Release Notes Version: 8.2 Revised: July 2021 This document and the information contained herein is SailPoint Confidential Information Copyright and Trademark Notices Copyright © 2021 SailPoint Technologies, Inc. All Rights Reserved. All logos, text, content, including underlying HTML code, designs, and graphics used and/or depicted on these written materials or in this Internet website are protected under United States and international copyright and trademark laws and treaties, and may not be used or reproduced without the prior express written permission of SailPoint Technologies, Inc. "SailPoint," "SailPoint & Design," "SailPoint Technologies & Design," "Identity Cube," "Identity IQ," "IdentityAI," "IdentityNow," "SailPoint Predictive Identity" and "SecurityIQ" are registered trademarks of SailPoint Technologies, Inc. None of the foregoing marks may be used without the prior express written permission of SailPoint Technologies, Inc. All other trademarks shown herein are owned by the respective companies or persons indicated. SailPoint Technologies, Inc. makes no warranty of any kind with regard to this manual or the information included therein, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. SailPoint Technologies shall not be liable for errors contained herein or direct, indirect, special, incidental or consequential damages in connection with the furnishing, performance, or use of this material. Patents Notice. https://www.sailpoint.com/patents Restricted Rights Legend. All rights are reserved. No part of this document may be published, distributed, reproduced, publicly displayed, used to create derivative works, or translated to another language, without the prior written consent of SailPoint Technologies. The information contained in this document is subject to change without notice. Use, duplication or disclosure by the U.S. Government is subject to restrictions as set forth in subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013 for DOD agencies, and subparagraphs (c)(1) and (c)(2) of the Commercial Computer Software Restricted Rights clause at FAR 52.227-19 for other agencies. Regulatory/Export Compliance. The export and re-export of this software is controlled for export purposes by the U.S. Government. By accepting this software and/or documentation, licensee agrees to comply with all U.S. and foreign export laws and regulations as they relate to software and related documentation. Licensee will not export or re-export outside the United States software or documentation, whether directly or indirectly, to any Prohibited Party and will not cause, approve or otherwise intentionally facilitate others in so doing. A Prohibited Party includes: a party in a U.S. embargoed country or country the United States has named as a supporter of international terrorism; a party involved in proliferation; a party identified by the U.S. Government as a Denied Party; a party named on the U.S. Department of Commerce’s Entity List in Supplement No. 4 to 15 C.F.R. § 744; a party prohibited from participation in export or re- export transactions by a U.S. Government General Order; a party listed by the U.S. Government’s Office of Foreign Assets Control as ineligible to participate in transactions subject to U.S. jurisdiction; or any party that licensee knows or has reason to know has violated or plans to violate U.S. or foreign export laws or regulations. Licensee shall ensure that each of its software users complies with U.S. and foreign export laws and regulations as they relate to software and related documentation. Contents IdentityIQ Release Notes 1 IdentityIQ Updates and Enhancements 1 Compliance Manager, Lifecycle Manager, Governance Platform Feature Updates 1 Connectors and Integration Modules Enhancements 4 New Connectors 4 Active Directory 6 Amazon Web Services 7 Azure Active Directory 7 Cerner 8 Cloud Gateway 8 Connector Gateway 8 Delimited File 8 Dropbox 9 Duo 9 Epic Healthcare 9 G Suite (Google Apps) 9 GoToMeeting 10 IBMi 10 IQService 10 Mainframe Connectors 11 RACF LDAP and Top Secret LDAP Integration Modules 11 Microsoft SharePoint Online 11 Microsoft SQL Server 11 Okta 12 Oracle E-Business Suite 12 Oracle ERP Cloud 12 Oracle Fusion HCM 12 RSA Authentication Manager 13 Salesforce 13 SAP ERP - SAP Governance Module 13 SAP HANA 14 SAP Governance Application Module - SAP GRC 14 SAP HR/HCM 14 Identity Governance Connector for ServiceNow 14 Slack 15 SQL Loader 15 SuccessFactors 15 System for Cross-Domain Identity Management (SCIM) 2.0 16 Tivoli Access Manager 16 Web Services 16 WebEx 17 Workday 17 Workday Accounts 17 Connectivity Platform and Language Updates 18 Connectivity Dropped Platform Support 20 Dropped/Deprecated Connector Support 20 