Connector**
>
> * OPENICF-1614: MS Graph API Connector: Livesync on user/group does not populate membership
>
> * OPENICF-1858: MS Graph API Connector: Add Group Owners management

> **Collapse: SAP Connector**
>
> * OPENICF-1675: SAP Connector: Groovy deps should be embedded
>
> * OPENICF-2071: SAP Connector: Cannot update ACTIVITY GROUPS for users

## 1.5.20.8 Connectors

> **Collapse: CSV File Connector**
>
> * OPENICF-1935: CSV Connector: generates a stacktrace for Read Only permission files
>
> * OPENICF-1969: CSV Connector: Update csv connector parsing library
>
> * OPENICF-1258: CSV Connector: stripping empty strings, replacing with nulls.

> **Collapse: DatabaseTable Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Google Apps Connector**
>
> * OPENICF-2038: Google Apps Connector: Updating user's group membership may return NPE

> **Collapse: LDAP Connector**
>
> * OPENICF-1977: LDAP Connector: Detect CA LDAP directory server

> **Collapse: Microsoft Graph API Connector**
>
> * OPENICF-1606: MS Graph API Connector: Upgrade to MS Graph Java SDK v3
>
> * OPENICF-1807: MS Graph API Connector: Better handle failure of hard delete
>
> * OPENICF-1819: MS Graph API Connector: "performHardDelete" should be set to false by default

> **Collapse: PeopleSoft Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Salesforce Connector**
>
> * OPENICF-2002: Salesforce Connector: syncFailureHandler can exceed maxRetries

> **Collapse: ScriptedSQL Connector**
>
> No public changes were made specific to this connector, though a new version was released.

## 1.5.20.7 Connectors

> **Collapse: AWS Connector**
>
> Initial release of the AWS IAM connector. Refer to [Amazon Web Services (AWS) connector](../connector-reference/aws-iam.html) for more information.
>
> * OPENICF-1780: AWS IAM Connector

> **Collapse: DatabaseTable Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Google Apps Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: LDAP Connector**
>
> * OPENICF-1897: LDAP Connector: Add support for nested AD groups

> **Collapse: MongoDB Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: PeopleSoft Connector**
>
> Initial release of the Oracle PeopleSoft connector. Refer to [PeopleSoft connector](../connector-reference/peoplesoft.html) for more information.
>
> * OPENICF-1748: PeopleSoft Connector

> **Collapse: Salesforce Connector**
>
> * OPENICF-1812: SalesForce Connector: syncFailureHandler maxRetries is not working

> **Collapse: SAP S/4HANA Connector**
>
> Initial release of the SAP S/4HANA connector. Refer to [SAP S/4HANA connector](../connector-reference/sap-hana.html) for more information.
>
> * OPENICF-1782: SAP Hana Connector

> **Collapse: ScriptedSQL Connector**
>
> No public changes were made specific to this connector, though a new version was released.

## 1.5.20.6 Connectors

> **Collapse: Cerner Connector**
>
> Initial release of the Cerner connector. Refer to [Cerner connector](../connector-reference/cerner.html) for more information.
>
> * OPENICF-1737: Cerner Connector

> **Collapse: Epic Connector**
>
> * OPENICF-1818: Epic V2 Connector
>
> * OPENICF-1878: Epic Connector: Query filter not matching uid returns HTTP 404

> **Collapse: Google Apps Connector**
>
> * OPENICF-1181: Google Apps Connector: Unable to delete custom attributes

> **Collapse: LDAP Connector**
>
> * OPENICF-1901: LDAP Connector: Reduce JVM garbage from ConnectorObjectBuilder and AttributeBuilder

> **Collapse: MongoDB Connector**
>
> * OPENICF-1833: Update MongoDB driver to the latest for compatibility with newer versions of MongoDB

## 1.5.20.5 Connectors

> **Collapse: Adobe Marketing Cloud Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Database Table Connector**
>
> * OPENICF-1711: Database Table Connector - ORA-22816 error when using Oracle trigger

> **Collapse: Epic Connector**
>
> Initial release of the Epic connector. Refer to [Epic connector](../connector-reference/epic.html) for more information.
>
> * OPENICF-1750: Epic Connector

> **Collapse: Google Apps Connector**
>
> * OPENICF-1808: Google Apps Connector: when user is provisioned using a role assignment, group isn't set correctly

> **Collapse: LDAP Connector**
>
> * OPENICF-1859: LDAP Connector: \_memberId is not returned with AD & liveSync if attribute range is used

> **Collapse: Marketo Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Salesforce Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: SCIM Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Scripted REST Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Scripted SQL Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: SAP SuccessFactors Connector**
>
> * OPENICF-1822: SuccessFactors should not require PEM formatted file on disk

## 1.5.20.4 Connectors

> **Collapse: Google Apps Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Microsoft Graph API Connector**
>
> No public changes were made specific to this connector, though a new version was released.

