NetIQ Identity Manager includes software fixes for the following components:
NetIQ Identity Manager includes the following software fixes that resolve several previous issues in installation or upgrade:
This release includes Sentinel Log Management for IGA 8.5.1.1, which removes obsolete collectors and adds the latest supported eDirectory and Identity Manager collector versions. (Bug 567035)
NetIQ Identity Manager includes software fixes that resolve several previous issues in the Identity Manager Engine:
When you use the <do-modify-role> action in a policy for resource association, the application successfully associates multiple resources with a given role. The com.microfocus.idm.rest.UserAppRestException: org.codehaus.jettison.json.JSONException: JSONObject["succeeded"] is not a JSONObject
error is no longer seen. (Bug 525101)
When an Active Directory user changes their password, the DirXML-PasswordSyncStatus attribute is updated with the new password. The old password is removed and no longer replaced by a null entry. (Bug 597005)
NetIQ Identity Manager includes software fixes that resolve several previous issues in the Identity Applications:
When you set the property com.netiq.idm.isAddresseSupportNameFormatting to true in the ism-configuration.properties file, the Assigned To column on the Tasks page (both Self and Others) displays the full name of the user based on the locale name pattern configured in Designer. (Bug 358141)
You can now configure the Roles and Resource Service Driver to evaluate dynamic and nested groups daily at midnight by turning on the Dynamic group evaluation in local server time mid-night parameter rather than setting the frequency (in terms of minutes). (Bug 372013)
This release fixes the Unicode check failure error displayed when you restart the Tomcat server with a script. (Bug 373024)
The reminder and escalation reminder email templates have been modified to send proper reminder and escalation emails. The application no longer sends content from the notification email template in the reminder and escalation emails. (Bug 377207)
NOTE:Make sure to select the Show System Tokens check box for the reminder email template in a workflow. The application requires default system tokens to send reminder emails. When enabled, you can see that target tokens with the _default_ property included in the deployment summary window.
This release fixes an issue in the Permissions of others page, where the Dashboard failed to display the user’s full name in the search result even when the application was configured to display the full name format. (Bug 424064)
Configuring the Format of Displayed User Names in the NetIQ Identity Manager - Administrator’s Guide to the Identity Applications describes how to configure the format of displayed user names in the Dashboard. To display full name in particular, you must perform a few additional steps. After setting the Full Name attribute for the user entity’s Default Full Name Pattern in Designer, you must add the attribute property to the XmlData. For more information, see NetIQ Identity Manager - Administrator’s Guide to the Identity Applications.
The Separation of Duties option on the Dashboard now displays the full name of a user designated as the default approver rather than their CN. (Bug 432152)
This release fixes an issue on the Permissions of others page, where a team manager could not see a user’s profile photo while searching for permissions within the team, even when the user had an image added to their profile.(Bug 449010)
The Dashboard will now display an error message alerting users to remove the role-to-resource association before deleting a resource with entitlement. It ensures that users assigned to the role lose both the resource and the entitlement when the resource is deleted. (Bug 457038)
The Map Role to Role option on individual roles now includes pagination in the Parent Roles list to help administrators navigate roles. (Bug 463005)
The Dashboard now displays the date format based on the locale set in the browser. For example, the Effective Date and Expiration Date on the New Request page are displayed in mm/dd/yy format for a browser set to English (United States) and in dd/mm/yy format for a browser set to Dutch. (Bug 473005)
The issue with the Identity Applications server’s open file handles rapidly increasing when performing bulk operations on roles and resources has been resolved. (Bug 485070)
The Organization Chart on Dashboard greys out a user whose login is disabled. (Bug 487011)
This release resolves an earlier issue in which users lost their nrfAssignedResources value during RRSD resynchronization if the role administrator who had requested the resource on the user’s behalf was no longer present.(Bug 492072)
This release fixes an issue with the User Application Driver that caused the Resource Weightage option to disappear after an upgrade. When upgrading the driver, the sys-nrf-resource object in the XmlData attribute retains the ResourceWeightage key, resolving the issue. (Bug 496172)
This release fixes a workflow issue in which the application sends a reminder notification email to the second approver after the first approver approves a permission request. The workflow now sends a proper notification email to the second user, informing them of the task assignment. (Bug 500275)
This release fixes an issue in the Tasks widget that caused the Expire Soon field to update whenever a new task was created. The Dashboard now displays the right number of tasks that are about to expire when a user visits the page. (Bug 502261)
This release fixes an issue in the Dashboard’s Flush Cache option, which caused it to fail for workflow-related caches. Now, when you select Flush Cache for all caches, all caches are cleared, including workflow-related caches.(Bug 513038)
When editing a resource, if you disable the Map Entitlement Values at Resource Request time, select the entitlement value, and submit, the application removes the nrfResourceParms from the ResourceDefs object. (Bug 515132)
This release includes a fix for an issue in the Identity Manager 4.8.5 that caused errors when administrators tried to append or overwrite owners when editing multiple roles. The Role name is required
error message is no longer seen. (Bug 524106)
After upgrading to Identity Manager 4.8.7, request forms containing MVEditor control will display the special characters correctly. (Bug 532055)
On changing the Options for number of results displayed per page parameter in the Provisioning Display Settings, the option to select the number of results per page provided on each page for navigation is updated correctly. (Bug 532163)
The Role status code, nrfStatus=50, assigned to a role object at the time of role creation, remains unchanged on editing the role. (Bug 533110)
The REST API Documentation has been updated to provide the correct description for the GET /tasks/workEntries REST Endpoint, which was stated incorrectly in a previous release. (Bug 543011)
