ACM-130357

If AccountDNBase and GroupDNBase are configured at the Domain Component (DC) level, without any specific Organizational Unit (OU), this is referred to as DC-level mapping.
Example: 

• DC=RSA,DC=emc,DC=lab

In such cases, account and group creation will occur directly under the specified DC path.

However, for other operations (such as lock/unlock account, password reset, etc.), the system will first attempt to locate the account or group by performing an update-based search to determine the full DN (including its OU) and then proceed with the requested operation.

Example:

• Input: Account Name = "Test Account"
• Operation: Lock Account
  

Behavior:

1. The system will search for the full DN of the account named Test Account under the DC-level base.
   
2. Once found, it will then perform the lock operation on the identified DN.
   

The functionality will support all the LDAP types.

ACM-130066

The functionality to add, update, and remove multi-valued attributes using the following parameters:

• add_<attribute>
  
• replace_<attribute>
  
• remove_<attribute>

 In the endpoint, the request has now been extended to support all LDAP-type connectors, not just Active Directory (AD).

The HXTT driver version has been upgraded from v7.1.234 to v7.1.255.

ACM-129501,

ACM-129500

By default, the REST collector supports query parameter–based pagination, where pagination details such as, for example, offset, limit, and page are passed in the URL as query parameters.

As part of this enhancement, GraphQL-style pagination is now supported, where pagination information is passed within the request body instead of the URL.

UI Update:

Pagination Mode Selection

A new dropdown has been introduced to allow users to choose how pagination should be processed:

• Query Parameter (default)
• Request Body

Default Behavior:

The dropdown defaults to Query Parameter, maintaining the existing behavior.

To Use GraphQL-style Pagination:

1. Select Request Body from dropdown.
2. Add the pagination logic within the request body's query field, for example:

{  

"query": "query { roles(limit: ${limit}, offset: ${offset}) { id name description } }"
}

3. Configure pagination details as follows (example):

Max Records Per Page:

• • Parameter Key: limit
  • Parameter Value: 50

Offset Details:

• • Parameter Key: offset
  • Initial Value: 0
  • Incremental Factor: 50

The request body will automatically generate the query with actual values internally, for example:
{
  "query": "query { roles(limit: 50, offset: 0) { id name description } }"
 }

RSA G&L now supports Data Anonymization.

You should log in to the Database as SYS user, and then execute the following command:

• grant execute on sys.dbms_crypto to AVUSER;
• grant execute on sys.dbms_lock to avcsuser;

When exported workflows included user data, references to those dependencies were not handled properly during the import of workflows to another environment, such as during a transition from on-prem to G&L Cloud.

Now user data included in workflows can be properly handled during the export/import of workflows across environments (such as during a transition from on-prem to G&L Cloud) by setting a custom flag HandleObjectReferencesInWorkflowsDuringExportAndImport to true in the source and target G&L environments.

A new feature has been implemented that enables the default timezone for all users to be configured under Admin > User Interface > Settings. In the past, the default timezone was based on the system timezone of the installation site.

Each user continues to have the ability to select their preferred timezone through the Options > Date/Time.

The Watch Cleanup job, under Admin > Workflow > Settings, now closes open watches for change requests that are completely processed (for example, CRs in the states Completed, Cancelled, Rejected, or Errored). The clean up of such watches is in addition to the already existing notification functionality. 

ACM-132849

 The Database Schema Migration step while applying the patch, now completes successfully (no errors occur) when the Public Views contain Custom Attributes for User objects.

SF-02679743

ACM-132505,

SF-02674252

ACM-132237

SF-02674446

ACM-132170

The missing address attributes, such as City, Zipcode, and Country, for some users in Generic REST IDC collections, which also affected user accessibility, are now being correctly mapped, collected, and displayed to each user’s data.

Such certain attributes were missed during collection because the JSON response from the endpoint returned address data as a LinkedHashMap, whereas the code expected a JSONArray.

ACM-132064

SF-02660429

ACM-131488

SF-02662037

ACM-131360

Account updates are now functioning correctly across all LDAP Connectors when the full Distinguished Name (DN) is provided, even in scenarios involving duplicate account names and DC-level AccountDNSuffix mappings.

