IBM Support

What's new for IBM Security Verify features in November 2024

Newsletters


Abstract

New IBM® Security Verify features that were released in November.

Content

Key updates
Note: No features were released in October.
These new features might not be available in your location yet.
  • A list of features that you can request is now available. See Requestable features.
  • As a security enhancement, IBM Security Verify requires new entitlements to view the client secret. See Security updates for entitlements and Access entitlements.
    Note: To minimize the impact, update your custom admin roles and API clients with the new entitlements according to their needs before the incoming client secret entitlement changes go into effect.
  • The IBM Security Verify Flow designer now supports Trace view feature that displays trace logs of a published flow to debug Function tasks using a time-bound Trace URL. See Managing Trace view for further details.
  • Other features, enhancements, and announcements
  • Changes were made to the PAM system configuration file for IBM Security Verify Gateway for Linux and AIX PAM. A new argument 2fa_group={unix_group_name}was added and a new value password-and-totp-or-device was added to the auth_method argument. See The PAM system configuration file.
  • IBM Security Verify authentication event attributes added Device trust within data.subtype when you generate reports. See Authentication event payload.
  • The Admin activity report now supports a new event, consentprovider. See Admin activity management event detail.
  • Added support for the following applications.
    • No new applications were added.
Notifications
  • Phone numbers and email addresses are partly obscured when presented in 2FA choice lists in the following on-prem products.
    • IBM Security Verify Gateway for Linux PAM 1.0.7
    • IBM Security Verify Gateway for AIX PAM 1.0.4
    • IBM Security Verify Gateway for RADIUS 1.0.12
    • IBM Security Verify Gateway for Windows Login 1.0.11
  • The installation process for the following on-prem products removes the access of Windows Users group from the installation directory.
    • IBM Security Verify Bridge 1.0.16
    • IBM Security Verify Bridge for Directory Sync 1.0.13
    • IBM Security Verify Gateway for RADIUS 1.0.12
    • IBM Security Verify Gateway for Windows Login 1.0.11
  • New RSA and ECDSA certificates are being issued for *.verify.ibm.com hostname on 05 November 2024. See Product requirements.
  • Enhancements were made for password expiration for on-prem agents that use the Verify Bridge to connect with Verify. If password reset is enabled on your Verify tenant and you log in with an expired on-prem password, you are now redirected to the change password flow. If password reset is not enabled for your tenant and you log in with an expired on-prem password, you receive and expired password message instead of an authentication failed message.
  • Generic User Count and CSV Download features are now deployed in all environments including Australia, Canada, and Japan. See Generating a users list report and Downloading a CSV report.
  • When a POST request is sent to the /oidc/endpoint/default/* and /v1.0/endpoint/default/* endpoints, the parameters must be sent in a POST body and not in the query parameters. Enforcement of this restriction begins 20 July 2024 to ensure that security standards are followed.
  • The Subscription Usage Dashboard is currently still in preview mode. Some inaccuracies were discovered in the usage statistics. The levels of consumption for your subscriptions might be incorrectly displayed in the dashboard. The issue is being worked on.
    Note: The inaccuracies in the data that is displayed do not affect your billing in any way.

Related Information

IBM Documentation

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSCT62","label":"IBM Security Verify"},"ARM Category":[{"code":"a8m0z0000001jljAAA","label":"Security Verify"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)"}]

Product Synonym

IBM Cloud Identity;IBM Security Verify;Verify;Verify SaaS

Document Information

Modified date:
11 November 2024

UID

ibm17175404

Page Feedback