Content

• Forgot Password (with IBM Security Identity Manager only)
• Logging capabilities
• Improvements in the User Interface
• Accessibility compliance

When IBM Security Identity Manager  users of the app forget their login password, they can reset it on their own, if they are provided with the legitimate permissions by their ISIM administrator. To enable this feature in the mobile app, the system administrator must enable the Reset Passwords function.

IBM Security Identity Manager can be configured so that it can enforce a new user to set up the Challenge Response questions when he/she logs in for the first time. To do this, the administrator needs to set to True the enforceCRSetupOnLogin property on the ISIM server.

This property can be updated in the rest.properties file in the $ISIM HOME/data/ directory on IBM Security Identity Manager Software Stack or in the rest.properties file in Configure>Advanced Configuration>Update Property on the IBM Security Identity Manager virtual appliance.

• With enforceCRSetupOnLogin=true, a new user must first set the Challenge Response questions to be able to log in to the mobile app. After the first time, the user is no longer asked to set them in the following logins, until changes are made on the Challenge Response requirements in the ISIM server. 
• With enforceCRSetupOnLogin=false, the new user does not see the setup screen to provide the Challenge Response questions after logging in. The user sees an exclamation mark on the Settings icon, and can select Settings to set the Challenge Response questions. 

Logging capabilities

IBM Security Access Requests provides logging capabilities for debugging purposes. Initially, the user is prompted with a dialog asking for permission to enable logging. After the app is successfully launched, logging is automatically disabled. It can later be enabled by making changes in Settings. The logged events contain information such as "username".

• On Android devices, open File Manager and navigate to Storage. Then, select Internal Storage on your device to find the log file in the Access folder at Android/data/com.ibm.security.identify/files/Access/ISAR_1.0.2.log. If your device is managed by any MDM solution, such as MaaS360, then look for a similar path under the work profile of the device.

      For reference, the location of the log file on Android is like this:

1. Click on Data

2. Click on ibm.com.security.identity

3. Click on Files

4. Click on Access

5. The ISAR_1.0.2.log file is available

• On iOS devices, if you work on MacOS Mojave (for example, v10.14) or below, connect the iPhone to your Macbook and launch the iTunes app. Select the mobile app icon and then select File Sharing->Access->ISAR_1.0.2.log, as shown in this figure.

• If you work on MacOS Catalina (for example, v10.15 or higher), iTunes is integrated in the Finder app. Open finder and navigate to File, as shown in this figure.

• Apple iOS v12 and later
• Android v9.0 and later

• IBM Security Identity Manager v6.0.0.22 or appliance v7.0.1.13 and later
• IBM Security Identity Governance and Intelligence v5.2.4.1 and later

• Norwegian
• English (UK)

• On Android, only the default system fonts are supported.
• When the app is configured with IBM Security Identity Governance and Intelligence:
  • The following issue might happen when special characters are allowed, but a character set is not specified in Identity Governance and Intelligence:  during a change password operation, if a new password that includes special characters is provided, the password rules displayed on the app turn green to imply that all rules are satisfied. However, the operation fails and the "New password does not satisfy the password policy" message is displayed.
• When the app is configured with IBM Security Identity Manager:
  • Search by date is not functional.
  • When the ISIM server is restarted, the current session in the mobile app is timed out. But the user gets a message of session timed out only upon navigating to the dashboard.