• Fix sync status modal's last successful sync timestamp from displaying a stale value
  • Slack access request notifications display reason for denial.
  • Added PropagationStatus to GroupUsers API in order to view users who have been synced to remote systems.
  • Added PropagationStatus to ResourceAccessUser field in API. API users can see whether the resource user access has been propagated to the remote system.
  • Fixed redirect issue after creating an Azure App.
  • Fixed importing Azure users with no email set.
  • New app users are no longer imported when syncing an individual group/resource.
  • Workday connector can now use custom hostnames
  • Fixed an issue that could cause the list of Ended Access Reviews to contain duplicate entries
  • Fixed an issue in the requests inbox where a request with "Entity's admin" approval wouldn't get listed.
  • Moved Access Rules from Configuration to Inventory
  • (Inventory) Fixed a small issue when in the Resources table in the user's detail page that would cause the remediation flow to fail.
  • Fixed an issue that blocked requesting access for resources that a user had never requested before
  • links in the inventory will now be prefixed with /inventory
  • /groups/:id and /resources/:id now land users in the Catalog
  • Most visited items will also include self-requested items over time. Requesting an item will trigger a view. This will prevent an issue where items would disappear over time if only requested from the search page.
  • Search results now prioritize links to Catalog for all users
  • Removed hashes from settings URL (e.g /settings#idp-and-hr -> /settings/idp-and-hr)
  • Replaced route of IDP configurations from /idp to /idp-and-hr
  • Fixed access paths not being correct for group users with direct and indirect access
  • Fixed group user expiration not showing in access detail modal
  • Pick session furthest from expiring when choosing default session to connect to. Create new session credentials if old one is expiring in less than 3 minutes.
  • Fixed an issue where audit tickets would not be created for requests involving Okta items when the Okta app itself is hidden.
  • Fixed an issue where access rules sync was not working in some self-hosted environments.
  • Fixes bug where editing resource shows unsaved changes confirmation when no changes were made
  • Fixed an issue where require_admin_approval would be missing in the reviewer_stages object through our API.
  • Fix bug where ticket creation fails
  • Reliability improvements to Workday HRIS connector.
  • Fixed tag search on Access Rules create/edit screen not displaying some tags when the tenant has a large number of tags.
  • Added styling updates to tag groups table
  • Fixed a bug that sometimes caused long Okta syncs
  • Performance improvements for ad-hoc IDP/HRIS user attribute syncs
  • Removed logrocket setting

Version 1.0.898

by Stephen
  • Adds support for configuring an unused access threshold
  • Adds field Security Group Name to Workday setup page
  • Fixed requiring an https URL when configuring webhooks for self-hosted customers
  • Fixed an issue that checks sync status of nonexistent entities
  • (Self-Hosted Only): Opal's web pods now have a rolling update strategy to help reduce downtime
  • (Self-Hosted Only): Image and chart version strings now include a -sha component to ensure they're valid semver: e.g. 1.0.897-sha-d34e73b