Skip to main content

4.4.0

Features and improvements

New connectors

  • Added the Ceridian Dayforce connector (agtdayforce) for Dayforce HCM systems.

  • Added the Bravura OneAuth connector (agthypr) for a passwordless MFA solution and sign-in experience that uses one-touch biometrics and integration for Bravura OneAuth powered by HYPR.

  • Added the "Generic Linux Server NewGen (SSH)" connector (agtlinux_ng.con) that now makes use of a Python integration and agtpython to target Linux servers.

Exchange

  • Added the "List shared mailboxes' access rights as groups" target system address configuration option for the Exchange connector to allow users to manage shared mailbox permissions using groups.

Linux

  • Added the linux-crypt-scheme-id option in the psunix configuration file for the unix listener to expose configuration of the crypto scheme id representing the hash algorithm.

Google apps

  • Updated the Google apps connector to be able to create users in a specified OU as well as update a user's existing OU using the orgUnitPath account attribute.

Resolved Issues

AWS

Enhanced the Amazon Web Services connector to be able to delete users that have special settings (access key, ssh key, etc).

Azure

  • Added support for the Azure connector to be able to list and manage Azure roles as groups.

  • Fixed an issue with the Azure connector when listing users from specific groups.

  • Disabled parallel listing for the Azure connector to avoid a potential issue that the azure service could refuse requests.

  • Modified the Azure connector to be able to use an Azure server other than graph.microsoft.com for the Server parameter in the target system address configuration.

  • Modified the Azure connector to set attributes as string types to avoid potential issues such as when numeric values are used.

Google applications

  • Added support for managing roles as groups to the Google Applications connector (agtgapps).

  • Modified the Google connector to make use of a pseudo attribute to terminate client side sessions for users.

SAP

  • Adjusted the SAP Server (Netweaver 7.5+) connector (agtsapnw.exe) to use the 2-digit and 3-digit format for system number and client number respectively, to avoid possible connection issues.

Python scripts

  • Exposed programmatic enabling of incremental listing within the Python script connector.

  • Fixed crash in the Python connector when accessing attribute information on a group listing operation.

  • Fixed an issue with the addResponse callback function for use with authentication chains in the Python script connector.

  • The Python connector (agtpython) has been modified for the following:

    • Unimplemented operations in agtpython will now return the ACOperationNotSupported status.

    • List subscriber operations will now only be returned in agtpython's platform info if the operations are supported.

Okta

  • Modified the Okta connector to make use of a pseudo attribute to terminate client side sessions for users.

Database

  • Fixed an issue with the ODBC Database script connector to prevent a crash when listing users during auto-discovery.

Active Directory

  • Fixed an issue with the Active Directory DN (agtaddn) connector in relation to the GroupCreate and GroupUpdate operations.

  • Fixed an issue with the Active Directory DN (agtaddn) connector when listing from a DN that is not specified in the forest.

  • Fixed an issue with the error handling for the Active Directory DN (agtaddn) connector when an invalid template user is specified during the create operation.

  • Modified the Active Directory DN connector to ensure that OUs are not duplicated when they are listed during auto-discovery.

LDAP

  • Added the "Exclude duplicate objects when listing" target address option for CSV File Connector (agtsvc) and the "listUniquifyObjects" option in the LDAP Directory Service configuration file (agtldap-openldap.conf sample) to add support for skipping over duplicate records if they are encountered from multiple schemas or other configurations.

  • Exposed the ability to set literal strings in operation-pre/per/post operations in agtldap to fix a password reset issue on Oracle Unified Directory targets with the LDAP connector.

Linux

  • Added ECDSA key type to the list of discovered authkeys for agtlinux.

Success Factors

  • Resolve issues with sfrest load platform if "request" library is not available.