Release date: 2026-07-02
Main new features
Sectigo connector
A new PKI connector is added for Sectigo in Identity Manager, expanding our integration ecosystem with a globally trusted Certificate Authority. The connector focuses on user certificates, enabling automated provisioning and lifecycle handling directly within Identity Manager. It can be used alongside Nexus Certificate Manager, for example to handle key archival and recovery (KAR) for encryption certificates. Another use case is to issue authentication certificates from an internal enterprise PKI while using publicly trusted certificates for signing. See Integrate Identity Manager with Sectigo connector for more information.
Full certificate chain provisioning (iOS)
The certificate provisioning has been enhanced by making the full certificate chain available in the iOS key chain, allowing system administrators to configure validation more flexibly. The certificate chain returned by the CA request including intermediate and root certificates is now passed from Identity Manager to Hermod for further processing by the Smart ID Mobile App on iOS.
Spring 7 update
Update to Spring Framework 7 to modernize our technology stack and keeping our core library aligned with the latest standards. This update improves maintainability, security, and performance while ensuring long-term support. It also provides a solid foundation for leveraging new framework capabilities and future enhancements.
COSMO X support
Support added for the COSMO X Smart Cards and IDPlug middleware, enabling seamless interaction with this Smart Card for managing user credentials and certificates within Identity Manager workflows. With the COSMO X we add a high-security Java Card with a high level of certifications to our portfolio.
Deprecated features
Nexus Go Cards Card Production Service Task
The service task “Card production: Nexus GO Cards get info” is outdated and deprecated. Use the generic HTTP client task instead to implement REST calls to the Nexus Go Cards API. See Set up Http Clients in Identity Manager for details.
Detailed description of features
Features
|
Jira ticket number |
Description |
|---|---|
|
CRED-15555 |
Smart ID Identity Manager now supports the Single Logout Feature in Smart ID Digital Access. If single logout is enabled, logging out from one session will lead to logout from all active sessions. See Configure logout redirect for Identity Manager Operator for more information. |
|
CRED-16433 |
New PKI-Connector added: It is now possible to request and revoke user certificates from Sectigo certificate authority. See Integrate Identity Manager with Sectigo connector for more information. |
|
CRED-18207 |
When using CardSDK for Card Encoding, it is now possible to encrypt the information exchanged between Identity Manager and CardSDK. See Configure Card Job Encryption For Card SDK for details. |
|
CRED-21793 |
ACL caching has been re-introduced. The missing cache could lead to major performance problems in some cases. |
|
CRED-22069 |
When installing a certificate on the Mobile App on iOS, it is now possible to include the certificate chain. |
|
CRED-22307 |
Library upgrade for Smart ID Self-Service. |
|
CRED-22416 |
Spring library upgrade. |
|
CRED-22613 |
The Flowable ID Generator now uses its own database transaction when needed in order to use its own database connection pool. |
|
CRED-22616 |
The Flowable ID Generator now uses its own database connection pool in order to prevent blocking of processes. |
|
CRED-22724 |
The service task "PACS: Fetch Entitlements" can now return a list of entitlements that have changed. See PACS - Standard service tasks in Identity Manager for details. |
|
CRED-23013 |
Enabled certificate attribute extraction for PQC certificates. |
|
CRED-23281 |
In the Messaging service tasks that create a Virtual Smart Card Profile, the Desktop Extension ‘deleteDisabled’ can now be set. See Smart ID Messaging - Standard service tasks in Identity Manager for details. |
|
CRED-23425 |
Removed library for security reasons. |
Corrected bugs
|
Jira ticket number |
Description |
|---|---|
|
CRED-22994 |
There was in issue with the Process REST API when retrieving data from it, it would represent null values as objects and not as empty string. This has been fixed. |
|
CRED-23146 |
There was an issue with signature verification in Identity Manager Admin and Identity Manager Operator when uploading configuration files. This has been fixed. |