Yes! It has returned and functions flawlessly! THANK YOU FOR THE EFFORT ON THIS! I’m happy again!
@Bakhari - Great, thanks for the confirmation!
Soon, we’ll have an update that fixes how we present multi-valued attributes!
We’ve added an enhancement that addresses concerns with how attributes were presented on Identity > Details
and Identity > Accounts > Account Detail
.
Identity > Details can now defaults to a single column view:
Identity > Details
and Identity > Accounts > Account Detail
both present multi-valued attributes in a new way. Each value is on its own line. Additionally, you’re able to drill in when there are more than 5 values.
@WyssAJ01 @ethompson @Bakhari @ccarlton @angelo_mekenkamp @gmilunich @Sushantmr @akasper
Does this remove the account from the system like AD or just remove the information from SailPoint?
Hi @dpetebrown ,
Remove
removes the account from the system. It does not provision a delete command. We’ll add a Delete
button in the future.
Sorry… forgot to update
Had a chat with Will last week and I’ve got to admit, I’m slowly starting to come around to liking the new UI - especially after tonight’s addition of “single” column option
Also, with all the Identity attributes being listed (even when they are null), I realised it makes comparison a lot easier!
Re sort - yes, the list of the attributes you listed will cover all bases.
If you really want to get fancy, in the Entitlement and AccessProfiles views, I’m sure some people would benefit from a mutli-column sort, namely (1) Source Name + (2) Name
Re endpoints for testing - oh ok, yeh, would love to automate some of that!
Thanks again.
Thanks for the follow-up, @akasper !
I love the new single-column too. We’re excited to watch usage and see who uses each of the two options!
Hi Kriby,
I have a few notes:
-
Under Access when I click on the Role, or Access Profile, there is no option to edit.
-
When you click on the role, and then on Access, the option to choose Entitlements or Access Profiles is all the way to the right and Entitlements is selected automatically. I think moving it to the left and having Access Profiles selected as default (or at least give us the option to save our preference) would be better.
Thanks for the feedback, @aaronknoph.
A common input from administrators in regards to the previous UI was a disdain for being taken out of the Identity UIs to another part of the product when clicking on an access item. We provided relevant information in-band to address that complaint. We’re considering a dedicated Edit
control that will take administrators to the role, access profile, or entitlement configuration UIs when it’s desired.
The team shares UI components with the Access Model team here. I’ll let @PGookin address this concern. Thanks!
Thanks for putting together the link so people could get time with Will to discuss the UI. That appears to have been really helpful. I was unfortunately out of town and did not get a chance to, but I have been reviewing the enhancements and they seem to cover most of the important items.
@kirby_fitch I did want to mention that while I was looking at them, I noticed a bug with the identity Details UI. If you click into a user to view their details, then go back to the list screen by clicking the X button, the “Username” and “Lifecycle State” columns are no longer there. To get them back, you need to select another column from the button next to Cards/Table, such as status, then both other columns come back, or you need to go to another page completely and then back.
To reproduce:
-
Go to the Identity List
-
View that the Lifecycle State and Username fields are present as columns
-
Click on any user to view their details.
-
Click the X in the circle in the upper right to close the Identity Details Page and go back to the table view.
-
Observe that the “Username” and “Lifecycle State” columns are no longer shown.
-
To get them back, click on “Cards” then click back to “Table” and the columns will be shown.
I verified this in my Ambassador tenant and a client sandbox tenant.
Yes. It is. If I am modifying an access profile, this makes it much easier to find the one I need.
Thanks, Geoff. I was able to reproduce it. I filed a bug ticket. We’ll get this fixed for you. Thanks again for the report, and sorry about that!
@kirby_fitch I noticed another thing when working with the UI today. When I go through the Identity → Accounts → Source, it opens the Source EDIT Base Configuration page, not the source details page, which I think is incorrect.
To reproduce:
-
Log into IDN (Dev tenant with Demo Data used)
-
Go to Admin → Identities → Identity List
-
Select a User. For Example: Amanda Ross
-
Click on Accounts to view her accounts. Notice she has 3 + IDN.
-
Click on the link for the “HR” Source.
At this point, you will be taken to the following URL:
.identitynow-demo.com/ui/a/admin/connections/sources/<SOURCE_ID>/menu/base_configuration
This is the URL of the base configuration, not the source details page that you would get first if you navigated to the source from the Admin → Connections → Sources → HR, which would be this URL:
.identitynow-demo.com/ui/admin#admin:connections:sources:<SOURCE_ID>:accounts
Is that the correct behavior for this to be directed back to the base configuration? I noticed this in a client tenant then tested with a developer tenant with Demo Data and reproduced it in both.
Hi @gmilunich, this is expected behavior. We’ll soon be rolling out a new Source > Accounts UI and will aim to re-direct to that once it’s available.
Ok, I was just surprised, as I did not expect to be taken back to the initial configuration when I clicked through from the Identity. I look forward to the updates
The pinning of attributes doesn’t seem to be working? I’ve pinned a few that I look at often for RBAC stuff - title, manager, employee type etc. But it seems like every new day or 2 all the pins reset to whatever is default.
My apologies if this bug has been reported already, there are sooo many comments in this thread.
@renuka_sp — the pins are cookie-based. Are you or some process on your browser clearing your cookies on a regular basis?
I don’t know if you found answer to this. However, You could use this API:
PATCH /v3/accounts/:id
[
{
“op”: “replace”,
“path”: “/identityId”,
“value”: null
}
]
This will function similar to the remove function basically un-correlate the account from an identity.
This is different than Remove. Remove deletes it from the ISC database. You’re then able to re-aggregate the account to see it added to ISC as if it were being added for the first time.
We did add a Remove endpoint as well. No need to work around the issue!
This is, however, a great way to move an account back to uncorrelated.
Here are more opportunities for improvement/ease of use:
||- Click on a role and the new window opens. The Entitlements/Access Profiles button is on the right instead of the left, and Entitlements is selected instead of Access Profiles. Let me save what view I want my default to be.|
- On the Roles page, it should save whether I want the Cards or Table view. I never want the cards view. All it does it take up space.
- If I click into an Access Profile and look at the Entitlements, I can’t sort them by name.
- Let me view all Entitlements instead of capping the view at 50 per page.
- You can’t edit saved search criteria or columns. Only the name and description.
- On the details page of an identity, it doesn’t save if I choose single or multiple. It always defaults to single
- I pinned 12 attributes, but the pins disappeared over the weekend. It does not save consistently