Release Notes

SAP SuccessFactors Employment User Data

The SAP SuccessFactors connector has been enhanced to fetch employment user data for contingent workers in the export and lookup features. The SAP SuccessFactors connector normally use the select/expand option to fetch dependent items. However, that will not work for contingent worker user data since the user account linking it may be in inactive status. So the connector has been enhanced to use sub calls to fetch contingent worker user data if the API does not return it. This fetch is controlled by the below configuration property to avoid impact on existing solutions.

Microsoft Office 365 REST - Manage Group Owners

The Microsoft Office 365 REST connector has been enhanced to support group owner management and fetching. The below owner attributes have been added and export/import sub calls are used to export/manage group owners.

The Office 365 REST connector uses OAuth2.0 authentication and access token is refreshed dynamically by the connector. There was a caching issue in Studio when the Provisioning/Identity server(s) refreshed the access token. Made a fix to clean-up the system from Studio cache on receiving the issue, so that succeeding calls will use the latest access token refreshed by Provisioning/Identity server(s).

Microsoft Office 365 Enhancements

The Microsoft Office 365 connector has been enhanced to support custom TLS versions, rather than using the system default. A newer version of TLS is recommended for certain commands. This can be configured at the connected system level using the parameter Security Protocol Type and support the values TLS, TLS11, TLS12, TLS13.

The session key used for Microsoft Office 365 connector was the exchange online URL. This may the same for multiple systems across different orgs. So the session limit handling was not working properly. Modified session key to include service account name, password, applicationId, keyFile and tlsVersion so that the session is shared when all these configurations match. 

There was also an issue of persisting invalid sessions sessions in Microsoft Office 365 connector due to wrong error handling. Changes made to avoid persistence of invalid sessions. If any connection related call is failed, session is marked as invalid and not persisted.

Google Apps Multi Domain EmailSettings

The Google Apps Multi Domain connector has been enhanced to support SmtpMsa for EmailSettings.SendAs. Fischer has introduced the below set of attributes to fetch and configure SmtpMsa.

UCR Connector - Site Export

UCR Connector was using three (3) levels of sub calls to export all site related attributes. This was taking a long time since the number of sub objects at each level can be large. Customer introduced a new API to fetch all site attributes in a single call. So the site data format has been modified to use the new API, except when the export of a site is by Id. The sub calls are still being used in export site by Id option since there is no filter and get option supported for the new API.
 

Flat File Connector Enhancements

The Flat file connector has been enhanced to support global variables as the value for configuration parameters FFSubDirectoryName and FlatFileName. The value should be provided in the format ##%GlobalVariableName##. This support has been added for export and import. FFSubDirectoryName can be configured using advanced settings in lookup and global variables support is added for that too. For the lookup feature, the FlatFileName parameter is a lookup configuration and all mapper data objects were supported for value.

Fixed Defects

List of defects reported by customers or implementation, does not contain defects raised internally.

• Delta process count validation has been modified to check exact counts retrieved from the export, to avoid wrong add/delete entries in delta data. If the count validation fails, the delta process is retried up to two (2) additional times. If all retries have failed on the count validation, the task is marked as failed.

  Feature Affected: Delta Export
  Connector Affected: All Connectors

• Fixed the SAP SuccessFactors connector date formatting. The SuccessFactors API returns UTC value for date attributes in Entity Data Model (EDM) format.  This value should be adjusted based on the Provisioning server time zone to get the correct date value. 

  Feature Affected: Connectors
  Connector Affected: SAP SuccessFactors

• Fixed issue where the Powershell session initialization was getting stuck and succeeding calls to that server were getting queued up. Timeout support has been added for the session initialization process. The default timeout value is 300 seconds and it can be configured using java VM argument com.fii.powershell-timeout. The timeout should be provided in seconds while configuring this.

  Feature Affected: Connectors
  Connector Affected: Office 365, AD variants using Powershell

• Fixed issue where the Canvas LMS connector was using the wrong user id when executing sub calls after creating a user. This issue occurred when the import data contains the id attribute. In such cases, sub calls were using the import data attribute value instead of the generated attribute value.

  Feature Affected: Connectors
  Connector Affected: Canvas

• Fixed issue with the Office 365 configuration parameter management. In the lookup feature, filter configuration combo boxes are made editable so that literal values can be configured as filter condition value. Fixed issue of not retaining the value for TenantId plug-in parameter. 

  Feature Affected: Connectors
  Connector Affected: Office 365

• Fixed issue with the PostgreSQL API import to escape API name when there are special characters present in name.

  Feature Affected: Connectors
  Connector Affected: PostgreSQL

• Fixed issue in manager listing during profile update. The filter creation was using requestor attribute instead of beneficiary attribute and resulted in creating wrong condition.

  Feature Affected: Self-Service User Interface

• Fixed issue where compliance job status emails are being repeated for failed job instances. Fix has been made to mark the scheduled notification record to a status of completed if the job instance status is failed.

  Feature Affected: Compliance Job Notification

• Fixed issue with account status display in self-service account listing page, under user management, not showing correctly.

  Feature Affected: Self-Service User Interface

• Fixed issue of the Identity Hub updating policy_id field of FISC_USER_ACCOUNT_REL records to NULL even though the incoming payload didn't have any policy attributes, which would be the signifier to update the attributes.

  Feature Affected: Identity Hub

• Fixed issue of setting account resource as dependency error when the dis-qualified entitlement policy has approval.

  Feature Affected: Policy Engine

• Fixed the issue of extending the end-date by grace days when end-date processing fails for any reason.

  Fixed the issue of not deprovisioning the account resource after the grace period days when the event has qualification for account resource through some other policies and dis-qualification to process after the grace days.

  Feature Affected: Policy Engine

Downloads

The download links below are applicable to Fischer on-premise customers that host the Fischer IdM software in their environment. If you are a Fischer IaaS (Cloud) customer, all delivery of updates are performed by Fischer on a scheduled basis.

To download the latest update, you will need a login to the Fischer Release portal. If you are a Fischer on-premise customer and would like to request an account to the Fischer Release portal, please submit a request through the Fischer ticketing system.

Identity Linux 7.7.12 Installer

Identity Windows 7.7.12 Installer

DataForum Linux 7.7.12 Installer

DataForum Windows 7.7.12 Installer

Studio Linux 7.7.12 Installer

Gateway Linux 7.7.12 Installer

Gateway Windows 7.7.12 Installer

Connectors

Triggers