PIP 5.4.0 Release Notes

December 10th 2021

The new release of PhenixID Identity Provisioning (PIP) improves the stability, compatibility and security of your solution, and is recommended for all installations.

Important note!

Since this PIP version contains a major update of JAVA and several updates of included LIB:s it is very important that you do major testing of your PIP implementation!

New or updated features

1. Policy Debugger

In the policy debugger there is now a ‘select all’ / ‘select none’ checkbox in the objects table to make it easier to select a specific object to debug.

2. Parameter values containing line feeds

A text parameter value in an action can always be edited with the text editor by right clicking on the value. If any line feed is entered in the text, the value will no longer be available for editing directly in the parameter table, instead any further editing requires that you continue to use the text editor. This is because the inline editor in the parameter table can’t handle line feeds, so in previous versions they were automatically removed.

3. Condition for an action in a policy

If an action in a policy has a condition, the condition will now show as a hoover text when you place the pointer over the action.

4. Minor changes in the Configurator

A lot of minor changes have been made in the Configurator to improve the work for the administrator.

Updated Actions

1. Basic Authentication

Version 1.0
New action for checking if the basic authentication value in an attribute matches a given username and password. This action can be useful in a pre policy for a REST policy, when using basic authentication.

Read more here.

2. Date Converter

Version 1.3
A new parameter has been added to make it possible to convert the date to the long generalized timestamp format, ending with .0Z.

3. Delete Attribute Value in LDAP

Version 1.9
The parameter for entering which attributes to delete now supports SESSION() and GLOBAL().

4. Merge Object and Selected Attributes

Version 1.5
The list of attributes to merge now supports GLOBAL().

Removed Action

1. AES Encrypt/Decrypt Attribute – DEPRECATED

This action that has been deprecated since PIP 5.2.0 have now been removed.

Misc

1. Java

Identity Provisioning is now tested and bundled with java 17.0.0_35 from Azul.

2. Updated dependencies

All dependencies in the /lib folder have been reviewed and a lot of them have been updated to new versions.

The web server used to handle incoming web service requests have been updated from Jetty 9 to Jetty 10.

3. Upgrade verifications

Verify so there is no duplicate jar-files, as this might cause an unexpected behavior.

Compare /lib with /ext. If duplicates exists, make sure to keep the latest version of jar-files.

4. Log4J

This version of PIP is the last major version that supports version 1 of Log4J. Next version will only support version 2 of Log4J.

Since this PIP version includes Java 17, policy specific logging does not work. The log data ends up in the default log file. In next version when logging is Log4Jv2 this will be supported again.

5. End of Support

Information about the oldest supported version can be found here.