All Announcements

v7.0.1864

Service Release

New Features

11

Password Reset Dashboard

Password Reset module of NIM provides a multitude of possibilities but it's prime function is Account recovery via password reset. Previously SSRPM provide a landing page for multiple options (Enroll, Reset Password, Unlock, Manage Attributes, Lookup Username) NIM should provide an option to have a landing page that can provide options for different Password Reset profiles (e.g. Reset Password, Unlock Only). This provides a simple point of entry. Expansion on this is to allow only certain hostnames to be allowed. For example if my nim host name is "nim.domain.com", I maybe want to have password reset point to "reset.domain.com". This would mean then if I go to "reset.domain.com" I would land on the dashboard page to select my option.

Mike Sheldon
Released 🚀

1

17

Workflows

A proposed enhancement to the product is the introduction of workflows, allowing requests to be reviewed and approved by designated reviewers before proceeding. This would be particularly beneficial in scenarios such as application access requests or provisioning processes, ensuring oversight and compliance. How Workflows Would Improve the Product Approval Mechanism – When a user submits a request (e.g., access to an application or a provisioning action), it enters a workflow where assigned reviewers must approve or reject it before execution. Role-Based Reviewers – Approval requests could be routed to specific individuals based on their roles (e.g., managers, security officers, or compliance teams). Multi-Step Approvals – Workflows could support multi-tiered approvals where different stakeholders must review a request at various stages. Audit and Compliance – Each approval or rejection would be logged, providing a clear audit trail for governance and regulatory requirements. Example Use Case A user requests access to an HR application. Instead of immediate access, the request follows this workflow: Step 1: The user's manager reviews and approves the request.Step 2: If approved, the HR department reviews and grants final approval.Step 3: Upon approval, the provisioning process assigns the necessary permissions automatically. By incorporating workflows, the product enhances security, ensures compliance, and streamlines access management while preventing unauthorized changes.

Mike Sheldon
Released 🚀

2

  • Apps - Show the selected basic or composed item
  • Apps - Form and table builder
  • SFTP - Support for host validation
  • AI - Added MCP plugins and improved the performance of the MCP server

IMPROVEMENTS AND FIXES

  • AI - Sessions are validated on every request
  • Apps - Designer can't open app after library change when one of its composed items was created from a row padded with placeholder
  • Audit Log - Object Display Name is not getting updated when changed
  • Authentication - Basic authentication disallows users with saml or ldap authentication methods set
  • Certificates - Improved importing of various certificate chains
  • Filters - Session variables can now be used as default data type for filter parameter
  • Lookup Tables - Renaming could cause other tables to be unchecked in Internal System
  • Onboarding - Profile name not longer case sensitive.
  • REST - Support parallel page retrieval when the number of pages Is known
  • REST - Query params duplicating on next-url paging
  • REST - Not retrieving all pages with some last page detection mechanisms
  • REST - OAuth connector callback has now CSRF/state protection
  • REST - "extraHeaders" can now override the Accept header.
  • SAML - When logging in a check is performed that the IDP is the one bound to the user
  • SAML - XML injection in AttributeValue lets a user inject extra signed attributes
  • Scheduler - Mail server no longer causes job to stop on error
  • Scheduler - "Stop on Error" no longer gets checked on upgrade
  • Service - Improved CSP protection
  • Service - JavaScript now executes in strict mode by default
  • Service - Gated the log socket and improved socket security
  • Service - Updated nim script compiler settings to support development environment
  • Settings - Uploading images in the preferences page in Edge/Chrome works now
  • Settings - Uploading files bigger as the limit will not log you out anymore
  • Templates - Keep inserted NIM variables inside the surrounding formatting
  • Templates - Sort NIM variable and NIM table insert menus alphabetically
  • Templates - Insert/edit link - Remove useless "Open in new tab" option
  • Variables - Incorrect type (string) of session variable sessionUserID
  • UI - Grid header menus missing and copy functionality in grids was broken.

KNOWN ISSUES

  • N/A

DOCUMENTATION

Add a comment

Comments