## 1.5.20.3 Connectors

> **Collapse: Database Table Connector**
>
> * OPENICF-1692: Database Table Connector: throwing a null pointer exception

> **Collapse: Google Apps Connector**
>
> * OPENICF-1716: Google Apps Connector: Add recoveryEmail and recoveryPhone attributes for User

> **Collapse: LDAP Connector**
>
> * OPENICF-1731: LDAP Connector: Escape characters (\\) not properly handled on delete and updates ops

> **Collapse: Scripted SQL Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: ServiceNow Connector**
>
> No public changes were made specific to this connector, though a new version was released.

> **Collapse: Workday Connector**
>
> No public changes were made specific to this connector, though a new version was released.

## 1.5.20.2 Connectors

> **Collapse: CSV File Connector**
>
> * OPENICF-1677: CSV Connector returns pagedResultsCookie for queries with \_pageSize=0.

> **Collapse: LDAP Connector**
>
> * OPENICF-1666: LDAP Connector: ldapGroups should restrict membership to the specified contexts.

> **Collapse: Microsoft Graph API Connector**
>
> * OPENICF-1656: MS Graph API Connector: Unable to update onPremisesExtensionAttributes.
>
> * OPENICF-1687: MS Graph API Connector: Should be able to work behind an HTTP Proxy.
>
> * OPENICF-1698: MS Graph API Connector: get the cause of exception if test() fails.

> **Collapse: Workday Connector**
>
> * OPENICF-1689: Workday Connector: Workers transaction logs are filtered.
>
> * OPENICF-1691: Workday Connector: Reduce Garbage collection when building connector objects.

## 1.5.20.1 Connectors

|   |                                                                                                   |
| - | ------------------------------------------------------------------------------------------------- |
|   | 1.5.20.1 is a limited release, where only the Database Table Connector was released to Backstage. |

> **Collapse: Database Table Connector**
>
> * OPENICF-1477: Database Table Connector: ORA-01000: maximum open cursors exceeded
>
> * OPENICF-1596: PSQLException: FATAL: terminating connection due to idle-in-transaction timeout

## 1.5.20.0 Connectors

> **Collapse: Generic LDAP Connector**
>
> * OPENICF-1560: LDAP Connector: RFE Disable Paged Results Control
>
> * OPENICF-1586: LDAP Connector: Timestamp sync strategy: Synchronization filters are not used properly

> **Collapse: MongoDB Connector**
>
> * OPENICF-1553: MongoDB Connector: convertBSONtoICF() does not traverse Arrays.

> **Collapse: Microsoft Graph API Connector**
>
> * OPENICF-1538: MS Graph API Connector: Sync() does not work
>
> * OPENICF-1541: MS Graph API Connector: Add ConsistencyLevel: eventual' header and $count=true for endsWith filter
>
> * OPENICF-1557: MS Graph API Connector: Handle user employeeHireDate attribute and Calendar data type
>
> * OPENICF-1558: MS Graph API Connector: Make sure sortKey is supported by the objectClass
>
> * OPENICF-1559: MS Graph API Connector: Implement Authenticate() call
>
> * OPENICF-1595: MS Graph API Connector: test() should connect to the MS Graph endpoint to validate the connectionThe following known issues will be addressed in a later release:
>
> * OPENICF-1614: MS Graph API Connector: Livesync on user/group does not populate membership
>
> * OPENICF-1615: MS Graph API Connector: Deleting Azure AD group works but throws HTTP 500

> **Collapse: SCIM Connector**
>
> * OPENICF-1589: SCIM Connector: NPE caused by exception not properly handled
>
> * OPENICF-1591: SCIM Connector: Parsing OAuth response should not fail on unknown properties
>
> * OPENICF-1598: SCIM Connector: NPE when updating attribute with null value
>
> * OPENICF-1600: SCIM Connector: unknown attributes in a query result should not throw parsing exception
>
> * OPENICF-1601: SCIM Connector: Implement a global connection timeout property

## 1.5.19.6 Connectors

No issues specific any connectors were addressed in this release.

