Identity Manager 9.2 - Release Notes

Under certain conditions, hyperlinks are not fully displayed in the Mail Template Editor.

In rare cases, an attempt was made during process handling to enter the same process more than once in the process display (DialogProcess table). This led to a primary key violation and consequently to the error.

Error displaying dates in the Where clause wizard when they are given with null values.

When editing the connection string in the connection dialog, the first change is ignored.

In certain cases, an error occurs when database queries are run via the object layer.

Error message: the Size property has an invalid size of 0

When installing or updating One Identity Manager, custom files were saved in the wrong subdirectory.

In the Script Editor of the Designer, the script list menu is too narrow.

Error marking a completed process step for deletion or archiving.

Error installing the application server due to Microsoft Edge WebView2 dependencies.

The administrative user selected on the System administrator permissions page is not used in the Configuration Wizard.

Cumulative transport packages are not displayed correctly in the transport history.

Creating and setting up a One Identity Manager database requires an installation user with a dbcreator server role, even if a previously created database is going to be used.

Process collection via HttpJobProvider does not work if SSL is configured for use by the proxy server.

In the Designer, if column definitions cannot be loaded in the Schema Editor if they were disabled via a preprocessor condition.

Inconsistencies in the definition of DBQueue Processor task dependencies.

In the Designer, the data source of a key value is not populated correctly in the Language Editor.

Under certain conditions, when the DBQueue Processor replaces processes, entries are retained that reference processes that no longer exist.

When changing the parameter type from calculation to user query, the Table column (calc.) column for the parameter (DialogParameter.UID_DialogColumnCalculate) is not cleared.

Incorrect display of historical assignments in reports if a database view is used as table.

If the Database Agent Service stops when DBQueue Processor tasks are being compressed, data is lost.

The language code nb is missing.

Incorrect conversion of time values with a time of 00:00 and a date format of DateTime.

In the documentation about the Docker container for the One Identity Manager Service, the CONFIGFROMDB parameter is insufficiently described.

Under certain conditions, there may be orphaned entries for deleted machine roles in the ModuleInfo.xml file of the CCC module after updating.

An error sometime occurs in the system configuration overview.

Error message: Divide by zero error encountered.

In the One Identity Manager Installation Guide, port 443 is missing from the list of communication ports.

Watch triggers are not created if a column for different database views is marked for logging data changes and the views are based on the same base table.

In rare cases, a schedule is triggered several times.

The Database Compiler stops responding when it is determining compiler tasks.

An error occurs in Designer when assigning permission groups to applications.

Error message: Object reference not set to an instance of an object.

An error occurs when calculating the display pattern if different data types are used.

Error message: Conversion failed when converting the nvarchar value '<value>' to data type int.

Users from time zones with UTC+00:00 are not able to log in to the Manager web application.

Transport by change label does not transfer the description and comment of change labels.

In reports created with the Report Editor, filters and summaries contain incorrect results.

The comparison of columns with date and time values does not always work correctly.

Error handling processes that use the ModifyFileAccess_Universal process task.

Error message: Cacls.Exe failed with return code 122 ("The data area passed to a system call is too small").

When upgrading from One Identity Manager version 8.x to a newer version, an error may occur when compiling the type-safe database model.

Error message: Keyword is not valid as an identifier.

Error saving an object change as a planned operation in the Manager if the Manager was started via an application server.

Entries in the Job queue are often marked for recalculation. This blocks Job queue processing.

The DBQueue Processor task QBM-K-JobqueueOverviewInvalid has now been replaced by a trigger.

Performance issues testing for multi-column uniqueness if objects are added to the One Identity Manager database in bulk.

It is not possible to assign SAP roles to SAP user accounts in the Manager web application.

Error importing data into the QBMDBPrincipal table if it results in duplicate entries relating to database users or login names.

Under certain conditions, recalculation tasks for the DBQueue Processor that relate to the Target System Base Module (TSB) are not automatically deleted.

Error displaying the QBM_TransportToHistoryDatabase process in the Process Editor if the SQL processing server server function is assigned to two Job servers or more.

Changes to templates or formatting scripts in the Designer are not always saved in the database.

An incorrect warning is displayed when opening a password policy in the Designer.

Error if DialogDatabase.EditionDescription is marked as isBlobExternal.

