--- title: Fixed issues description: Fixed issues resolved in PingIDM 7.5.x releases, including bug fixes for provisioning, reconciliation, sync, and the admin UI component: pingidm version: 7.5 page_id: pingidm:release-notes:fixes canonical_url: https://docs.pingidentity.com/pingidm/8.1/release-notes/fixes.html llms_txt: https://docs.pingidentity.com/pingidm/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md keywords: ["Deployment", "Identities", "Compatibility", "Security"] superseded_by: https://docs.pingidentity.com/pingidm/8.1/release-notes/fixes.html section_ids: idm_7_5_4: IDM 7.5.4 idm_7_5_3: IDM 7.5.3 idm_7_5_2: IDM 7.5.2 idm_7_5_1: IDM 7.5.1 idm_7_5_0: IDM 7.5.0 --- # Fixed issues Releases can include updates to dependency libraries, bundled ICF connectors and framework, fixes for security vulnerabilities, and other improvements. ## IDM 7.5.4 Highlighted fixes: * OPENIDM-17808: Delegated admins can now view their own relationship properties, such as their manager, in the End User UI. * OPENIDM-22562: Fixed an unbounded `TypeHandlerService` route handler cache. ## IDM 7.5.3 Highlighted fixes: * OPENIDM-20345: `alpha_application` managed objects no longer create a relationship for a valid property when an incorrect property is provided. * OPENIDM-21106: Fixed a task scanner failure on DB2 explicit tables caused by `varchar(29)` column type handling. * OPENIDM-21493: Clustered reconciliation now terminates correctly when the connector becomes unavailable. * OPENIDM-21776: Fixed intermittent "Connection is closed" errors when reconciling large datasets between tenants using the IDM external proxy. * OPENIDM-21967: By default, the User-Agent header is now `PingIdentity`. This can be overridden in IDM using the `openidm.http.client.userAgent` property (for example, in `resolver/boot.properties`). If a User-Agent header is present in the request, the request-level header takes precedence over both the IDM configuration and the default value. * OPENIDM-22101: Fixed an issue where the Jetty servlet WebSocket `idleTimeout` was set with an incorrect duration. * OPENIDM-22522: Fixed a user enumeration vulnerability in the managed object `?_action=patch` endpoint that did not enforce authorization before evaluating query filters. Query authorization on the target resource collection is now required and is granted through access rules or delegated admin rules. ## IDM 7.5.2 Highlighted fixes: * OPENIDM-20533: OpenICF Provisioner Service activation fails if connector validate operation timeout occurs. * OPENIDM-21421: Prevent `IllegalStateException` when updating provisioner config for inactive provisioners. * OPENIDM-21454: Every failed record in a liveSync is stored in the dead-letter-queue with a unique entry ID. ## IDM 7.5.1 Highlighted fixes: * OPENIDM-18495: Connector Data tab is sending a `queryFilter` with bad sortKeys * OPENIDM-19829: Time spent in authentication service is not included in access audit elapsed time * OPENIDM-19918: Order-agnostic comparison of array fields in sync must be optional * OPENIDM-20063: Syncing ldap object containing `//` does not work * OPENIDM-20142: Permanent failure caused by transient connector validation failure during provisioner service activation * OPENIDM-20238: Clustered reconciliation may fail with `Expecting a Map or List` under certain circumstances * OPENIDM-20337: Provisioner `createCoreConfig` action should omit `poolConfigOption` properties for non-poolable connectors ## IDM 7.5.0 The following important bugs were fixed in this release: * OPENIDM-18484: apiVersion config uses onPrem resource paths for idcloud * OPENIDM-18820: Prefetch links query should be paged * OPENIDM-19130: fr-idm-secondid is not being picked up during migration from 6.5.0.4 * OPENIDM-19272: Failure to cleanup orphaned recon progress state can cause the RepoReconProgressStatePersistence class to not initialize * OPENIDM-19405: Special characters (non-ASCII) inside of emails being sent from IDM/Identity Cloud fail * OPENIDM-19411: Recovery of queued sync events at startup does not use paged queries * OPENIDM-19427: Workforce JIT NAO reconById runs target phase * OPENIDM-19467: Transformation script compile error in one mapping breaks another mapping * OPENIDM-19498: Assignment Attribute encryption not handled correctly during provisioning * OPENIDM-19557: Data tab in csv sample sometimes malfunctioning * OPENIDM-19606: Microsoft social provider authentication failed * OPENIDM-19646: Prevent modification of relationships for non-managed objects, specified in a request's resource path. * OPENIDM-19647: Highlander theme showing wrong logo on sign in page preview * OPENIDM-19659: Relationships selected as 'required' do not persist as required. * OPENIDM-19666: Admin UI should not inject domain configuration property within Connector config for GoogleApps/Salesforce * OPENIDM-19675: NPE when reversePropertyName changes and resource collection is new * OPENIDM-19676: Schema id is not updated after a change to the reverse property name * OPENIDM-19681: A read to schema which ends with "properties" should receive a BadRequest Exception * OPENIDM-19690: Account for role override assignments * OPENIDM-19710: 2024 - Incorrect copyright years in admin UI - 2010-2024 * OPENIDM-19755: GoogleApps Connector: update sample to reflect replacement of *SECONDARY_EMAIL* by *SECONDARY_EMAILS* * OPENIDM-19874: Feature endpoint doesn't reflect password/timestamps installed * OPENIDM-19879: Query additional recon source/target pages whenever a paging cookie is returned irrespective of whether paging is enabled * OPENIDM-19920: Add the WebEx Connector to the CDK and IDC Docker images * OPENIDM-19941: Server Error when retrieving relationships of an object with delegated privileges