2023.4.10

Changes in Veza release v2023.4.10

Integrations

New features

SaaS Misconfigurations for Salesforce: A new Salesforce Misconfigurations report offers insight into common identity risks for SFDC. The queries in this report can be customized or used out-of-the-box, including:

• Salesforce Users not tied to an identity provider

• Salesforce Organizations without organization-wide MFA enabled

• Salesforce profiles that bypass organization-wide MFA

• Salesforce Organizations with Security Health Check Score marked poor or worse

• Salesforce security health check risks rated as high or medium risk

• Salesforce Organizations without Setup Audit Trail enabled

Use of the misconfigurations report requires that the Salesforce integration has the View Health Check permission.

GitHub Integration (Early Access): A new Veza-built integration enables the discovery of user, repository, team, and role entities and attributes for GitHub, with support for GitHub Enterprise Cloud and Server.

• The integration includes automatic cross-service connections for Okta and AzureAD, with the option to add custom identity mappings for other external identity providers.

• Built-in Saved Queries for GitHub are now provided for customization and use in reports.

Bug fixes

Corrected an issue when attempting to gather Active Directory custom attributes containing timestamps.

Insights

Enhancements

Risks dashboard: The Veza dashboard now includes an Access Risks section with a trend chart and summary of active risks, and a shortcut to the main Access Intelligence > Risks overview page.

Risks enhancements: For improved clarity when risks have similar names, the Access Intelligence > Risks page now includes the name of the original query each risk is a result of, along with the risk's entity type.

• You can now filter to show risks marked as Exceptions

• A new column shows risk Exception status

• The Risk Queries section is renamed to Queries with Risks

• The Queries with Risks section now includes the option to manage exceptions, set query risk levels, or start a Graph or Query Builder search.

• The Home page is now Dashboards. Access Intelligence > Reporting is now Reports. Built-in report names are simplified for readability.

Bug fixes

• Changes to built-in Report names are no longer reverted after platform upgrades.

Workflows

New features

Added a preview API operation POST /api/preview/notifications/email_templates:test_template for testing Workflow reminder emails. The endpoint enables sending a preview email with:

• a custom template

• an existing template.id

• the current template for any template.usage

• the Veza-provided default template for any template.usage

Bug fixes

• Corrected an issue where certification results were not as expected when applying filters on nested entity types.