Active Roles 8.0.1 LTS - How-to Guide

For detailed information about new features, see the latest Active Roles Release Notes.

This section provides a summary of the new features included in Active Roles.

Major new features in Active Roles Version 7.5:

• Support for Microsoft Modern Authentication in the Active Roles Synchronization Service. Active Roles version 7.5 adds support for Modern Authentication when configuring the O365 Connector or the Azure BackSync operation of the Active Roles Synchronization Service, superseding the former Azure Admin user name and password-based authentication.

  NOTE: Consider the following when using this feature: The SharePoint Online and Microsoft Skype for Business Online services are deprecated and no longer supported by the O365 Connector. After creating a new client secret in the Azure Admin Portal, it may take up to 15 minutes until the client secret is synchronized and can be queried by the Active Roles Synchronization Service when creating the new O365 Connector.

Major new features in Active Roles Version 7.4.4:

• Support for cloud-only users and cloud-only contacts.
• Support for Microsoft SQL Server 2019.

Major new features in Active Roles Version 7.4.3:

• Support for multiple Azure tenants.
• Support for Modern Authentication.

  NOTE: Modern authentication for exchange online properties is included as a preview feature in this release. The feature is tested and included in the product as a supplement to Basic authentication. One Identity reserves the right to provide limited support to this feature.

Major new features in Active Roles Version 7.4.1:

• Additional Hybrid Directory features:

  • Support for Office 365 Group CRUD activities.
  • Support for Office 365 roles and reporting for Office 365 users.
  • Support for Exchange Online Mailbox Properties for Office 365 users in Federated and Synchronized environment.
• Support for provisioning objects in SaaS products.
• Separate configuration and management history databases during installation or in-place upgrade, confirming to Microsoft standards and best practices for replication.
• Support for Azure AD Graph 1.6 for Active Roles Synchronization Services.
• Use of Group Managed Service Account (gMSA) for Active Roles Service account.
• Bulk attribute operations for multiple users.

• Reset the password for multiple users at one time.

• Solution Intelligence for Active Roles.
• Log in to MMC interface through 2FA authentication.
• Support for remote mailbox creation and modification.

  NOTE: The ‘Remote mailbox migration (RemoteMailbox.ps1)’ script has been provided as a sample script only, to illustrate the steps required, and should not be used as-is in a production environment without modification and enhancement. The use of security credentials within a script in clear text should never be considered appropriate or secure. In testing this script, care and consideration should be given to the authentication and use of credentials, and clear text credentials should not be left in the script once testing is complete. For more details refer the KB article: https://support.oneidentity.com/kb/310525 .

• Support for Federated authentication feature.
• Support to provide product feedback from the Web Interface.

Enhancements

• Support for the multiSubnetFailOver feature of MS SQL Server to maximize internal availability.

• Support for Archive Mailbox-Exchange Online functionality.

• Support for the Security Identity Mappings functionality as available in Active Directory Users and Computers (ADUC) Snap-in.

• Workflow enhancements that enable you to add Azure or Office 365 modules in PowerShell and run the Office 365 services such as Skype for Business, Azure AD, Azure RM, AZ, and Sharepoint Powershell scripts within existing Active Roles workflows.

• Restrict MMC interface access to users, by enabling the MMC Interface access settings using the Configuration Center. By default, on installing Active Roles, all users are enabled to log in to the MMC interface. You can now enable the MMC interface access setting to restrict users from accessing the MMC interface.

• Enhancement of SPML operation to get ObjectSid to retrieve the value in the SID format along with the base64Binary format.

• Creation of OneDrive for Azure AD users using OneDrive Provisioning Policy.

• Configuring secure communication for Active Roles Web interface using Force SSL Redirection.

This section provides a summary of the new features included in Active Roles Version 7.3.

Major new features in Active Roles Version 7.3:

• Support for One Identity Hybrid Subscription
• Support for Hybrid Directory Mailbox Management

• Support for Microsoft SQL Server 2017

• Support for connecting to One Identity Starling, the Software as a Service (SaaS) solution of One Identity through Active Roles

• Integration of Starling Two-factor Authentication with Active Roles through the Web interface

• Support for customizing Microsoft Office 365 license related operations on User provisioning and deprovisioning

• Enhancements

  • Display the number of members in a Group in the Web interface

  • SPML Extension Enhancement to Modify Shared Mailbox User permissions

  • Back Sync Improvements

  • Sync Service enhancements

  • Password generation policy enhancement
  • Web interface security enhancements
  • Enhanced Web interface accessibility for disabled users

The following features are new in Active Roles as of version 7.0

• Web Interface has been redesigned for greater clarity and ease of use, to ensure consistent look and feel, improve user experience, and simplify and streamline management tasks.
• A new component, Synchronization Service, performs data synchronization and replication tasks to enable user, group, or recipient management across various on-premises systems and in the cloud.
• Integrated administration of users and mailboxes in Exchange resource forest environments, with the ability to create and administer mailboxes by managing mailbox users in external forests.
• Integrated administration of Lync Server users in single and multi-forest environments, with the ability to enable, disable or re-enable users for Lync Server and administer Lync Server user properties.
• Various improvements to Active Roles workflow, including new activities to help access and modify workflow data context at run time, new activity options, and workflow scripting capabilities.
• Support for Exchange 2010 remote Shell removes the need to install the Exchange 2010 Management Tools on the computer running the Active Roles Administration Service.
• Active Roles Configuration for Hybrid Environment.
• Azure AD /Office 365 Object Management in Hybrid Environment.
• Microsoft Office 365 License Management.
• Support for Microsoft Windows Server 2016.
• Support for Microsoft SQL Server 2016.
• Support for Microsoft Exchange 2016.
• Support for Microsoft .Net 4.6.2.
• Active Roles facilities a new attribute namely 'OperationInitiatorSid' under the $Request object, which provide the SID of the initiator who requested the operation. This enhances the current Active Roles - Change Auditor integration capability to display the correct initiator information.
• Support for managing Skype for Business through Active Roles.
• Active Roles in-place upgrade enhancements.
• Limited support for Exchange Online.
• Management of Azure AD Contacts.
• Management of Azure AD Distribution groups.
• Enhancements to Azure Active Directory and Office 365 functionality:
  • Azure License Reporting.
  • Visual indicator for Azure configuration status.
  • Granular license customization.
  • Support for synchronized identity environments.
  • Azure Application permissions enhancements.
  • Support for creating users, groups, and contacts in Azure/Office 365 through SPML.