Identity Intelligence 1.1.2 Release Notes

July 2020

Identity Intelligence 1.1.2 includes new features and resolves several previous issues.

Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs.

The documentation for this product is available on the Documentation website in HTML and PDF formats. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Identity Intelligence Documentation page.

1.0 What’s New?

The following sections outline the key features and the issues resolved in this release:

1.1 REST API

Identity Intelligence provides REST APIs to integrate with third-party applications. Using Identity Intelligence REST API, you can get information about a user, get access rights details of an identity, and manage views. The REST API documentation contains detailed information about using Identity Intelligence REST APIs. For information about accessing REST API documentation, see Using Identity Intelligence REST API.

1.2 Diagnostic Log Enhancements

Identity Intelligence now includes scripts to collect diagnostic logs from Identity Intelligence, its components, and the operating system. For more information, see Collecting Diagnostic Logs.

1.3 Health and Performance Monitoring Dashboard

Identity Intelligence now includes an out-of-the-box Health and Performance Monitoring dashboard to monitor the status of the database such as disk usage and rate of event ingestion. For more information, see Monitoring Database.

1.4 Software Fixes

Identity Intelligence User Interface Continues to Display the Entities Even After It Is Deleted in the Data Source

Issue: When you create and delete an entity in quick succession in the data source, you can still view that entity in the Identity Intelligence user interface. (Bug OCTCR28E185344)

Fix: Identity Intelligence displays the entities properly.

Approver Information is Missing in the Summary Panel for Workflow Processes from Identity Manager

Issue: Identity Intelligence does not display approver information in the Summary Panel for workflow processes from Identity Manager. (Bug OCTCR28E185296)

Fix: Identity Intelligence now displays the approver information.

Database Uninstallation Cancels Unexpectedly

Issue: When uninstalling database by using the uninstall-single-node.sh script, the process gets terminated unexpectedly if you press Enter after typing y at the following prompt: 

Are you sure that you want to UN-INSTALL database node(s)? (y/n)?y

(Bug OCTCR28E184443)

Fix: Uninstallation continues even if you press Enter after typing y.

2.0 System Requirements

For information about the software and hardware requirements for your deployment and performance tuning guidelines, see Identity Intelligence 1.1 System Requirements.

3.0 Downloading Identity Intelligence

Before you begin installing Identity Intelligence, you must download and extract Identity Intelligence and all necessary product installation packages. The installation package also includes the respective signature file to validate that the downloaded software is authentic and not tampered by a third party.

You can download the following installation packages:

Files

Description

identityintelligence-1.1.2.5.tar.gz

  • installers

    • cdf-2020.05.00100-2.3.0.7

    • db-installer_3.2.0-4.tar.gz

  • suite_images

    • transformationhub-3.3.0.29.tar

    • idi-1.1.2.29.tar

    • fusion-1.1.0.29.tar

  • metadata

    • arcsight-installer-metadata-2.3.0.29.tar

  • Single-node installer scripts

Contains files required for installing and deploying Identity Intelligence:

  • Contains the following installer files:

    • CDF installer and CDF core image

    • Database installer

  • Contains the following image files:

    • Transformation Hub image

    • Identity Intelligence image

    • Fusion image

  • Contains the following file:

    • ArcSight installer metadata

  • Single-node installer scripts

identity-intelligence-1.1.2--bundle+--license.txt

Legal information about third party code contained in Identity Intelligence

NIdM_Integration_Module_4.7_EntityDataModel.zip

Driver shim and packages for Identity Manager Driver for Entity Data Model

ig-config-utility-for-entity-data-model-1.1.1.1.tar.gz

Configuration utility for Identity Governance

SmartConnector for Identity Intelligence 1.1.2.1.zip

Includes the following:

  • SmartConnector for Syslog NG Daemon installation file

  • SmartConnector categorization file for Identity Manager

  • SmartConnector categorization file for Identity Governance

ArcSight-ArcMC-2.9.4.2221.0.bin

(Optional)

Installation file for ArcSight Management Center (ArcMC)

To download and verify the signature of downloaded files:

  1. Log in to the computer where you want to install Identity Intelligence.

  2. Change to the directory where you want to download the installer files:

    cd <download_directory>

    For example:

    cd /opt

    NOTE:If you are planning to install Identity Intelligence by using scripts, use /opt as the download location.

