Identity Intelligence 1.1.2 includes new features and resolves several previous issues.
Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs.
The documentation for this product is available on the Documentation website in HTML and PDF formats. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Identity Intelligence Documentation page.
The following sections outline the key features and the issues resolved in this release:
Identity Intelligence provides REST APIs to integrate with third-party applications. Using Identity Intelligence REST API, you can get information about a user, get access rights details of an identity, and manage views. The REST API documentation contains detailed information about using Identity Intelligence REST APIs. For information about accessing REST API documentation, see Using Identity Intelligence REST API.
Identity Intelligence now includes scripts to collect diagnostic logs from Identity Intelligence, its components, and the operating system. For more information, see Collecting Diagnostic Logs.
Identity Intelligence now includes an out-of-the-box Health and Performance Monitoring dashboard to monitor the status of the database such as disk usage and rate of event ingestion. For more information, see Monitoring Database.
Issue: When you create and delete an entity in quick succession in the data source, you can still view that entity in the Identity Intelligence user interface. (Bug OCTCR28E185344)
Fix: Identity Intelligence displays the entities properly.
Issue: Identity Intelligence does not display approver information in the Summary Panel for workflow processes from Identity Manager. (Bug OCTCR28E185296)
Fix: Identity Intelligence now displays the approver information.
Issue: When uninstalling database by using the uninstall-single-node.sh script, the process gets terminated unexpectedly if you press Enter after typing y at the following prompt:
Are you sure that you want to UN-INSTALL database node(s)? (y/n)?y
(Bug OCTCR28E184443)
Fix: Uninstallation continues even if you press Enter after typing y.
For information about the software and hardware requirements for your deployment and performance tuning guidelines, see Identity Intelligence 1.1 System Requirements.
Before you begin installing Identity Intelligence, you must download and extract Identity Intelligence and all necessary product installation packages. The installation package also includes the respective signature file to validate that the downloaded software is authentic and not tampered by a third party.
You can download the following installation packages:
Files |
Description |
---|---|
identityintelligence-1.1.2.5.tar.gz
|
Contains files required for installing and deploying Identity Intelligence:
|
identity-intelligence-1.1.2--bundle+--license.txt |
Legal information about third party code contained in Identity Intelligence |
NIdM_Integration_Module_4.7_EntityDataModel.zip |
Driver shim and packages for Identity Manager Driver for Entity Data Model |
ig-config-utility-for-entity-data-model-1.1.1.1.tar.gz |
Configuration utility for Identity Governance |
SmartConnector for Identity Intelligence 1.1.2.1.zip |
Includes the following:
|
ArcSight-ArcMC-2.9.4.2221.0.bin (Optional) |
Installation file for ArcSight Management Center (ArcMC) |
To download and verify the signature of downloaded files:
Log in to the computer where you want to install Identity Intelligence.
Change to the directory where you want to download the installer files:
cd <download_directory>
For example:
cd /opt
NOTE:If you are planning to install Identity Intelligence by using scripts, use /opt as the download location.
Download all the necessary product installer files from the Micro Focus Downloads website.
To verify the signature of the downloaded files, enter the following command:
Syntax: sha256sum <file_name>; cat <file_name>.sha256
Example: sha256sum identityintelligence-x.x.x.x.zip; cat identityintelligence-x.x.x.x.sha256
The output from each set of compressed installation packages must match their corresponding SHA-256 signatures. If they do not match, download the files again and verify the signature. If the checksum does not match even with the new files, contact Micro Focus Customer Support.
To extract the downloaded files, enter the following commands:
For tar file: tar xvfz <file_name>.tar.gz
For zip file: unzip <file_name>.zip
Micro Focus provides several options to install your Identity Intelligence environment. For more information, see the Administrator Guide for Identity Intelligence.
You can upgrade to Identity Intelligence 1.1.2 only from Identity Intelligence 1.1.1. For information about upgrading Identity Intelligence, see Upgrading Identity Intelligence.
Micro Focus strives to ensure that our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.
Section 6.1, Identity Intelligence Displays Modified Account Details as Blank
Section 6.2, Ignores Some Identity Manager Data Received from Non-LDAP-based Drivers
Section 6.3, Formatting Issues in PDF if Columns Have Large Data
Section 6.5, Identity Intelligence Does Not Display Identity Governance Account Aliases
Section 6.7, Known Issues in RedHat that Affect Identity Intelligence
Section 6.9, Proper Message Is Not Displayed When Valid Data Is Not Available for an Entity
Section 6.10, ITOM-DI Pods Do Not Restart Automatically After Reinstalling Transformation Hub
Section 6.11, Displays Incorrect Icon and Label for Non-Processed Access Rights Provided Event
Section 6.12, User Details Page Displays the Access Right Even Before the Access Right is Granted
Issue: In the User Profile page, Identity Intelligence does not display the account details for the account for which User logon name is modified in the Active Directory. Blank space is displayed instead of the modified account details. (Bug OCTCR28E185269)
Fix: This issue is caused by a bug in Identity Manager 4.8.0.0 (Bug 1157343) and is fixed in Identity Manager 4.8.0.1. Therefore, if you are using Identity Manager 4.8.0.0, ensure that you upgrade Identity Manager to version 4.8.0.1 or later.
