5. Provisioning : What's New

(Home)     Previous     Next



1. Rest Activity (new 4.0.2)

A new activity has been added to allow one to easily call REST endpoints.

Features

Figure 1: REST Activity
Figure 2: Examples of the REST Activity Expression builder functions

2. Integration activity improvements (new 4.0.2)

The Integration activity has been improved to address both reported bugs as well as requests from the field. It is important to note that these improvements are not dependent upon any server changes, so it is possible to take advantage of this new functionality even if the server is not at the latest release level.

New functionality

Figure 3: SOAP UI message generation, new mapping options for server url, userid, password
Figure 4: Data item mapping for SOAP faults

NOTE: There are a few bugs in the password CGV area that prevent it from working correctly. Please keep these in mind when using this feature in conjunction with password expressions.

Bug Fixes

3. Optional import of Roles and Resources from the Identity Vault (new 4.0.2)

Added an option not to import the roles and resources (excluding system roles)

New feature

Figure 1: Setting Role Catalog import preferences

4. Deletion of Roles in Designer

In Designer 4.0.2, deletion of roles in the Provisioning view is more efficient than the previous versions of Designer. Instead of deleting a role, Designer sets the nrfStatus flag to DELETE_PENDING, which removes the role and hides it from the Provisioning view. When the User Application driver is deployed again, the role is set to delete pending status in the Identity Vault. The Roles driver processes these roles for deletion.

5. Role Revocation Flag from Designer Role Editor

In this release, an option has been added to set the role revocation flag from the Role Editor in Designer. In the Role Approval tab, you can set and unset Revoke Approval Required flag. When the role object is deployed, if the Role Revoke Approval Required flag is set, it sets the PRD DN on nrfRevokeRequestDef attribute. On importing the role object, if the role edirectory object has a value set for nrfRevokeRequestDef attribute, it sets the Role Revoke Approval Required flag for the role object.

Figure 1: Setting Role Revoke Approval

6. Password-ref GCVs from Ecma Expression Builder in Workflows

In this release, password-ref GCVs are added in the Ecma Expression Builder in workflows. Expressions generated using the Password-ref GCVs in the Ecma Expression Builder can fetch password at run time.

In Designer 4.0.2, the password-ref GCVs in Ecma Expression Builder generates expression in the form of GCV.getValueForNamedPassword('password-ref') instead of GCV.get('password-ref'). The resulted expression can be used to fetch the password at runtime.

NOTE: The GCV boolean value "allow-fetch-named-passwords" should be set to fetch the password at run time. If it is not set, the tool tip for password-ref GCVs warns you indicating the password will not be fetched at runtime.

Figure 1: Password-ref GCV in Ecma Expression Builder