12.4.2
Features and improvements
Bravura Privilege
Added conflict check between pam_disclosure_view_copy and pam_account_management_disclosure_view_copy scenario components.
Authentication
Added new password rules:
MINLOWER: have at least N lowercase letters
MINUPPER: have at least N uppercase letters
Workflow
Updated
autores
utility to skip the deprecated role specified by option -role, and do not calculate variances or submitting request for the deprecated role.
Upgrade / migration
Added the upgradetest utility with the shipped installation files to check for potential issues prior to upgrading the database.
Resolved issues
Bravura Pass
Fixed a security issue with the Login Assistant / Credential Provider from the locked down browser window.
Modified Profile and request attribute information page to make configuration option Allow duplicate values available under Bravura Pass-only license.
Adjusted netvalidatepwpol plugin to be able to directly check against Azure.
Bravura Privilege
Fixed inconsistency between authorization of API and UI submitted requests for pam_vault_management.
Reports
Fixed the issue where the Review certification delegations report did not properly filter delegations.
Automation
Fixed escape issue in IDTrack workfile.
Workflow
Fixed an issue where a session becomes invalid when accessing a resource configuration page, where an invalid user is configured as an authorizer in one of the phased authorizers.
Fixes request generation to include seqno's in reqinfo kvg for default attribute values.
Upgrade / Migration
Improved queueflush.exe error detection
Modified upgrade scripts to properly clean up invalid data from "xgrpmbr_diff" (11.2.0) and "ucpcache" (12.3.0) so upgrade can proceed.
Mobile
Fixed an issue preventing the UI from rendering on Android webviews (such as authenticating to the Gmail app).
Maintenance
Fixed
updinst
utility to properly determine the primary node when using the requestsync option.
Components
Fixed replacement of variables within environment files.
Fixed issue where loaddb components would fail if the stableid of an object changed only by its case.
Added hook_patch to Functional.hid_authchain_recaptcha so that authchain.m4 is correctly regenerated on patch skin rebuild.
Connectors (agents)
Fixed idmconfig-based target administrator onboarding to respect the "isconnpswd" flag.
Customization
Added default robots.txt to block webcrawlers.
Added default X-Robots-Tag response headers.
Added configurable response headers by using a setupiis.cfg in the psconfig directory.
API
Fixed Resource* class of IDAPI functions to be able to modify discovery flags of targets.