PingIDM 8.0.0

Known issues

This topic lists important issues that remain open at the time of release.

  • OPENIDM-848: Conflicting behavior may be observed between the default fields set by the onCreate script and policy enforcement

  • OPENIDM-10490: admin UI doesn’t allow multiple values for the objectClassesToSynchronize LDAP connector property

  • OPENIDM-12540: Unable to change openidm-admin password via self service UI

  • OPENIDM-13198: PATCH requests are transformed to UPDATE requests internally, affecting more attributes than they should

  • OPENIDM-13592: optimize javascript context caching to reduce transient memory allocation

  • OPENIDM-14828: updateLastSync sets returnByDefault relationship to empty array

  • OPENIDM-15376: Sorting on retries for workflow deadletter jobs causes 500 error

  • OPENIDM-15614: large group membership UPDATE/GET operations is slow against AD

  • OPENIDM-15729: LastSync functionality is tightly coupled to the managed/user resource path

  • OPENIDM-15810: CSV Bulk Upload intermittently fails to import users with Oracle explicit table

  • OPENIDM-16224: Delegated admin doesn’t work for user who registers and logs in with Google idP

  • OPENIDM-16228: Temporal Roles not showing in admin UI w/DS as ID Repo

  • OPENIDM-16250: Rhino scripts resourceName.leaf() should be a string

  • OPENIDM-16269: Rhino lodash isEqual() always returns false for objects

  • OPENIDM-16349: adpowershell provisioner account schema causes query with sortKey=distinguishedName to fail

  • OPENIDM-16491: connection between agent and IDM/RCS breaks after IDM pod relocated from one node to another

  • OPENIDM-16516: Incoherent script hooks bindings when PATCH a relationship collection containing relationship properties

  • OPENIDM-16697: Using Postgres and CITEXT, a user is unable to log in due to case sensitivity

  • OPENIDM-16843: Relationships, having returnByDefault=true flag set, are not being included in oldObject/newObject values at onUpdate() trigger level when "_fields" is specified

  • OPENIDM-17190: PBKDF2 pre-hashed passwords from IDM not working on DS

  • OPENIDM-17327: Property Value Substitution failing for LoginURL in Salesforce Connector

  • OPENIDM-17347: 500 RuntimeException when parsing some date formats in audit query

  • OPENIDM-17443: Clean-up and remove obsolete nodes that appear "running" on the Cluster Node Status WIDGET

  • OPENIDM-17448: Incorrect Year Display with different timezone on Audit Events Dashboard

  • OPENIDM-17466: Unit tests in ManagedObjectSetTest make false assumptions

  • OPENIDM-17476: Missing matchAttribute property when using /openidm/config/fieldPolicy/ to configure password validator results in unexpected behaviour

  • OPENIDM-17478: RDVP calculation does not respect the 'validate' config that can be disabled in managed.json

  • OPENIDM-17488: Removing a parent relationship from a child org as owner/admin of that parent org returns a 404 instead of a 200 on JDBC/MySQL as repo

  • OPENIDM-17516: Pattern policy ignored when doing operation replace with empty values

  • OPENIDM-17630: A value set to the List of Names to Filter setting of a Provisioner via the UI disappears when saved and the provisioner is accessed again

  • OPENIDM-17631: Overriding the key “aliases” in conf/secrets.json using $array and $list coercion type to support multiple key aliases is not working

  • OPENIDM-17671: Request for postSync script hook

  • OPENIDM-17760: "In" clause can not be called from javascript with openidm.query()

  • OPENIDM-17813: File content incorrect on read

  • OPENIDM-17815: Saving invalid script in managed.json causes managed object to return 404

  • OPENIDM-17922: Sample scripted powershell with ad is missing ResolveUsername script

  • OPENIDM-17983: Workflow process definition diagram is not displayed in the Admin UI

  • OPENIDM-17997: Array virtual properties fail to update during a compound replace operation when revision data is included.