Filters generated in the SCIM connector may have an unnecessary bracket level. Some SCIM providers return a Bad request status due to these filters.

The Web Portal does not use the correct product names in the shopping cart.

In the Web Portal, languages available for selection are not displayed in the respective language.

The Docker container for the API Server does not log by Application Insights.

The index in the Web Portal enters into an endless loop.

In the Web Portal, clicking outside the request parameter prompt cancels the request.

In the Web Portal, an error occurs when checking the shopping cart if the requested product has a request parameter that contains a list of permitted values.

An error occurs in the Administration Portal when saving global changes.

When approving delegations, an error occurs when a custom approval policy is used.

Error testing request parameters in the shopping cart if the parameter contains a limiting condition with a variable.

In the Web Portal, adding products to the shopping cart does not work.

In the Web Portal, the request workflow displays withdrawal of an additional approver incorrectly.

If a user tries to log in to the password reset portal with an expired passcode, they get the wrong information.

Under certain conditions, the Web Portal does not display the rule violation testing for assignment requests.

In the Web Portal, under certain conditions, an error message is displayed during approval of an attestation case.

In the Web Portal, if new requests are made through peer groups or reference users, the products selected through organizational structures are not added to the cart.

Under certain circumstances, editing attestation policies in the Web Portal deletes the conditions of the attestation policy.

The Identity Access Comparison report cannot be generated in the Web Portal.

Under certain conditions, the Web Portal's search function does not work and generates an error.

The Web Portal does not display all the details about a rule violation for a product that causes a rule violation when requested.

In the Administration Portal, the values true and false are not translated.

Stores assigned to shopping centers are not displayed in the list of editable stores in the Web Portal.

The API Server creates a new session for each request if the same authorization token is used.

Request parameters of type query are handled correctly only if the query column is either XObjectKey or a primary key column.

Registering a new user in the Password Reset Portal fails.

The Web Portal allows delegations to be created without a time limit.

The search in the Administration Portal does not correctly handle upper and lower case letters.

The process view in the Operations Support Web Portal displays all the process steps of a process with the same name.

In the VI_Edit_Multiselect component of the Web Designer, values cannot be cleared.

Displaying an identity's main data causes an error in the Web Designer Web Portal.

In the Web Designer Web Portal, it is not possible to unsubscribe a product.

The Web Designer Web Portal does not show translation values in some menus.

The Web Designer Web Portal does not identify a rule violation when the shopping cart is checked even though mandatory parameters are not populated.

After logging off from the Web Designer Web Portal, redirection to the configured URI does not work if Send redirect URI for the application is configured in the OAuth/OpenID Connect configuration.

When an approver opens and approves a request in the Web Designer Web Portal via a link, any existing valid-until date is deleted.

Code copied to customized functions of the Web Designer is reformatted.

The handling of outstanding Exchange Online email users generates unnecessary provisioning tasks for Azure Active Directory groups.

Error synchronizing against the generic database connector when the synchronization server is set up on a Linux server.

Error message: The time zone ID 'FLE Standard Time' was not found on the local computer.

Error synchronizing with the One Identity Manager connector if virtual schema properties with the same name are used in schema types with the same name.

Error message: Error compiling synchronization project. An item with the same key has already been added.

Different OneLogin user account properties are changed by each synchronization.

Performance problems synchronizing SharePoint Online with a lot of site collections.

In the Launchpad, an end user (database user) cannot enable offline mode for a target system.

Error reading data with the CSV connector when there is a remote connection to the CSV system.

Conversion error displaying Azure Active Directory objects in the target system browser.

Error message: [1777022] Schema property (extension_<guid>_description@User) only accepts data of type (System.String). The value loaded (["<user>"]) is however type (System.Text.Json.JsonElement).

Memberships in system entitlements that are marked as outstanding are in effect in the One Identity Manager. This means that the system entitlements in One Identity Manager cannot be deleted.

In the schema extension file of an SAP R/3 schema, if a function is defined with optional parameters, the properties of each single object are populated with empty values during synchronization. However, in the target system browser, the properties are provisioned correctly.

The One Identity Manager Administration Guide for Connecting to Unix Based Target Systems does not sufficiently describe the minimum permissions.

Insert operations take unexpectedly long if the SCIM provider does not support searching for endpoints with filters.

