Regular channel changelog

IAM-9603: The Combined MFA Registration, OATH Registration, and Push Registration nodes now include an option to render QR codes without using JavaScript.

IAM-10200: Improved accessibility across the admin console by ensuring that expandable and collapsible menu controls expose their state to screen readers and other assistive technologies.

IAM-10682: The admin console left menu has been reorganized into logical, collapsible groups, making features easier to find and aligning labels with current terminology.

IAM-11617: The v2.0 Choice Collector node now lets you make choice callbacks with dynamically generated options that render as radio-button groups instead of drop-down lists, while existing drop-down behavior remains unchanged.

IGA-4652^[1]: IGA now enforces the required request justification setting consistently across lifecycle management, request extension, and entitlement-grant requests.

IGA-4688^[1]: IGA now lets you delete certificate templates using the UI.

IGA-4702^[1]: IGA now lets you change the campaign title and owner when a campaign is launched.

IGA-4716^[1]: IGA role request forms now display current role membership as read-only, and each member addition or removal in the role lifecycle management screen is submitted as an individual grant or removal request.

IGA-4741^[1]: IGA activity and notification monitoring is now generally available, with improved event type filtering and audit log presentation.

IGA-4446^[1]: IGA correlation rules for unmanaged applications let administrators link aggregated accounts to identities during account aggregation.

IGA-4254^[1]: IGA identity profile certification enables reviewers to certify identity records, including external users and AI agents, rather than access alone.

IGA-4255^[1]: IGA role composition certification enables reviewers to certify role definitions, including attributes, glossary data, entitlements, applications, and membership rules.

IGA-4582^[1]: IGA certification review views let reviewers examine identity-profile and role-composition items in dedicated task views and make decisions.

IGA-4794^[1]: Approval tasks can now be created when expiration is configured with a workflow variable.

OPENAM-28098: The v2.0 CAPTCHA node adds support for Friendly Captcha, a privacy-focused CAPTCHA provider.

OPENIDM-21472: You can now update a managed user even when the change conflicts with generated attribute values. The update propagates to all associated workforce application accounts during queued synchronization.

OPENIDM-21711: The external REST service now has a default user agent of PingIdentity for outbound requests. This can be overridden by setting the userAgent property for external REST service requests.

OPENIDM-21726^[2]: You can now set the pooledConnectionTtl property for the external REST service to expire pooled HTTP connections after a specified time in milliseconds. This prevents request failures caused by stale connections.

OPENIDM-22745: All connectors included with Advanced Identity Cloud were upgraded to version 1.5.20.36. Learn more in 1.5.20.36 Connector changes.

OPENIDM-22871: The IDM native admin console is now deprecated, and displays a deprecation warning banner.

FRAAS-34254: Fixed an issue where large configuration files were truncated during promotion, corrupting configuration in both environments.

IAM-6646: Fixed an issue that prevented navigating back in the journey import modal.

IAM-9753: Restored the missing Jobs option in the platform UI for tenants without workforce enablement, and the Schedule Jobs option in the IDM admin UI.

IAM-10010: Fixed an issue that prevented hosted pages theme colors from applying to alert pop-ups.

IAM-10781: Fixed an issue where the Use Secret Store for secrets checkbox did not persist for legacy applications.

IAM-10974: Fixed an issue where the rollback button was missing from the promotion history page.

IAM-11118: Fixed an issue where the number of OAuth 2.0 clients displayed incorrectly in the OAuth2 Clients modal.

IAM-11201^[1]: Fixed an issue with icon size and appearance in dark mode in the IGA New Event dialog.

IAM-11679: Fixed an issue where the Debug menu item in the journey editor was not dimmed when disabled.

IAM-11803: Fixed an issue with inconsistent padding and height in select and multiselect fields.

IAM-11835: Fixed an issue with unexpected behavior in the multiselect box when inviting tenant administrators.

IGA-4700^[1]: IGA role entitlement selection now omits disconnected entitlements from unmanaged applications, so administrators see only available entitlements.

IGA-4745^[1]: Fixed an issue that prevented saving changes to the details of an unmanaged application.

IGA-4764^[1]: Fixed an issue that prevented saving glossary data for disconnected applications.

IGA-4772^[1]: Fixed an issue where the revoke-from-role modal operated on the wrong table when multiple IGA resource tables were on the same page.

OPENIDM-20345: Advanced Identity Cloud now rejects relationship creation requests that use a property that does not accept the referenced object type, instead of silently creating the relationship through a different valid property.

OPENIDM-21675: Fixed an issue that caused an error when configuring an empty server list for remote connector client groups.

OPENIDM-21724: Fixed an issue that could cause an exception when restarting identity management services under specific conditions.

OPENIDM-22101: Advanced Identity Cloud now applies the configured WebSocket idle timeout correctly for ICF servlet connections, with a default timeout of 5 minutes.

OPENIDM-22102: Fixed an issue where an RCS connection didn’t recover after a network interruption and required an RCS restart.

OPENIDM-22157: Fixed an issue that caused reconciliation to fail when correlation queries used numeric values.

OPENIDM-22399: Fixed an issue where system configuration overwrote existing authentication configuration after an upgrade.

OPENIDM-22562: Fixed an issue that caused excessive memory use and potential heap exhaustion under high load.