Important Upgrade Considerations 21 Security Upgrades 21 Encrypted Database Values 22 Task Result Field "Live" 22 Reminder Email Templates 22 jQuery Versions Older Than 3.5.0 22 Angular Upgrade 23 The Commons-collections Library Upgraded 23 Velocity Template Customizations 23 Default Number of Attachments 23 Import File Size Limit 23 FlexJSON Library Removal 23 MySQL JDBC Driver Upgrade 23 Cross-Site Request Forgery (CSRF) Cookies Changes 23 Session Management Update 23 New MySQL JDBC Connection String Option 24 Maximum Number of Former Passwords Stored 24 Cross Site Request Forgery (CSRF) Protections 24 Perform Maintenance Task Lock Handling 24 Identity Attribute Update Processing 24 New Batch Processing Options 24 Certification Revocation Processing 24 AWS Plugin Versions 25 Rapid Setup Integration with Lifecycle Manager 25 Entitlement Update Workflow Approvals 25 IQService 25 PAM Group Refresh Rule Update 25 UI Configuration Filter Options 25 Report Header 25 Supported Platforms 26 Operating Systems 26 Application Servers 26 Databases (On Site) 26 Cloud Platforms 26 Java Platform 26 Browsers 27 Mobile User Interface OS/Browser Support 27 Languages 27 Resolved Issues 28 IdentityIQ Release Notes IdentityIQ Release Notes These are the release notes for SailPoint IdentityIQ, 8.2 SailPoint IdentityIQ is a complete identity and access management solution that integrates governance and provisioning into a single solution leveraging a common identity repository and governance platform. Because of this approach, IdentityIQ consistently applies business and security policy and role and risk models across all identity and access- related activities - from access requests to access certifications and policy enforcement, to account provisioning and user lifecycle management. Through the use of patent-pending technologies and analytics, IdentityIQ improves security, lowers the cost of operations, and improves an organization's ability to meet compliance and provisioning demands. This release note contains the following information: l IdentityIQ Feature Updates l Connectors and Integration Modules Enhancements l Dropped Connector Support l Important Upgrade Considerations l Supported Platforms l Resolved issues IdentityIQ Updates and Enhancements IdentityIQ 8.2 provides new features and capabilities across the product, including Compliance Manager, Lifecycle Manager, the Governance Platform, and Connectivity. Key enhancements in the release include: Compliance Manager, Lifecycle Manager, Governance Platform Feature Updates IdentityIQ 8.2 introduces the following new features or enhancements. Feature/Enhancement Description With Cloud Access Management integration, IdentityIQ will display additional cloud access information for IdentityIQ entitlements which are known to Cloud Access Management. You will have the ability to: Cloud Access l Search/filter entitlements on cloud access information Management Integration l View details of cloud access on related IdenttiyIQ entitlements and roles l Request entitlements and roles through Lifecycle Manager based on cloud access l Generate certifications for cloud access using targeted certification filtering IdentityIQ can receive recommendations from AI Services for access requests for end users. The recommendations are for self-service access role requests. Users will be AI Services Integration presented with access that AI recommends based on their attributes such as manager, department, location, and colleagues. The recommendations and the final decision will also be captured in reporting which will be important for auditors. SailPoint Release Notes 1 IdentityIQ Release Notes Feature/Enhancement Description Privileged Account l The enhancements to the PAM module aim to automate life cycle management and Management (PAM)- governance of privileged access. By establishing ownership of containers, most Container Lifecycle aspects of container ownership can now be automated through joiner, mover, and Management and Multi- leaver lifecycle events. instance/multi-vendor support l Multiple PAM applications across a single or multiple vendors are now supported Rapid Setup is a solution that was added in 8.1 p1 to help customers onboard applications in a quick and efficient manner while following best practices. The user interface was built to be business user-friendly eliminating the need for coding. As we continue to build on top of what was delivered, these new features can be used with or without Rapid Setup. Rapid Setup - attribute l Identity Processing Threshold: This gives the ability to disable lifecycle events to synch improvements and prevent unwanted scenarios by enabling you to set thresholds at a percentage or identity processing