  3. Download all the necessary product installer files from the Micro Focus Downloads website.

  4. To verify the signature of the downloaded files, enter the following command:

    Syntax: sha256sum <file_name>; cat <file_name>.sha256

    Example: sha256sum identityintelligence-x.x.x.x.zip; cat identityintelligence-x.x.x.x.sha256

    The output from each set of compressed installation packages must match their corresponding SHA-256 signatures. If they do not match, download the files again and verify the signature. If the checksum does not match even with the new files, contact Micro Focus Customer Support.

  5. To extract the downloaded files, enter the following commands:

    For tar file: tar xvfz <file_name>.tar.gz

    For zip file: unzip <file_name>.zip

4.0 Installing Identity Intelligence

Micro Focus provides several options to install your Identity Intelligence environment. For more information, see the Administrator Guide for Identity Intelligence.

5.0 Upgrading Identity Intelligence

You can upgrade to Identity Intelligence 1.1.2 only from Identity Intelligence 1.1.1. For information about upgrading Identity Intelligence, see Upgrading Identity Intelligence.

6.0 Known Issues

Micro Focus strives to ensure that our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

6.1 Identity Intelligence Displays Modified Account Details as Blank

Issue: In the User Profile page, Identity Intelligence does not display the account details for the account for which User logon name is modified in the Active Directory. Blank space is displayed instead of the modified account details. (Bug OCTCR28E185269)

Fix: This issue is caused by a bug in Identity Manager 4.8.0.0 (Bug 1157343) and is fixed in Identity Manager 4.8.0.1. Therefore, if you are using Identity Manager 4.8.0.0, ensure that you upgrade Identity Manager to version 4.8.0.1 or later.

6.2 Ignores Some Identity Manager Data Received from Non-LDAP-based Drivers

Issue: Identity Intelligence receives data from Identity Manager through the Identity Manager Driver for Entity Data Model. This driver is designed to collect data that Identity Manager receives from drivers similar to the LDAP-based Directory Integration drivers for Identity Manager. Identity Intelligence can also receive data that originates from other types of Identity Manager drivers. However, some drivers might configure data in a way that the Entity Data Model driver cannot interpret. To avoid corrupting data that might be displayed in View and Profiles, the Entity Data Model driver ignores any collected content that does not meet its expected formatting.

For more information about the LDAP-based Directory Integration drivers, see the documentation site for Identity Manager drivers.

Workaround: If you have an incidence where Identity Intelligence fails to appropriately display data that originates from a non-LDAP-based driver, contact our Customer Center to determine the exact nature of the data problems.

6.3 Formatting Issues in PDF if Columns Have Large Data

Issue: In the View’s table, when you add a column with fields that contain a large data, Identity Intelligence fails to export data appropriately in the PDF file. For example, some rows in the Message column might contain a large amount of data that Identity Intelligence cannot incorporate it appropriately in the PDF. (Bug OCTCR28E184432)

Workaround: Export the data as a CSV file.

6.4 Identity Intelligence Displays a ? for User Information that Contains Non-English Characters

Issue: If user information such as a name or email ID contains non-English characters, Identity Intelligence displays ? for those non-English characters. (Bug OCTCR28E185328)

Workaround: None.

6.5 Identity Intelligence Does Not Display Identity Governance Account Aliases

Issue: Identity Intelligence does not display account that was used as an identity source for the user in Identity Governance. (Bug OCTCR28E184435)

Workaround: If you have both Identity Manager and Identity Governance, configure data collection as follows:

6.6 Access Requests From Identity Governance Displays Approved Date Instead of Creation Date

Issue: In case of access request approval, Identity Intelligence displays approved date instead of creation date because creation date is replaced by approved date when the access request is approved. (Bug OCTCR28E185282)

Workaround: None.

6.7 Known Issues in RedHat that Affect Identity Intelligence

Issue: Known issues associated with RedHat can affect Identity Intelligence by causing sluggish performance and errors in the server log, particularly in a single-node deployment.

