--- title: New features description: New features introduced in PingIDM 7.5.x, including maintenance releases, array comparison, Jetty 12, secret rotation, and workflow engine upgrades component: pingidm version: 7.5 page_id: pingidm:release-notes:whats-new canonical_url: https://docs.pingidentity.com/pingidm/8.1/release-notes/whats-new.html llms_txt: https://docs.pingidentity.com/pingidm/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md keywords: ["Deployment", "Identities", "Compatibility", "Security"] superseded_by: https://docs.pingidentity.com/pingidm/8.1/release-notes/whats-new.html section_ids: maintenance-releases: Maintenance releases wn-related-releases: Related component releases wn-ad-pw-plugin-180: AD password synchronization plugin 1.8.0 idm_7_5_4: IDM 7.5.4 idm_7_5_3: IDM 7.5.3 wn-quartz-scheduler252-753: Quartz Scheduler upgraded to 2.5.2 wn-user-agent-property-753: openidm.http.client.userAgent property idm_7_5_2: IDM 7.5.2 improved_task_scanner_exception_handling: Improved task scanner exception handling idm_7_5_1: IDM 7.5.1 wn-parameter-authorization-751: _api parameter requires authorization secure_rcs_access: Secure RCS access new-array-comparison-751: Array comparison jetty-12-support-751: Jetty 12 support idm_7_5_0: IDM 7.5.0 connectors: Connectors whats-new-international-email: International email addresses custom-relationships: Custom relationship properties secret-rotation: Store credentials as secrets secret-versioning: Version file system secrets enhanced-signal-propagation: Enhanced signal propagation whats-new-flowable-upgrade-680-75: Workflow engine upgrade connect_to_ds_with_scriptedrest_sample_supports_client_credentials_grant_type: Connect to DS with ScriptedREST sample supports client_credentials grant type end_user_ui_supports_array_properties: End User UI supports array properties security-advisories: Security advisories --- # New features This release of PingIDM software includes the following new features: ## Maintenance releases Ping Identity maintenance releases contain a collection of fixes and minor enhancements grouped together and released as part of our commitment to support our customers. IDM 7.5.4 is the latest release targeted for IDM 7.5 deployments and can be downloaded from the [Backstage Download Center](https://backstage.pingidentity.com/downloads/browse/idm/latest). | | | | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | You can deploy the release as an initial deployment or as an update from an existing 7.5.x deployment. Learn more about updating from 7.5.x in [Update to a maintenance release](../upgrade-guide/update-maintenance-release.html). | ## Related component releases The following component, distributed separately from IDM, has a new version available: ### AD password synchronization plugin 1.8.0 [AD password synchronization plugin 1.8.0](https://product-downloads.pingidentity.com/browse/idm/featured/get/familyId:idm/productId:idm-password-sync-plugins/minorVersion:1.8/version:1.8.0/releaseType:full/distribution:exe) is available as a separate download from the [Backstage download site](https://backstage.pingidentity.com/downloads). This release fixes an issue that could cause the domain controller to restart unexpectedly during consecutive password changes. Learn more about the [AD password synchronization plugin](../pwd-plugin-guide/install-ad-pwd-sync.html). ## IDM 7.5.4 This release includes updates to dependency libraries, bundled ICF connectors and framework, fixes for security vulnerabilities, and other improvements. ## IDM 7.5.3 ### Quartz Scheduler upgraded to 2.5.2 The embedded Quartz Scheduler has been upgraded from version 2.3.2 to 2.5.2. This upgrade doesn't require any configuration change. ### `openidm.http.client.userAgent` property The `openidm.http.client.userAgent` property lets you customize the `User-Agent` header sent with [HTTP client](../setup-guide/http-client-config.html#new-user-agent-property) requests. If not specified, the default `"PingIdentity"` value is used. Request-level headers take precedence over both the IDM configuration and the default value. Learn more in [External REST configuration properties](../external-services-guide/external-rest.html#external-rest-properties-user-agent). ## IDM 7.5.2 This release includes updates to ICF connectors, updates to dependency libraries, bug fixes, and the following feature: ### Improved task scanner exception handling If the task scanner encounters a task that results in an exception, it now aborts only that task and continues processing the remaining tasks. Previously, the scanner would abort the entire process when any task caused an exception. ## IDM 7.5.1 ### `_api` parameter requires authorization Requests passing the `_api` parameter now require authorization. Learn more in [Common