Identity Manager release notes 5.3.2

CRED-21793

ACL caching has been re-introduced. The missing cache could lead to major performance problems in some cases.

CRED-22307

Library upgrade for Smart ID Self-Service.

CRED-22633

Uploading a configuration file in Identity Manager Admin or Identity Manager Operator was very slow when the database was connected over the network. This has been improved.

CRED-22730

In Smart ID Self-Service, the size of the JWT authentication token was decreased by removing empty fields and the allowed file size has been increased.

CRED-22733

Security upgrades for third-party libraries.

CRED-22873

Security upgrades for third-party libraries.

CRED-22974

Security upgrades for third-party libraries.

CRED-23001

The Microsoft Graph API changed the page size for searches. The page size for searches in Entra can now be configured in entra-id.yaml of the Entra connector.

CRED-23036

In Identity Manager Operator, the opening of process lists has been optimized to increase performance.

CRED-23158

The Flowable Asynch Job Executor offers the feature "global acquire lock". This feature can now be enabled or disabled in Identity Manager by setting the property “asyncJobExecutor.globalAcquireLockEnabled” in system properties.

See List of Identity Manager system properties for details.

CRED-23555

Security upgrades for Smart ID Self-Service.

CRED-21740

There were some issues and configuration mismatches around pre- and post-login processes. This has been fixed. See Configure a pre-login process for Identity Manager Operator, Configure pre-login processes for Smart ID Self-Service and Set up authentication profile in Identity Manager for more information. Also see Upgrade Smart ID Identity Manager from 5.3.1 to 5.3.2.

CRED-22327

The service task "Mobile App: Install Certificates Into Android OS" is now more resilient towards communication errors.

CRED-22592

Logging on system properties parsing has been improved.

CRED-22655

In Identity Manager Operator there was an issue in searches where different thumbnails, for example for picture and signature, should be shown but the same thumbnail was used for picture and signature. This has been fixed.

CRED-22706

There was an issue where the authentication method selection in the Identity Manager Operator system properties settings would also affect Identity Manager Admin. This has been fixed.

CRED-22800

There was an issue with Smart ID Self-Service, where pre-login processes were sometimes shown and sometimes not when refreshing the login page multiple times. This has been fixed.

CRED-22810

There was an issue where the SAML AuthnRequest was rejected as being from an unknown ISSUER when the Identity Manager alias was different from the ENTITYID in the service-provider-metadata xml file. This has been fixed.

CRED-22819

When using Visual Mobile ID, there was an error when calling the contentprovider URL from Hermod. This has been fixed.

CRED-22862

There was an issue with revoking certificates when several certificates with the same serial number but from different issuers are present in Identity Manager. In this case, the issuer was ignored and all certificates revoked. This has been fixed. If no issuer is present, the revocation will fail.

CRED-22948

Process opening in IDM Admin was very slow in some cases. This has been improved.

CRED-22994

There was in issue with the Process REST API when retrieving data from it, it would represent null values as objects and not as empty string. This has been fixed.

CRED-23046

Re-introduced database optimizations for MS SQL that have been lost during library upgrades.

CRED-23146

In Identity Manager Admin and Identity Manager Operator, there was an issue with signature verification when uploading configuration files. This has been fixed.

CRED-23153

Security fix for Identity Manager Operator.

CRED-23339

Update of the Content Security Policy (CSP) for connections to Card SDK.

CRED-23624

There was a problem with encryption in SAML authentication. This has been fixed.