## 1.5.19.5 Connectors

> **Collapse: CSV File Connector**
>
> * OPENICF-1530: system?\_action=createFullConfig validation does not return consistent errors

> **Collapse: Database Table Connector**
>
> * OPENICF-1510: Errors in Database Table Connector docs

> **Collapse: Groovy connector toolkit**
>
> * OPENICF-1523: ScriptedGroovy connectors fail to load in IDM 7.x when embedded Groovy version does not match IDM Groovy version

> **Collapse: Microsoft Graph API Connector**
>
> * OPENICF-1493: MS Graph API Connector: add the ability to read/assign license for the user
>
> * OPENICF-1499: MS Graph API Connector: remove the maximumConnections property
>
> * OPENICF-1507: MS Graph API Connector: add the ability to read subscribedSku object
>
> * OPENICF-1525: MS Graph API Connector: replace the default Graph SDK logger
>
> * OPENICF-1526: MS Graph API Connector: add the ability to read Team objects

> **Collapse: Salesforce Connector**
>
> * OPENICF-1522: Salesforce Connector : implement StatefulConfiguration to allow persistence of accessToken in memory

> **Collapse: SCIM Connector**
>
> * OPENICF-1518: SCIM connector: Http client ConnectionManager is not set properly

> **Collapse: Workday Connector**
>
> * OPENICF-1504: Workday Connector: SyncToken should be updated even if no events
>
> * OPENICF-1506: Workday Connector: SyncToken should be set to tenant timestamp after call to sync()
>
> * OPENICF-1508: Workday Connector: Query on SCR objects should not include date range as a search criteria

## 1.5.19.4 Connectors

No issues specific any connectors were addressed in this release.

## 1.5.19.3 Connectors

> **Collapse: Microsoft Graph API Connector**
>
> * OPENICF-1475: MS Graph API Connector: the 'manager' only returns the id and not the full object
>
> * OPENICF-1481: MS Graph API Connector: add the ability to assign/remove user's manager
>
> * OPENICF-1483: MS Graph API Connector: can't remove all groups a user belongs to

> **Collapse: Salesforce Connector**
>
> * OPENICF-1471: SalesForce Connector: should not implement PoolableConnector interface

## 1.5.19.2 Connectors

> **Collapse: Generic LDAP Connector**
>
> * OPENICF-1448: LDAP Connector: Enabling changelog livesync for oracle unified directory (OUD)
>
> * OPENICF-1466: LDAP Connector: Update filterWithOrInsteadOfAnd to apply to timestamp and Active Directory liveSync
>
> * OPENICF-1470: LDAP Connector: Null Check in ADUserAccounControl.addControl
>
> * OPENICF-1472: LDAP Connector: Data not synced from AD to IDM via livesync on \_\_ALL\_\_ object

> **Collapse: Microsoft Graph API Connector**
>
> * OPENICF-1469: MS Graph API Connector: implement a read/write rate limiter

> **Collapse: SCIM Connector**
>
> * OPENICF-1401: SCIM Connector: Align exceptions for not configured (blank/null) configurationProperties

## 1.5.19.1 Connectors

> **Collapse: Microsoft Graph API Connector**
>
> * OPENICF-1446: MS Graph API Connector: implement PoolableConnector

> **Collapse: Salesforce Connector**
>
> * OPENICF-1352: Salesforce connector: pagination and cookies not working properly

> **Collapse: SCIM Connector**
>
> * OPENICF-1444: SCIM connector - provide support for 'scope'

> **Collapse: SSH Connector**
>
> * OPENICF-1433: SSH connector: Kerberos username prompt for public key and password auth
>
> * OPENICF-1445: SSH connector: Stale or disconnected SSH sessions are not detected when borrowing from the pool

> **Collapse: Workday Connector**
>
> * OPENICF-1383: Workday Connector: Upgrade to API v35.0
>
> * OPENICF-1419: Workday Connector: Implement Service Center Representative object type
>
> * OPENICF-1426: Workday Connector: Ability to update email for Service Center Representative object
>
> * OPENICF-1432: Workday Connector: Implement OR filter
>
> * OPENICF-1447: Workday Connector: add the Contingent\_Worker\_ID as a search criteria

## 1.5.19.0 Connectors

|   |                                                                                                                                                          |
| - | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Starting in version 1.5.19.0, ICF connectors that previously had external library dependencies now have those dependencies bundled inside the connector. |

Initial release of the MS Graph API Connector.

> **Collapse: Generic LDAP Connector**
>
> * OPENICF-1388: LDAP Connector 1.5.5.0 throws java.lang.NoSuchMethodError on Java 8
>
> * OPENICF-1396: OPENIDM-15448 changes seemingly broke querying ldap via the data tab

> **Collapse: Groovy connector toolkit**
>
> * OPENICF-1414: Scripted Groovy (v3) based connectors fail to load with IDM releases prior to 7.0

## 1.5.18.0 Connectors

|   |                                                                                                                               |
| - | ----------------------------------------------------------------------------------------------------------------------------- |
|   | Starting in version 1.5.18.0, the ICF Connector Framework and all connectors bundled with IDM share a unified version number. |

No issues specific any connectors were addressed in this release.
