New Capability: Identity Management

[aaronknoph]

I also noticed we can no longer see all of the identities that have the same role. Can we get that back? It was very useful to see who is going to be affected when you’re adding or removing entitlements.

[kirby_fitch]

@aaronknoph

Here are more opportunities for improvement/ease of use:

||- Click on a role and the new window opens. The Entitlements/Access Profiles button is on the right instead of the left, and Entitlements is selected instead of Access Profiles. Let me save what view I want my default to be.|

• On the Roles page, it should save whether I want the Cards or Table view. I never want the cards view. All it does it take up space.
• If I click into an Access Profile and look at the Entitlements, I can’t sort them by name.
• You can’t edit saved search criteria or columns. Only the name and description.

We work as distributed teams. The Identity Management team re-used other teams’ components to construct this UI. I passed this feedback along to the Roles product team. I’ll let them reply to you here. CC @PGookin

@aaronknoph

• Let me view all Entitlements instead of capping the view at 50 per page.
• On the details page of an identity, it doesn’t save if I choose single or multiple. It always defaults to single
• I pinned 12 attributes, but the pins disappeared over the weekend. It does not save consistently

I’m able to take these ones on:

• Re: the 50 per page, our API standards require pagination to ensure good performance. There’s not much we can do here.
• I’ve created an enhancement ticket asking us to remember your single/multiple preference.
• Pins are remembered via cookie. That works well enough but it could be more durable. We’ve got long-term work in progress to provide a more durable form of storage for user preferences. Sorry about this!

CC @spencer_harder @ben_coble @willcashman

[kirby_fitch]

@aaronknoph

I also noticed we can no longer see all of the identities that have the same role. Can we get that back? It was very useful to see who is going to be affected when you’re adding or removing entitlements.

We did remove the Identities tab when you’re looking at a role from the perspective of an identity. We did this because the context is a single identity and it’s less relevant here than when viewing the role from the roles list.

Could you let us know how you’d use this if we added it back to the identity management UI?

CC @spencer_harder @willcashman

[kirby_fitch]

@gmilunich

Ok, I was just surprised, as I did not expect to be taken back to the initial configuration when I clicked through from the Identity. I look forward to the updates

We’ve put back the old behavior. The Source Link now takes you to the source’s list of accounts. Thanks for suggesting this!

[kirby_fitch]

@patrickboston

One other nice to have would be having the native identifier of the account at the top level attributes table in the individual account view.

This work is done!

[patrickboston]

@kirby_fitch awesome! thanks for the update.

[SPIDMG (Craig Richard)]

When is this going to happen? Not having the ability to sort by Source, or even Entitlements/Roles/Access Profiles under Access, makes the new UI almost impossible to navigate if you have someone that has multiple accounts in a source and hundreds of entitlements.

[aaronknoph]

I just wanted to note that I lost my pinned attributes again. Can that issue get bumped up the list to be fixed? It’s quite annoying to put in the work repeatedly just to have it removed at random.

Also, I don’t see any SAP account entitlements. I can see the AD entitlements fine. Why are the SAP entitlements not showing in the Identity under accounts?

[SPIDMG (Craig Richard)]

My pins kept dropping as well, and I just went from one screen to another, didn’t close browser or anything that would reset the cookie.

[willcashman]

Hi Craig and @aaronknoph,
Are you referring to the attributes on the identity detail page? Can you consistently reproduce the error of attributes not staying pinned?
Thanks
Will

[aaronknoph]

Correct. It can’t really be reproduced manually as it happens randomly. It does keep happening though. I haven’t been able to pinpoint what (if anything) triggers it.

[willcashman]

Ok thanks for responding. I will bring this to the dev team.

Will

[linuswareusafa (Linus Wåreus)]

Previously in the new Identity UI (1-2 weeks ago), admins were able to revoke roles, access profiles and entitlements of users. Now this option seems to have been removed. Is this correct?

It was super helpful for IDN admins to be able to revoke roles/access profiles/entitlements ad-hoc within IDN for users.

(Admins are still able to revoke roles from the Access → Roles UI viewing a single role, but not from the Identities UI anymore as mention above).

[kirby_fitch]

@linuswareusafa

Previously in the new Identity UI (1-2 weeks ago), admins were able to revoke roles, access profiles and entitlements of users. Now this option seems to have been removed. Is this correct?

Hi @linuswareusafa,

This is correct. The feature will be making a return in a couple weeks. We removed it for the time being because we depend on specific logic to determine when something can be revoked. We’re taking some final steps to ensure that specific logic is always correct.

Thanks for your patience. This will be back soon!

[angelo_mekenkamp]

Hi all,

I found a bug on the new identity UI,

I have described it here:

Identity page links broken when opening in new tab

Hi all, I am on the page of an identity and I want to open their identity profile in a new tab. Both clicking on the link with my scroll button or right clicking and choosing open link in new tab will send me to an empty page with link https://{{tenant_url}}.com/ui/a/ [image] Same holds for other links such as manager. Kind regards, Angelo

[gmilunich (Geoff Milunich)]

A client and I just realized that the “Identities” tab has been changed to “Identity Management” in the Sandbox systems, but did not see that change called out anywhere prior.

I came back here and reviewed this topic since it was titled the same, and I see in the first message was updated with the new details, but in going through the comments, there was no mention of the UI Changes, and even in a March 25th comment, the “Identity” was still being referenced as the name for it.

For UI changes like this, what will the process for annoucing those be, and how far in advance of a production roll out will there be? This is important for updating documentation for clients to make sure their system documentation is up to date. This is not as big of a deal with new features, but when something like the navigation paths for existing features changes, that leads to documentation rework. The amount of time between sandbox and production roll out will be helpful to allow the documentation to be redone prior to production end users seeing the change.

[willcashman]

Hi Geoff,
I understand the pain of documentation rework. We try our best to make those changes apparent ahead of time. In the above announcement on Feb 29 it was mentioned,

@kirby_fitch

More About Navigation Bar Changes
We renamed the following navigation items:

1. Identities top-level nav renamed to Identity Management
2. Identity List sub-nav renamed to Identities
3. Access top-level nav renamed to Access Model

We are always looking to improve so any suggestions you may have on how to better make you aware of these changes would be appreciated.
Thanks
Will

[gmilunich (Geoff Milunich)]

I saw that, but I don’t recall that being in the original post, which has been edited 16 times, with the latest being 4/16. If it was, then that’s on me for not noticing.

I don’t have any good suggestions unfortunately. I understand the difficulty in finding the best solution. For my case, the solution may be to find a documentation management tool that allows for token that I can set for paths.

Thanks for the reply.

[kirby_fitch]

@angelo_mekenkamp

I found a bug on the new identity UI,

Thanks, @angelo_mekenkamp - I was able to reproduce and filed a bug for this. Sorry about that.

UIINT-572

[kirby_fitch]

@SPIDMG

When is this going to happen?

Hi Craig,

The change for sorting (and filtering) on Identity > Accounts is complete in a development environment. It’ll be released soon.

Identity > Access will be our next priority with regards to sorting.

Sorry for the wait!