  • OPENIDM-18039: Modify GroovyScript to utilize similar logic that RhinoScript is using in ScriptableWithDeferredBinding

  • OPENIDM-18074: End-User UI Preferences property to READ-ONLY (Non-editable) not working

  • OPENIDM-18132: Upgrade Rhino to resolve Issue #1232

  • OPENIDM-18154: Mapping will restore itself after being deleted when moving position in grid holder view

  • OPENIDM-18162: Transformation script for relationship attributes does not run in IDM 7.2.0

  • OPENIDM-18196: Assignments with multivalued attributes triggers unnecessary updates on target objects

  • OPENIDM-18218: RDVP and conditional grantee 'merry-go-round' causing superfluous relationship field reads

  • OPENIDM-18231: Disabling and enabling livesync schedule changes value of source

  • OPENIDM-18271: Adding Policy via UI doesn’t always work

  • OPENIDM-18277: Task Scanner fails on erroneous conditional policy validation failure

  • OPENIDM-18290: Dependant conditional policy not run when patching a property

  • OPENIDM-18333: Policy validation does not work fine if values are provided to all fields together which are being used in policy validation

  • OPENIDM-18340: Multi-language support for platform deployment is missing

  • OPENIDM-18412: Value for boolean property in Linked Systems tab appears to be hidden

  • OPENIDM-18493: Response from csv/template endpoint is different in IDM CDK

  • OPENIDM-18496: Missing UI templates for Groovy scripted connectors 1.5

  • OPENIDM-18643: Sporadic NPE upon Activation of the OpenICF Provisioner Service

  • OPENIDM-18698: QueryFilter with invalid pageSize doesn’t throw an error

  • OPENIDM-18738: Field Policy Service exception handler hides DS exceptions that are not policy failure exceptions

  • OPENIDM-18760: Delegated admin can’t see authzMembers for internal role

  • OPENIDM-18780: IDM Native console should not query audit log

  • OPENIDM-18826: Out of memory in IDM platform groups read/delete members

  • OPENIDM-18846: Investigate order agnostic JsonValue comparisons

  • OPENIDM-18885: referencedRelationshipFields in queryConfig does not keep original data structure

  • OPENIDM-18891: IDM console cli.sh throws a java.lang.NoSuchFieldError

  • OPENIDM-18941: Salesforce provisioner file is overwritten when connector is enabled

  • OPENIDM-19056: DS index required on reconprogressstate recon_id

  • OPENIDM-19061: "Persists association" option when not selected throws "Not found error"

  • OPENIDM-19084: Pyforge: Changing SOURCE_TARGET_CONFLICT default action to EXCEPTION caused a regression on Oracle repo

  • OPENIDM-19181: Merry-go-round will cause duplicate RDVP calculation for signals received across conditional relationship fields

  • OPENIDM-19217: Make non-returnByDefault relationship attributes available in onUpdate

  • OPENIDM-19232: When adding additional property in new managed object the save button became unclickable

  • OPENIDM-19306: JDBC explicit table managed user PATCH with _fields=*_ref caused 400 error

  • OPENIDM-19392: IDM with set up RCS with SSL with empty or null connectorServerList is causing NullPointerException

  • OPENIDM-19424: _countOnly query parameter lost when used with proxied IDM

  • OPENIDM-19435: Docs: Link historical accounts sample docs page instructions cause errors

  • OPENIDM-19492: Query for clustered recon target ids should be paged with a very small page size (e.g. 2)

  • OPENIDM-19493: Conditional grantee processing speciously triggering processing of relationship fields in MOS#update

  • OPENIDM-19494: Editing "has one" relationship results in bad request error

  • OPENIDM-19555: Track: vulnerable to CVE-2023-43643 IDM 7.4.0 (RFE)

  • OPENIDM-19573: Invalid and non existing cookie should return Bad Request error with OpenDJ repo

  • OPENIDM-19745: Component and bundle activation exceptions not printed to log files

  • OPENIDM-19801: Boolean attribute shows incorrect value in IDM Admin UI Level in Forgeops based deployments

  • OPENIDM-19946: Update README file in sample provisioner directory

  • OPENIDM-19968: Enable and investigate unstable groovy tests

  • OPENIDM-20041: Align order of P1 Connector Config properties within the UI template to that of the PingOne OIDC Application

  • OPENIDM-20300: Managed Object schema editor scripts tab not showing scripts on relationship type properties

  • OPENIDM-20469: QA: use promtool check to test compatibility of our prometheus output

  • OPENIDM-20525: Alpha_user schema - cn is private and not searchable

  • OPENIDM-20793: validateProperty appears to validate against the spelling of the properties itself

With the removal of the IDM standalone self-service feature, the admin UI link to self-service results in a 404 error.

admin UI screenshot showing the self-service link