IM 5.4.0 WEB – Release Notes

Release of IM WEB 5.4.0

December 10th 2019

PhenixID Identity Manager 5.4.0 improves the stability, compatibility and security of your solution, and is recommended for all installations.

1. Support for LOG4J2

Apache Log4j 2 is an upgrade to Log4j that provides significant improvements over its predecessor, Log4j 1.x.
For more information, please read on the Apache web site:
Apache Log4j 2 update information

With 5.4.0, IM will do all logging with Log4J2 instead och Log4J. IM will still support log4j version 1 for some time but eventually log4j version 1 support will be removed.

During an upgrade from previous version of IM the log4j2.xml will be added to the drive:\..\PhenixID\IM\customer\extension\class folder. File is only added if it does NOT already exist.

For more information about logging in IM 5.4.0, please read PSD1135.

2. Audit logging format changed to CEF

Common Event Format (CEF) is an open log management standard that improves the interoperability of security-related information from different security and network devices and applications. CEF enables customers to use a common event log format so that data can easily be collected and aggregated for analysis by an enterprise management system.

With 5.4.0 the audit log format will be Common Event Format (CEF).

Note: If you have an existing IM solution and have used a custom audit logger you must test this release carefully so your logging works as intended.

For more information about audit logging in IM 5.4.0, please read PSD1136.

3. Removed support for dat-license files

In previous version both *.dat and *.p12 was supported as license type. With IM 5.4.0 the support of *.dat has been removed and only *.p12 is now supported.
If you have an installation with *.dat, please contact PhenixID support to receive a *.p12 license file instead.

4. New SAML SP

In previous versions of IM there has been a couple of ways to manage scenarios where IM should act as an SAML Service Provider (SP). With 5.4.0 we have a new component for this that will replace previous solutions. This is mainly to support upgrades of Identity Manager.
For more information, please read IM as an SAML Service Provider.

5. Added installation support

We have added two feature Identity Manager Web installer:
1. A check box whether you want to install IM as a service has been added.

2. When upgrading IM there are two ways to figure out which IM installation will be upgraded in case you have several IM installation on the same server.

Click the question mark and the file path of the installation that will be upgraded will be displayed. See screenshot 1 below.
A note on the summary page will state what IM installation that will be upgraded. See screenshot 2 below.

6. Run on Launch and prompted searches

To have a predefined search execute at login is supported for non prompted predefined searches. Now prompted predefined searches also supports run on launch.

7. AllowedOUPDSearchFilter correction

filter.AllowedOUPDSearchFilter did not work as excepted in previous version.
This has now been corrected.
For more information about this filter, please read PSD1106.

8. MultiListControl correction

Custom control MultiListControl did not work as excepted in previous version. Removal of objects was not possible.
This has now been corrected.
For more information about this custom control, please read PSD1073.

9. Virtual view update

The virtual view feature has been updated with custom sort order.
For more information about this feature, please read PSD1098

10. UI – separate form buttons form controls

This is an end-user UI improvement

Separation of form buttons (Create, Apply, Save and Close and Cancel) from workspace controls has been implemented. This is so form buttons does not interfere/get on top of controls in a form.