This release fixes an issue found on the roles edit page, in which the Dashboard displayed a success message whenever a user typed a character and pressed Enter in the search field. The message Successfully updated role
is no longer displayed. (Bug 547041)
This release resolves the log rotation issue in the idapps.out file introduced in Identity Manager 4.8.6 as part of the bug 525093 fix. The configuration now includes a time-based policy to support daily log rotation in the idapps.out file. (Bug 549036)
This release fixes an issue with the search option for the custom entity, in which the Dashboard did not find any users when searching for their complete email address. (Bug 560044)
This release adds a check to prevent the deletion of srvprvDelegatorAssignment objects associated with the availability settings of other users. As a result, deleting the availability setting for one user has no impact on the delegation assignments set for other users. (Bug 580169)
When viewing an organization chart of a custom entity, the Dashboard will not display the user’s profile photo in the organization chart if that user has chosen to hide their profile photo. (Bug 587092)
This release includes a fix for an issue in Identity Manager 4.8.6 that caused the version, date, and revision of the Identity Manager Dashboard to display incorrectly if the preferred language was changed to a language other than English. (Bug 589085)
On removing a mapped resource from a role, the nrfResourceAssociation object is successfully deleted from the user, and the user cannot access the resource. The NullPointerException is no longer seen. (Bug 599001)
This release fixes an out-of-memory issue observed after deleting multiple roles (a parent role with many child roles). The memory allocated for the operation is returned once the role recalculation is complete. (Bug 599002)
This release fixes an issue in legacy forms that caused form fields using the form.setValues("fieldname", data-values, display values, KeepOldValues) method to display the data value instead of display value in the display values (3rd) field. It now shows the value for the display values parameter correctly. (Bug 601003)
The landing page issue that caused the user to occasionally see a blank page after logging in to the Dashboard has been resolved. It occurred when the application was unable to load notifications because the logged-in user belonged to multiple groups and had many notifications to display. (Bug 606002)
This release fixes an issue with Role and Resources Service Driver wherein the driver unexpectedly and temporarily stopped processing transactions, causing new requests to be held up in the unprocessed transactions queue. An HTTP object timeout has been added so that the driver does not keep waiting for the response. (Bug 610002)
After you install or upgrade to the latest User Application Driver package shipped along with this release, the Enable oidpInstanceData attribute clean-up property and its subparameters are displayed in the Driver Configuration > Driver Parameters window as expected. (Bug 610038)
This release fixes a search operation issue on the Delegation Assignments and Availability Settings pages, where a team manager could not search users using the CN attribute if the team members (Recipients) were defined using the Manager-Employee relationship. (Bug 612058)
When you upgrade to Identity Manager 4.8.7, the application retains the custom login image added to the osp-custom-resource.jar file. (Bug 619010)
The UTF-8 character encoding allows Identity Applications to correctly display extended characters like Swedish umlauts. (Bug 638003)
After upgrading to Identity Manager 4.8.7, the Requested By field on the Request History page displays the name of the initiator who requested the permission on behalf of others correctly. (Bug 638004)
When you upgrade to Identity Manager 4.8.7, the application retains the CSS customization on the legacy forms. (Bug 638005)
This release fixes an issue in Identity Manager 4.8.6 that rendered the form fields on the resource form uneditable. After upgrading to Identity Manager 4.8.7, resource form with a “List” Data Type field will allow users to select from a set of data values. Similarly, users can enter characters into a “String” Data Type field. (Bug 638006)
This release fixes a form builder issue in Identity Manager 4.8.6 that caused a Dynamic Entity component to render incorrectly when searching for an email address with a period (.). (Bug 638007)
The Subcontainer field is no longer empty on the New Role page. It shows the roles within the subcontainers for the selected role level. (Bug 638008)
When you set a new language as the default preferred locale on Dashboard, the application reads the translated AdminString_XX.json and XX.properties files and displays the Dashboard UI text and strings in the preferred locale. (Bug 646031)
IMPORTANT:Before changing the preferred locale on the Dashboard’s My Profile page, make sure that the AdminStringsRsrc_xx.json file is present in the following location:
Linux: /opt/netiq/idm/apps/tomcat/webapps/idmdash/assets/i18n/
Windows: C:\NetIQ\idm\apps\tomcat\webapps\idmdash\assets\i18n
On requesting permission that uses legacy forms, the browser loads forms in the first launch. The A JSONObject text must begin with '{' at character 1
error is no longer displayed for legacy forms. (Bug 681003)
This release includes user interface (UI) strings for the Identity Applications component in Polish language that was missing in an earlier version. (Bug 687001)
ECMAScript no longer generates anonymous classes or overloads the JVM metaspace. (Bug 704001)
After upgrading to this patch, the issue with the Identity Manager 4.8.6 on Oracle, which resulted in Error: Runtime Exception Initializing... Caused by com.netiq.persist.PersistenceException: ORA-02289: sequence does not exist
will no longer be seen. (Bug 704002)
NetIQ Identity Manager includes the following software fixes that resolve several previous issues in Identity Reporting:
The size of IDENTITY_DESC, IM_ID, MGR_ID, PREFERRED_LANGUAGE, REQUEST_COMMENT, and team_memb_relationship columns have been increased to handle more data than previously supported. This resolves several column-related errors that were reported in previous releases, such as ERROR: value too long for type character varying(128)
and value too large for column.
(Bug 256182, 258164, 500217, 501062, 502225)
This release resolves a previous issue in which the database report did not contain any data in the Audit Event Overview section. The Database Statistics report now shows the event counts for all audit events that occurred during the specified date range in Audit Event Overview. (Bug 579122)
NetIQ Identity Manager includes software fixes that resolve several previous issues in Designer:
The site.xml is updated to include the correct version of the Epic EMP Driver package (short name PDSEMPDCFG). The package is successfully updated in Designer 4.8.7. (Bug 580132)