If the assignment of a BI analysis authorization to a BI user account is deleted in One Identity Manager, the provisioning process does not remove the assignment from the SAP R/3 system.

The One Identity Manager Password Capture Agent Administration Guide does not describe the DeleteJob parameter.

The One Identity Manager Administration Guide for Connecting to Exchange Online does not sufficiently describe the permissions for app-only authentication using a self-signed certificate.

If several synchronization projects exist for a target system, the provisioning tasks might be generated incorrectly for the wrong (inactive) project.

If a Microsoft Teams team is archived, the associated SharePoint Online page can still be edited.

The One Identity Manager Administration Guide for Connecting to Microsoft Exchange does not sufficiently describe the required permissions.

SAP user account assignments to SAP roles are not updated correctly if the structure of the SAP roles changes.

When using PowerShell module v3, an error may occur during synchronization with Exchange Online.

Error message: You must call Connect-ExchangeOnline before calling any other cmdlet.

When templates for mail-enabled Azure Active Directory groups are reused, it changes the AADGroup.IsSecurityEnabled and AADGroup.IsMailEnabled columns.

The communication data of SAP user accounts is not read correctly from systems with business partner functionality. This happens if the user account is linked to an HCM person (identical personnel number) and separate address and communication data exist.

Error accessing schema properties in the central database of synchronization projects for system synchronization that map M:N schema types or key resolutions.

Error message: The system (...) does not have a data store.

A patch with the patch ID VPR#36755 is available for synchronization projects.

Sometimes the object properties of certain types of SAP R/3 schema extensions are all read correctly in the target system browser, but during synchronization not all properties are accessed.

Missing customizer for OneLogin user accounts (OLGUser table).

An error occurs if the value $null is returned when running a script with the ExecuteScript process task of the PowerShellComponentNet4 process component.

Error message: Object reference not set to an instance of an object.

The OLG_PersonAuto_Mapping_OLGUser script references a non-existing column.

Error message: Column UID_TSBAccountDefUser does not exist.

Assigning group membership fails in an AIX system if there is no permission to use the bin/mv command.

Error synchronizing owners of Azure Active Directory app registration if the owner is a service principal.

A patch with the patch ID VPR#36799 is available for synchronization projects.

Error loading a synchronization project.

Error message: [System.TypeLoadException] Method 'TryConvertFromString' not found.

Error synchronizing Notes Admin4 databases and certificate requests.

Error message: Error running synchronization step (AdminRequest) of synchronization configuration (Initial Synchronization). Quota (2) exceeded for method (Delete object).

A patch with the patch ID VPR#36831 is available for synchronization projects.

Delta synchronization does not enter the group type of Azure Active Directory groups correctly.

Provisioning of Active Directory groups sporadically fails when memberships and the member are deleted at the same time.

Error synchronizing an SAP R/3 environment if the synchronization configuration contains a schema extension that uses a Where clause longer than 72 characters in the table definition.

Connection error in the SCIM connector when using authentication based on a client certificate, even though the certificate has been validated as correct.

The overview form for Azure Active Directory user account displays disabled group memberships.

In Azure Active Directory, loading user accounts without a picture can cause an ImageNotFound error.

When loading faulty SAP user accounts, the synchronization quits instead of logging the faulty objects and continuing the synchronization.

Under certain conditions, Active Directory synchronization fails with the error: Value cannot be null.

If booking permissions are processed for an object that still has an element in Microsoft Exchange that is no longer a recipient itself, the error You cannot call a method on a null-valued expression occurs.

Reading the Tenant.AllowedDomainListForSyncClient fails if the data for this property exist in SharePoint Online.

Error message: Object cannot be stored in an array of this type.

Error synchronizing SharePoint Online when a site collection contains a large number of sites.

Error message: The request uses too many resources.

A patch with the patch ID VPR#36961 is available for synchronization projects.

When synchronizing an SAP R/3 environment with revision filtering, not just the changed user accounts are loaded, all of them are.

Error message: Object list of type USER is not able to read property BAPIUCLASS~SYSID. Subsequent loading of all single objects will affect performance.

A patch with the patch ID VPR#36970 is available for synchronization projects.

When loading a SCIM schema with schema extensions, the list of names of the schema extensions included is empty.

