Features and enhancements in IBM Security QRadar SOAR Platform 51.0.1.0

Playbooks loop enhancements

You can now design loops, or 'go back' options in playbooks, where the loop involves the playbook going back to a previous node as the playbook runs.

Previously, if a playbook contained a loop, a loop detected error occurred at runtime because after tasks were completed, they were not re-opened, and therefore the playbook was unable to complete the loop successfully if it returned to a task.

For more information, see New in 51.0.1.0 Adding a playbook loop.

SOAR for MSSPs add-on enhancements

For MSSP deployments, you can now add and manage users and groups in child organizations.

Previously, user and group management was done in the configuration organization. Now, you can add users and create groups specific to child organizations.

For more information, see Changed in 51.0.1.0 Setting up MSSP users and permissions.

Analytics dashboard enhancements

You can configure the week start day for widgets in the analytics dashboard when the time period is set to week.

A new configuration variable, analysis_start_day_of_week, provides the ability to change the start day of week when the time period is week in the Incidents Over Time by Type, New And Open Incidents, and Custom widgets. If you do not set the analysis_start_day_of_week configuration variable, there is no change to the existing functionality.

For more information, see Reports and analysis.

Support for DUO two factor authentication

Because of changes to DUO two factor authentication support, whereby the traditional prompt support will be removed on 30th March 2024, the IBM Security QRadar SOAR Platform includes an update to support the DUO changes. With this update to the SOAR Platform, you can use the universal prompt in the DUO settings.

For more information about two factor authentication in the SOAR Platform, see Changed in 51.0.1.0 Configuring two-factor authentication.