Issue: Identity Intelligence receives data from Identity Manager through the Identity Manager Driver for Entity Data Model. This driver is designed to collect data that Identity Manager receives from drivers similar to the LDAP-based Directory Integration drivers for Identity Manager. Identity Intelligence can also receive data that originates from other types of Identity Manager drivers. However, some drivers might configure data in a way that the Entity Data Model driver cannot interpret. To avoid corrupting data that might be displayed in View and Profiles, the Entity Data Model driver ignores any collected content that does not meet its expected formatting.
For more information about the LDAP-based Directory Integration drivers, see the documentation site for Identity Manager drivers.
Workaround: If you have an incidence where Identity Intelligence fails to appropriately display data that originates from a non-LDAP-based driver, contact our Customer Center to determine the exact nature of the data problems.
Issue: In the View’s table, when you add a column with fields that contain a large data, Identity Intelligence fails to export data appropriately in the PDF file. For example, some rows in the Message column might contain a large amount of data that Identity Intelligence cannot incorporate it appropriately in the PDF. (Bug OCTCR28E184432)
Workaround: Export the data as a CSV file.
Issue: If user information such as a name or email ID contains non-English characters, Identity Intelligence displays ? for those non-English characters. (Bug OCTCR28E185328)
Workaround: None.
Issue: Identity Intelligence does not display account that was used as an identity source for the user in Identity Governance. (Bug OCTCR28E184435)
Workaround: If you have both Identity Manager and Identity Governance, configure data collection as follows:
Configure Identity Governance to collect data from Identity Manager.
For more information, see Identity Governance documentation.
Configure Identity Intelligence to collect data from both Identity Manager and Identity Governance and ensure that the data reconciliation fields for both the data sources are same.
Issue: In case of access request approval, Identity Intelligence displays approved date instead of creation date because creation date is replaced by approved date when the access request is approved. (Bug OCTCR28E185282)
Workaround: None.
Issue: Known issues associated with RedHat can affect Identity Intelligence by causing sluggish performance and errors in the server log, particularly in a single-node deployment.
You might observe slow responses times and that some of the deployed pods enter the “CrashLoopBackoff” state. This issue tends to occur because of large quantities of calls to the NFS client. (Bug OCTCR28E185219)
When logging into Identity Intelligence, the server might send you back to the login page, particularly after you first install Identity Intelligence. You might see the following type of error in the idi-web-app log:
Unable to fetch user details from management after retrying, error: StatusCodeError: 401
(Bug OCTCR28E185279)
After logging into Identity Intelligence, you might be redirected to ADMIN > Account Groups page wherever you click on the user interface. (Bug OCTCR28E185279)
Workaround:
Follow the instructions in RedHat Solution 3915571.
Restart the User Management pod by performing the following:
Get the User Management pod details:
kubectl get pods --all-namespaces | grep hercules-management
Example output:
NAMESPACE NAME READY STATUS RESTARTS AGE arcsight-installer-p2dlt hercules-management-7f876b4978-9xkl6 2/2 Running 6 10d
Delete the User Management pod:
kubectl delete pod -n <namespace> <management pod name>
Example:
kubectl delete pod -n arcsight-installer-p2dlt hercules-management-7f876b4978-9xkl6
When you delete any pod, the pod will start automatically.
Workaround: There is no workaround at this time.(Bug OCTCR28E185325)
Issue: When you view the details of an entity that was valid in the past but not valid currently by changing the time to Now, it displays null values instead of a proper message.(Bug OCTCR28E185326)
Workaround: There is no workaround at this time.
Workaround: Manually restart all ITOM-DI pods after reinstalling Transformation Hub:
Get the name of all ITOM-DI pods:
kubectl get pods --all-namespaces | grep itom-d
Restart all the pods individually by executing the command:
kubectl delete pod -n <namespace> <ITOM-DI pod name>
(Bug OCTCR28E185333)
Issue: The non-processed access rights event status is displayed as complete instead on non-process in the visualization.(Bug OCTCR28E184510)
Workaround: There is no workaround at this time.
Issue: When you click on a user to view its details in Users and Entities page, it displays the access right details even before the access right is granted to the user.(Bug OCTCR28E185304)
Workaround: There is no workaround at this time.
Issue: After upgrading Identity Intelligence to 1.1.2, when you try to launch the Views created in 1.1.1, it does not load properly.(Bug OCTCR28E185304)
Workaround: After upgrading to Identity Intelligence 1.1.2, you must edit and save all Views.
Log in to Identity Intelligence user interface.
Click Identity Intelligence.
Select a View, then click > Edit.
Edit any property.
Click Save.
Repeat step 3 to 5 for all Views.
Issue: When scanning the cdf-2020.05.00100-2.3.0.7.zip file or an installer *.tar file that contains this file, certain malware detection programs might report a false positive in a subroutine called updateRoleId. This subroutine is within /cdf/images/cdf-master-images.tgz file.
Workaround: None needed. We validated that the code is not malware. We have verified that the package was built and compiled in a secure and trusted fashion. In an upcoming release, we will modify the packaging to avoid this false positive.
For known issues related to CDF, see Transformation Hub Release Notes
in the ArcSight Product Documentation website.
For known issues related to the Entity Data Model driver, see Known Issues
in the Identity Manager Driver for Entity Data Model Implementation Guide.
© Copyright 2020 Micro Focus or one of its affiliates.
The only warranties for products and services of Micro Focus and its affiliates and licensors (“Micro Focus”) are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Micro Focus shall not be liable for technical or editorial errors or omissions contained herein. The information contained herein is subject to change without notice.
For additional information, such as certification-related notices and trademarks, see https://www.microfocus.com/about/legal/.