SF-02658064

ACM-131321,

SF-02645954

ACM-130452

In the Salesforce Collector, the SOAP request header of the URL to the endpoint, containing two entries of Authorization with an empty token value, causing endpoint connection failure has been handled.

SF-02658447

ACM-131252

SF-02657792

ACM-131161

SF-02657740

ACM-131057,

SF-02626035

ACM-129464

ACM-130879,

SF-02647937

ACM-130470,

SF- 02622180

ACM-129192

SF-02653398

ACM-130878,

SF-02652095

ACM-130705

SF-02632877

ACM-130868,

SF-02642782

ACM-130242,

SF-02608545

ACM-128753

SF-02649668

ACM-130741,

SF-02648968

ACM-130510

SF-02648612

ACM-130645,

ACM-129984

SF-02648985

ACM-130637,

SF-02644783

ACM-130310

SF-02649951

ACM-130599

SF-02645833

ACM-130464

The Access Key field for the JWT REST Connector is now displayed in an encrypted format, ensuring that the Key is no longer displayed in plain text on the connection details screen.

SF-02644775

ACM-130405

When the Command Output parameter is configured, the Database Connector is now working successfully (the account is created, and the configured query returns the data).

Now, the Capability is working successfully when the outparamater is configured.

SF-02645450

ACM-130342

SF-02639578

ACM-130313

In the user selection dialog, users now can switch to simple mode if the LIKE operator has been defined on the department attribute in advanced mode. 

In simple mode, LIKE is represented as the Contains operator.

SF-02602295

ACM-130272,

SF-02623577

ACM-129390

In the AD Connector, when the LDAP Busy error occurred, the fulfilment request retry is happening only for requests with Failure state has been modified to include the Failure status code.

SF-02634247

ACM-130267

SF-02643106

ACM-130264

The AD Account update functionality now supports account names that include special characters (&, $, #).

SF-02641440

ACM-130245

SF-02641539

ACM-130223

SF-02626440

ACM-130214

Terminated users can no longer access the report, even when the Everyone option is enabled during report configuration.

SF-02639384

ACM-130136

SF-02640400

ACM-130135

SF-02633110

ACM-130105

SF-02636624

ACM-130103

When a Review Item is marked as Maintain with expiration, an exception/error no longer occurs and a task gets properly created to run on the Expiration Date provided, which will revert the Maintain with expiration and reopen the violation.

SF-02637728

ACM-130072

SF-02633091

ACM-130011

Sf-02630237

ACM-129985

SF-02631497

ACM-129846

SF-02631492

ACM-129845

SF-02628648

ACM-129839

The Restful Webservice Connector can now handle the Json array with multiple values without any issues.

SF-02628030

ACM-129788

The Application Name/ID field, which captures data from multiple applications, has now been added to the Multi-App Generic REST Account Collector.

SF-02629063

ACM-129615

SF-02626915

ACM-129455

SF-02621942

ACM-129452

SF-02610278

ACM-129377

SF-02622180

ACM-129192

SF-02623109

ACM-129186

SF-02623258

ACM-129183

SF-02622931

ACM-129171

SF-02601778

ACM-128201

SUSE (SLES 12 SP5, and SLES 15 SP6)

Red Hat (RHEL 8.10 and RHEL 9.4)

binutils-2.35.2-43.el9.x86_64

make-4.3-8.el9.x86_64

gcc-11.4.1-3.el9.x86_64

sysstat-12.5.4-7.el9.x86_64

gcc-c++-11.4.1-3.el9.x86_64

javapackages-tools

glibc-2.34-100.el9.x86_64

lcms2

glibc-devel-2.34-100.el9.x86_64

syslinux

ksh

dejavu-sans-fonts

libaio-0.3.111-13.el9.x86_64

dejavu-serif-fonts

libaio-devel-0.3.111-13.el9.x86_64

dejavu-sans-mono-fonts

libgcc-11.4.1-3.el9.x86_64

fontconfig

libstdc++-11.4.1-3.el9.x86_64

zip

libstdc++-devel-11.4.1-3.el9.x86_64

unzip

libXi-1.7.10-8.el9.x86_64

libns

libXtst-1.2.3-16.el9.x86_64