2023.5.8

Changes in Veza release v2023.5.8

Integrations

Enhancements

• Custom Identity Mappings now cover more scenarios where users from an integrated identity provider can assume local user accounts in other integrations:

  • Administrators can now disable default IdP User > Local User mapping by email when adding a custom mapping for an integration.

  • Administrators can now configure up to four property matchers for custom identity mapping based on possible combinations of user name and email. If any matcher is valid, Veza connects the IdP and local identities.

• AzureAD Groups now have additional filterable attributes:

  • allowExternalSenders, classification, description, groupTypes, mail, mailEnabled, onPremisesLastSyncDateTime, preferredDataLocation, preferredLanguage, hasMembersWithLicenseErrors, hideFromOutlookClients visibility.

  • The properties allowExternalSenders, hideFromAddressLists & hideFromOutlookClients are also collected for groups where securityEnabled is "true."

• To differentiate entities with the same name that exist in more than one integrated data source, entities added with OAA connectors now have the Datasource Name filterable attribute.

Bug fixes

• Added retry logic and improved error handling for the Box integration.

• Last login dates are no longer populated for Salesforce and Google users who have never logged in.

Search

User experience updates

• "Raw" or "Configured" permission labels (as shown when explaining Effective Permissions) now reference "System permissions." Some search terms are also renamed or relocated:

  • Query modes (Early Access): "Raw" query mode is now "System" query mode

  • Path constraints: The Include Intermediate Entities and Exclude Intermediate Entities are now options to Include Entities or Exclude Entities

  • The Time Machine, used to pick a snapshot date for the search, is now part of the left Graph sidebar.

Workflows

New features

• Early Access: Custom help pages: Administrators can now configure splash pages and instructions for certification reviewers with a Preview API.

Bug fixes

• Previously un-logged "certification started" email notifications are now logged with the total recipient count.

Platform

Bug fixes and changes

• Clicking Export on the User Management page now exports the user account details table instead of starting a full audit log download.

• Fixed an issue with empty Last Login dates on the User Management page.

• Built-in report names no longer refer to "Risks"

• Two additional report categories are created for new user accounts: Privileged Access Dashboard and Cloud IAM Dashboard.