PingIDM

Fixed issues

IDM 7.5.3

The following highlighted bugs were fixed in this release:

  • OPENIDM-20345: alpha_application managed objects no longer create a relationship for a valid property when an incorrect property is provided.

  • OPENIDM-21106: Fixed a task scanner failure on DB2 explicit tables caused by varchar(29) column type handling.

  • OPENIDM-21493: Clustered reconciliation now terminates correctly when the connector becomes unavailable.

  • OPENIDM-21776: Fixed intermittent "Connection is closed" errors when reconciling large datasets between tenants using the IDM external proxy.

  • OPENIDM-21967: By default, the User-Agent header is now PingIdentity. This can be overridden in IDM using the openidm.http.client.userAgent property (for example, in resolver/boot.properties). If a User-Agent header is present in the request, the request-level header takes precedence over both the IDM configuration and the default value.

  • OPENIDM-22101: Fixed an issue where the Jetty servlet WebSocket idleTimeout was set with an incorrect duration.

  • OPENIDM-22522: Fixed a user enumeration vulnerability in the managed object ?_action=patch endpoint that did not enforce authorization before evaluating query filters. Query authorization on the target resource collection is now required and is granted through access rules or delegated admin rules.

IDM 7.5.2

The following highlighted bugs were fixed in this release:

  • OPENIDM-20533: OpenICF Provisioner Service activation fails if connector validate operation timeout occurs.

  • OPENIDM-21421: Prevent IllegalStateException when updating provisioner config for inactive provisioners.

  • OPENIDM-21454: Every failed record in a liveSync is stored in the dead-letter-queue with a unique entry ID.

IDM 7.5.1

The following highlighted bugs were fixed in this release:

  • OPENIDM-18495: Connector Data tab is sending a queryFilter with bad sortKeys

  • OPENIDM-19829: Time spent in authentication service is not included in access audit elapsed time

  • OPENIDM-19918: Order-agnostic comparison of array fields in sync must be optional

  • OPENIDM-20063: Syncing ldap object containing // does not work

  • OPENIDM-20142: Permanent failure caused by transient connector validation failure during provisioner service activation

  • OPENIDM-20238: Clustered reconciliation may fail with Expecting a Map or List under certain circumstances

  • OPENIDM-20337: Provisioner createCoreConfig action should omit poolConfigOption properties for non-poolable connectors

IDM 7.5.0

The following important bugs were fixed in this release:

  • OPENIDM-18484: apiVersion config uses onPrem resource paths for idcloud

  • OPENIDM-18820: Prefetch links query should be paged

  • OPENIDM-19130: fr-idm-secondid is not being picked up during migration from 6.5.0.4

  • OPENIDM-19272: Failure to cleanup orphaned recon progress state can cause the RepoReconProgressStatePersistence class to not initialize

  • OPENIDM-19405: Special characters (non-ASCII) inside of emails being sent from IDM/Identity Cloud fail

  • OPENIDM-19411: Recovery of queued sync events at startup does not use paged queries

  • OPENIDM-19427: Workforce JIT NAO reconById runs target phase

  • OPENIDM-19467: Transformation script compile error in one mapping breaks another mapping

  • OPENIDM-19498: Assignment Attribute encryption not handled correctly during provisioning

  • OPENIDM-19557: Data tab in csv sample sometimes malfunctioning

  • OPENIDM-19606: Microsoft social provider authentication failed

  • OPENIDM-19646: Prevent modification of relationships for non-managed objects, specified in a request’s resource path.

  • OPENIDM-19647: Highlander theme showing wrong logo on sign in page preview

  • OPENIDM-19659: Relationships selected as 'required' do not persist as required.

  • OPENIDM-19666: Admin UI should not inject domain configuration property within Connector config for GoogleApps/Salesforce

  • OPENIDM-19675: NPE when reversePropertyName changes and resource collection is new

  • OPENIDM-19676: Schema id is not updated after a change to the reverse property name

  • OPENIDM-19681: A read to schema which ends with "properties" should receive a BadRequest Exception

  • OPENIDM-19690: Account for role override assignments

  • OPENIDM-19710: 2024 - Incorrect copyright years in admin UI - 2010-2024

  • OPENIDM-19755: GoogleApps Connector: update sample to reflect replacement of SECONDARY_EMAIL by SECONDARY_EMAILS

  • OPENIDM-19874: Feature endpoint doesn’t reflect password/timestamps installed

  • OPENIDM-19879: Query additional recon source/target pages whenever a paging cookie is returned irrespective of whether paging is enabled

  • OPENIDM-19920: Add the WebEx Connector to the CDK and IDC Docker images

  • OPENIDM-19941: Server Error when retrieving relationships of an object with delegated privileges