Access Manager Appliance 4.5 Service Pack 1 Release Notes

Support for Automatic Hybrid Azure AD Join for Windows Devices

Microsoft Azure Active Directory (Azure AD) provides device management when Windows devices are registered with Azure AD. Azure AD ensures that devices meet organizations’ standards for security and compliance.Access Manager now provides the capability to handle automatic registration for Windows 10 devices to Azure AD.You can configure hybrid Azure AD join to register your on-premises AD domain-joined Windows resources automatically to Azure AD. Hybrid Azure AD join provides SSO to enterprise applications using Kerberos and OAuth 2.0 tokens.

For more information, see Automatic Hybrid Azure AD Join for Windows Devices in the NetIQ Access Manager Appliance 4.5 Administration Guide.

Azure AD Conditional Access with Access Manager

Azure AD Conditional Access provides added security by allowing access to your applications across cloud and on-premises only from trusted and compliant devices. It is a policy-based approach. You can configure a Conditional Access policy with the required conditions to apply the access controls. Conditions can be device type, users’ attributes, operating systems, client application accessed over web or cloud apps, network login location, sign-in risks, and so forth.

For more information, see Azure Active Directory Conditional Access with Access Manager in the NetIQ Access Manager Appliance 4.5 Administration Guide.

Integration with Microsoft Intune Mobile Device Management

Using Microsoft Intune Mobile Device Management, you can manage iOS, Android, and Windows devices securely. To enable this feature, you must first set up automatic hybrid Azure AD Join for Windows devices.

For more information, see Registering Devices to Microsoft Intune Mobile Device Management in the NetIQ Access Manager Appliance 4.5 Administration Guide.

Support for Choosing the Token Format for Each Client Application

JWT is the recommended format for OAuth tokens. However, some browsers such as Internet Explorer can restrict the length of the parameter values used in the token. This limits the use of JWT in these browsers. Access Manager now offers an option to choose binary format per client application for both access and refresh tokens.

For more information, see Registering OAuth Client Applications in the NetIQ Access Manager Appliance 4.5 Administration Guide.

Support for Logging the SAML 2.0 Request and Response Events

You can now audit the SAML 2.0 request sent to an identity provider and the SAML 2.0 assertion details of the response received.

For more information, refer to the following options under Defining Options for a SAML 2.0 Identity Provider in the NetIQ Access Manager Appliance 4.5 Administration Guide:

Support for Monitoring the Health of SaaS Account Management Services

You can now monitor the registered SaaS Account Management Services on Access Manager Administration Console. For more information about monitoring the health, see Monitoring the Health of Services in the NetIQ Access Manager Appliance 4.5 Administration Guide.

Auto-Populating the Username on the Identity Server Login Page

You can now auto-populate the username on the Identity Server login page while accessing an Office 365 application using SAML 2.0. For more information, see Auto-Populating the Username on the Identity Server Login Page in the NetIQ Access Manager Appliance 4.5 Administration Guide.