  • You might observe slow responses times and that some of the deployed pods enter the “CrashLoopBackoff” state. This issue tends to occur because of large quantities of calls to the NFS client. (Bug OCTCR28E185219)

  • When logging into Identity Intelligence, the server might send you back to the login page, particularly after you first install Identity Intelligence. You might see the following type of error in the idi-web-app log:

    Unable to fetch user details from management after retrying, error: StatusCodeError: 401

    (Bug OCTCR28E185279)

  • After logging into Identity Intelligence, you might be redirected to ADMIN > Account Groups page wherever you click on the user interface. (Bug OCTCR28E185279)

Workaround:

  1. Follow the instructions in RedHat Solution 3915571.

  2. Restart the User Management pod by performing the following:

    1. Get the User Management pod details:

      kubectl get pods --all-namespaces | grep hercules-management

      Example output: 

      NAMESPACE                                      NAME                               READY        STATUS         RESTARTS               AGE
arcsight-installer-p2dlt         hercules-management-7f876b4978-9xkl6             2/2          Running            6                  10d

    2. Delete the User Management pod:

      kubectl delete pod -n <namespace> <management pod name>

      Example:

      kubectl delete pod -n arcsight-installer-p2dlt hercules-management-7f876b4978-9xkl6

      When you delete any pod, the pod will start automatically.

6.8 Identity Intelligence Displays Duplicate Records When You Click the Search Button Multiple Times

Workaround: There is no workaround at this time.(Bug OCTCR28E185325)

6.9 Proper Message Is Not Displayed When Valid Data Is Not Available for an Entity

Issue: When you view the details of an entity that was valid in the past but not valid currently by changing the time to Now, it displays null values instead of a proper message.(Bug OCTCR28E185326)

Workaround: There is no workaround at this time.

6.10 ITOM-DI Pods Do Not Restart Automatically After Reinstalling Transformation Hub

Workaround: Manually restart all ITOM-DI pods after reinstalling Transformation Hub:

  1. Get the name of all ITOM-DI pods:

    kubectl get pods --all-namespaces | grep itom-d

  2. Restart all the pods individually by executing the command:

    kubectl delete pod -n <namespace> <ITOM-DI pod name>

(Bug OCTCR28E185333)

6.11 Displays Incorrect Icon and Label for Non-Processed Access Rights Provided Event

Issue: The non-processed access rights event status is displayed as complete instead on non-process in the visualization.(Bug OCTCR28E184510)

Workaround: There is no workaround at this time.

6.12 User Details Page Displays the Access Right Even Before the Access Right is Granted

Issue: When you click on a user to view its details in Users and Entities page, it displays the access right details even before the access right is granted to the user.(Bug OCTCR28E185304)

Workaround: There is no workaround at this time.

6.13 Views Does not Load Properly After Upgrading

Issue: After upgrading Identity Intelligence to 1.1.2, when you try to launch the Views created in 1.1.1, it does not load properly.(Bug OCTCR28E185304)

Workaround: After upgrading to Identity Intelligence 1.1.2, you must edit and save all Views.

  1. Log in to Identity Intelligence user interface.

  2. Click Identity Intelligence.

  3. Select a View, then click > Edit.

  4. Edit any property.

  5. Click Save.

  6. Repeat step 3 to 5 for all Views.

6.14 Malware Scan Might Report a False Positive

Issue: When scanning the cdf-2020.05.00100-2.3.0.7.zip file or an installer *.tar file that contains this file, certain malware detection programs might report a false positive in a subroutine called updateRoleId. This subroutine is within /cdf/images/cdf-master-images.tgz file.

Workaround: None needed. We validated that the code is not malware. We have verified that the package was built and compiled in a secure and trusted fashion. In an upcoming release, we will modify the packaging to avoid this false positive.

6.15 Known Issues in CDF

For known issues related to CDF, see Transformation Hub Release Notes in the ArcSight Product Documentation website.

6.16 Known Issues in Entity Data Model Driver

For known issues related to the Entity Data Model driver, see Known Issues in the Identity Manager Driver for Entity Data Model Implementation Guide.

7.0 Legal Notice

© Copyright 2020 Micro Focus or one of its affiliates.

The only warranties for products and services of Micro Focus and its affiliates and licensors (“Micro Focus”) are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Micro Focus shall not be liable for technical or editorial errors or omissions contained herein. The information contained herein is subject to change without notice.

For additional information, such as certification-related notices and trademarks, see https://www.microfocus.com/about/legal/.