• Votes

    6

    REST shim / support more/contemporary OAuth flows

    When authentication requirements are high/more complex for security reasons, customers might require grant_types "Authorization Code" and "Refresh Token" - in a setup ...

  • Votes

    1

    REST shim / TLS-mutual authentication in combination with the OAuth ...

    An IdP might require a client (X.509) certificate for authentication. The REST shim should be able to support the TLS-mutual authentication in combination with the ...

  • Votes

    8

    REST shim / tracing capability - verbosity

    The tracing capability of the REST shim is quite low. When troubleshooting the authentication you have to use a proxy application to allow "man-in-the-middle" ...

  • Votes

    5

    IDM 4.8 support for PostgreSQL 10, 11 and 12

    At this moment IDM 4.8 is only supported on PostgreSQL 9.6. There are a lot of companies that offer standard managed internal database services with backups, clustering ...

  • Votes

    14

    REST-Shim add support for more response headers

    It would be very useful if the expected response headers from REST-shim were configurable or if the REST-shim could include all response headers available in a response ...

  • Votes

    1

    Support OpenId-Connect as Idp for OSP for Identity Application

    Support OpenId-Connect as Idp for OSP for Identity Application, Today its locked down to the SAML Idp using NetIQ Access Manager. We run Microsoft AzureAD Premium, ...

  • Votes

    1

    Include in the RHEL-Prerequisite.sh a check for SELinux settings

    In the script ./RHEL-Prerequisite.sh present on the installation ISO please include a check for the SELinux settings. Would be great to have in order to avoid ...

  • Votes

    2

    Create a SuSE check script similar to RHEL-Prerequisite.sh

    Would be great to have also a check script for SuSE, similar to that for RedHat.

  • Votes

    2

    Mulitple RemoteLoaders on same system for different ADs

    we want configure to multiple remote loader instances in our environment to connect to the separate ADs in our different locations (no forest, so MDAD Driver doesn´t ...

  • Votes

    2

    IDM 4.7 Search roles or ressources using whitespace

    Identity Applications 4.7.3 It's not possible to search for roles or resources using whitespace at Role Catalog or Resource Catalog. Many roles or resources have blank ...

  • Votes

    4

    (Engine/Shimi) Update Query token with LDAP like features (NOT, *, < ...

    The query token is nice, and in 4.7.x with QUERY conditions is much better. However there are still features missing. The ability to do things an LDAP query is a ...

  • Votes

    3

    fix functionality for dirxml-uACPasswordCantChange into the AD driver

    we have access to this value , dirxml-uACPasswordCantChange, however MS no longer updates the UAC , but has changed it to an ACL change. So any changes to it in AD create ...

  • Votes

    1

    Ability to sort entity attributes in User Search View in User ...

    when you search for a user, the user with his attributes defined in the entity is displayed. currently the order of the attributes is only done alphabetically. please ...

  • Votes

    5

    AD Driver pwfilter.dll and MS LSA Protection

    Customers are working on enhanced MS security and want to enable so called LSA Protection ...

  • Votes

    8

    Provide the last know object attributes with delete events in the IDM ...

    Would be great if delete events would (optionally) contain the attribute values of the object when it was deleted, then we'd have a chance to match and delete (and clean ...

  • Votes

    3

    Crontab Syntax

    With DirXML Jobs, the crontab syntax is not extensive enough. For example, SLES crontab allows the use of: */5 * * * * but a DirXML Job requires having to list them ...

  • Votes

    1

    Loops functionality in Validator

    For many testcases it would be very nice to use a loop functionality to create, modify or delete objects in IV.

  • Votes

    2

    Possibility for dynamic OUs in eDirectory? Not dynamic Groups !

    Szenario: Wir benutzen eDirectory in unserem Unternehmen. Unser Unternehmen hat viele Subunternehmen und zentrale Dienste. Jeder braucht seine eigene Ansicht auf ...

  • Planned

    6

    Create script that install all needed packages in SLES

    A script that checks the package requirements in SLES and installs them. There is such script for RedHat already

  • Votes

    17

    REST support authentication with JSON WebTokens (JWT)

    JWT tokens are commonly used in web applications, often as a simpler alternative to OAUTH2 authentication. This is not supported in the REST shim as is. One can ...