PIP 6.3.0 Release Notes

January 31th 2023

The new release of PhenixID Identity Provisioning (PIP) improves the stability, compatibility and security of your solution, and is recommended for all installations.

New or updated features

1. Policy Runner: Tree view

The policy runner has got a new tree view instead of a flat list of the actions. It is now populating the tree when the policy is running, and when for example an action group or another policy is being executed, it’s reflected in the tree.

2. Performance: Lots of session attributes

The performance has been improved for scenarios where lots of session attributes (ex. 20 000+) are being added to a session object.

3. LDAP Policies: Fetch same LDAP attribute multiple times

For LDAP policies, it’s now possible to fetch the same LDAP attribute and assign it to multiple session attributes.

4. Action Usage: Focus on action in policy

When navigation from an action to a policy it’s being used in, the action will be selected in the policy.

5. Action in Policy: Can skip when no objects match

In a policy, is now possible to configure that a specific action should only be executed if at least one session object has matched the condition.

6. Search: Match on policy action conditions

When searching for objects, if the “Search in values” checkbox has been checked, policies will be matched where there is an action with a condition containing the search value.

Updated Actions

1. Various Actions

Action Group: Version: 1.7.1
Run Action: Version: 1.9.1
Run Action for Each Value: Version: 1.3.1
Run Action Once: Version: 1.1.1
Run Action While: Version: 1.3.1
Run Policy: Version: Version: 2.4.1
Added support for exposing the internal execution of other actions, policies etc. to ex. the policy runner.

Bug Fixes

1. Policy logs written to the wrong location

In the policy runner, if a long running policy was started, and then the policy runner was closed and then opened for some other policy, the logs from the first, still running, policy would be written to the new policy runner.

For persistent LDAP policies, the policy’s configured logger wasn’t used, instead, the logs were written to the standard log.

Misc

1. Java

Identity Provisioning is now tested and bundled with java 17.0.4_1 from Azul.

2. Upgrade verifications

Verify so there are no duplicate jar-files, as this might cause an unexpected behavior.

Compare /lib with /ext. If duplicates exists, make sure to keep the latest version of jar-files.

3. End of Support

Information about the oldest supported version can be found here.