The main enhancements in version 10.1.0 is an extension of automatic assigned roles according to attributes by more types of rules. Differential synchronization support has been added to improve performance. This version also includes the IdM Tool extension, which now supports building projects with a single command.
Agenda for automatic role assignment by attributes has been extended with new types of rules. More precisely, it is an extension of the number of operators that can now be defined.
This extension greatly increases the use of automatic roles.
Previously only the 'equals' operator could be used, now the following are supported:
* Equals * Not equals * Start with * Not start with * End with * Not end with * Is empty * Is not empty * Contains * Not contains * Less or equal than * Greater or equal than
More about this feature you can find CzechIdM 10.1.0.
The goal of differential synchronization is to update the synchronized entity only if at least one mapped attribute value has changed. This prevents unnecessary event creation in the system.
Differential synchronization only checks the values of the mapped attributes. Ie. if the attribute that we do not map in IdM changes in the source account, the differential synchronization will not detect the change and the entity will not be saved.
In the picture below, only one change was detected.
Therefore, 18 elements are marked as ignored and one is marked as success (green color):
More about this feature you can find CzechIdM 10.1.0.
This tool supports CzechIdM developers and implementers. The current version of IdM Tool makes it easier to release new module versions and build projects.
* Release product version - release product under final version, new development version will be set, tag will be prepared. * Release module version - release module under final version, new development version will be set, tag will be prepared. * Change product version - set version for all modules. * Get product version - for test reasons only. * Build product version - for test reasons only. * Build project - use released product and install additional released modules and libraries.
More about this feature you can find CzechIdM 10.1.0.
In version 10.1.0, a new agenda has been created that allows basic caches management in CzechIdM.
Currently active caches are displayed in Configuration → Modules → Cache. Here we can see all caches, which have been initialized since start of the application. Note that cache is initialized lazily (when they are needed) so not all expected caches may be displayed in this table.
Most operations, which need to invalidate cache, do so automatically and administrator does not need to worry about it. For example when you change configuration of CzechIdM from UI, then corresponding cached value is updated too (if it exists). There are basically only two situations, which would require manual cache eviction:
More about this feature you can find CzechIdM 10.1.0.