A patch with the patch ID VPR#36985 is available for synchronization projects.

Error in the generic database connector for Oracle Database when reading large numerical values from a table column of type NUMBER(20).

Error message: Arithmetic operation resulted in an overflow

Error loading objects of the ExternalEmail schema type when the entire Google Workspace customer assigned as a member to a Google Workspace group.

Error starting provisioning if there are object references for the changed object that were ignored during synchronization.

Error message: Unable to cast object of type 'System.Byte[]' to type 'System.IComparable'.

Incorrect conversion of date values in the generic database connector.

Error in CSV connector when handling object references.

Synchronizing memberships does not clean the synchronization buffer if Ignore case is enabled on the value comparison rule.

On the main data forms of user accounts the values in the Category property are not displayed correctly.

Delta synchronization of Azure Active Directory user accounts without a manager fails.

In the attributes parameter of an HTTP GET request, the names of properties defined in an overlay file are not formatted according to RFC.

Error in the RACF connector if the RemoteConnectPlugin is used.

Error in the template for OLGUser.status.

SAP schema extensions with nested Where clauses in the table definition do not return the expected data sets.

The log data from the database is not presented in the correct order in the system journal.

Arbitrary changes to the SAPComSMTP.SMTPAddr column definition cause an error.

The default email address column template for identities (Person.DefaultEmailAddress) does not format values if neither the Microsoft Exchange Module nor the Domino Module are installed and active.

If an approver can approve several approval steps at the same approval level, approval that is granted is not accepted although the QER | ... | ReuseDecision configuration parameter is set.

Base objects for events on PersonWantsOrg and AttestationCase are not correct.

The master data form for identities might prevent some interface elements in the Manager from being hidden due to an external error.

If a product is moved to another shelf, renewal requests are not reset.

In some cases, an error occurs when transporting approval workflows.

Error message: PWODecisionStep: Write permission denied for value "CountApprover".

Product owners of Exchange Online distribution groups are not removed from the application role.

Viewing permissions for VI_4_ALLUSER_LOOKUP missing for Azure Active Directory service principals to request Azure Active Directory role eligibilities.

In the Manager, the date for creating user accounts (Person.TechnicalEntryDate) cannot be set to the person's start date (Person.EntryDate).

Permissions for the product owner vi_4_ITSHOPADMIN_OWNER missing for various tables.

In the Manager, identities cannot be deleted or inserted in the results list of inactive identities.

The auxiliary table for request procedures (PWOHelperPWO) sporadically contains duplicate entries.

Performance issues when processing DBQueue Processor tasks.

On the overview form for an SAP composite role, the status of an assigned single role marked as pending is not displayed correctly.

If exception approval is not permitted for a company policy, the Checked (IsDecisionMade), Decision on (DecisionDate), and the reason (DecisionReason) properties are no longer automatically set when policy violations are calculated.

If products with a validity period (Max. days valid) are requested and the valid-until date is earlier than the end of the validity period, the valid-until date is automatically extended to match the length of the validity period.

The VI_MassDeleteDelegate script fails with an error message if one of the requests has the status Canceled.

Error in the QER_PSlotResetOnInvalidRoot procedure.

Sporadic error in the Created by QBMDBQueueProcess: handle object update for object type ITShopOrg process. After being re-enabled, the process runs without errors.

If a proxy view is attested, meaning, memberships in system entitlements (UNSAccountInUNSGroup) and the content of the snapshot is restricted to Object references: related objects 1-3 only by the attestation procedure, then the snapshot in the attestation procedure contains only the proxy object (UNSAccount). Other properties of the associated base object (for example, AADUser) are not displayed.

If the QER | Attestation | ReuseDecision configuration parameter is set, approval granted by a previous approval step is not accepted if an intermediate approval step was denied approval.

The compliance check in the shopping cart causes a rule violation for a subidentity although the subidentity did not break the rule.

Calculation tasks are set for the compliance check when identities are added if the rule condition applies to all identities.

Error importing enabled company policies with the Database Transporter.

Error message: QERPolicy: Write permission denied for value "IsWorkingCopy".

When calculating the risk index for an object, # is entered as Changed by (XUserUpdated).

Incorrect sort order in the Request History report in the Manager.

Error in the formatting script for AOBApplication.NextRunDate when determining a valid date value.