REST](../crest/about-crest.html#api-authorize-example). ### Secure RCS access You can create stricter RCS authorization and access rules. To enable authorization for RCS, add an appropriate role to the static-user mapping used for the RCS subject and write the appropriate access rules to permit this role to be granted access to the `openicf` servlet on the path (pattern) corresponding to the RCS name used in the RCS configuration. Learn more in [Secure RCS access](../auth-guide/authorization-and-roles.html#secure-openicf-access). ### Array comparison You can choose how synchronization detects managed object array changes using *unordered* or *ordered* comparison using the configuration property `comparison` in the schema. Unordered JSON array comparison ignores the order of elements and can negate the need for certain custom scripts within mappings. Learn more about [managed object schema properties](../objects-guide/appendix-managed-objects.html#managed-object-property-config-properties) and [array comparison](../synchronization-guide/chap-implicit-live-sync.html#array-comparison). ### Jetty 12 support The embedded Jetty web server supports Jetty 12. ## IDM 7.5.0 ### Connectors Connectors continue to be updated and released outside of IDM. To stay up-to-date with new features and versions, check out the [ICF Release notes](https://docs.pingidentity.com/openicf/connector-release-notes/preface.html). Although not bundled in this release of IDM, the two newest connectors are available to download from [Backstage](https://backstage.pingidentity.com/downloads/): * [PingOne connector documentation](https://docs.pingidentity.com/openicf/connector-reference/pingone.html) * [Webex connector documentation](https://docs.pingidentity.com/openicf/connector-reference/webex.html) ### International email addresses IDM now supports [international email addresses](https://en.wikipedia.org/wiki/International_email). This feature is only available for supporting SMTP providers. For more information, refer to [International email addresses](../external-services-guide/email.html#international-email-address). ### Custom relationship properties You can create custom relationship properties in the [admin UI](../objects-guide/relationships-custom.html) or with the [REST API](../rest-api-reference/endpoints/rest-schema.html). ### Store credentials as secrets You can store credentials for a number of services as secrets. The supported services include: * [DS using mTLS](../install-guide/external-ds.html#secret-rotation-mtls) * [rsFilter](../security-guide/secret-stores.html#secret-rotation-rsfilter) * [Email service](../security-guide/secret-stores.html#secret-rotation-email) * [Connectors with encrypted credentials](../security-guide/secret-stores.html#secret-rotation-connectors) For more information, refer to [Secret stores](../security-guide/secret-stores.html). ### Version file system secrets You can have multiple versions of secrets stored in a file system secret store. For more information, refer to [Filesystem secret stores](../security-guide/secret-stores-filesystem.html). ### Enhanced signal propagation Managed objects can now receive relationship graph topology change signals through the `SignalPropagationCalculator` class that is active by default. Learn more in [Enhanced signal propagation](../objects-guide/managed-object-virtual-properties.html#virtual-properties-enhanced-signal-propagation). ### Workflow engine upgrade The Flowable embedded workflow engine has been upgraded to [version 6.8.0](https://github.com/flowable/flowable-engine/releases/tag/flowable-6.8.0). If you are upgrading from a previous version of IDM and use workflow, this upgrade requires one or more incremental upgrade scripts. For more information, refer to [Upgrade an existing repository](../upgrade-guide/update-repo.html#upgrade-existing-repository). ### [Connect to DS with ScriptedREST](../samples-guide/scripted-rest-with-dj.html) sample supports `client_credentials` grant type The customizer script for the [Connect to DS with ScriptedREST](../samples-guide/scripted-rest-with-dj.html) sample now includes OAuth capabilities for the `client_credentials` grant type. ### End User UI supports array properties Array properties now display in the End User UI. ## Security advisories Ping Identity issues security advisories in collaboration with our customers to address any security vulnerabilities transparently and rapidly. Ping Identity's security advisory policy governs the process on how security issues are submitted, received, and evaluated as well as the timeline for the issuance of security advisories and patches. Learn how to find security advisories in the Ping Identity [support portal](https://support.pingidentity.com/s/article/Support-Portal-Guide#SecurityAdvisories) (requires sign-on).