Skip to content
Identity and Access Management

27 February 2025

Production release: 27 February 2025
Staging release: 25 February 2025

27 Febrary 2025

Section titled “27 Febrary 2025”

Overview : Trimble Identity & Access Management (IAM) serves as the essential foundation for application development in Trimble by offering a comprehensive solution for secure authentication and authorization across applications. It enables centralized management of users, devices, and applications across Trimble, ensuring a unified and seamless sign-up and login experience. This is the first production release of IAM.

Features Included in This Release:

  • Account as a Source of Truth

    • Centralized Account Information: Accounts allow for the aggregation and surfacing of account information from various external systems, providing a unified view of all relevant data. This also includes much of the existing data from the CDH and Profiles service.

    • Location Linking: Accounts can be linked to real-world locations with detailed addresses, ensuring accurate and relevant geographical information is associated with each account.

  • User Account Membership

    • This feature allows administrators to manage and control user access within an account. It defines the roles and permissions assigned to users, determining what actions they can perform and what data they can access based on their membership level. This ensures secure and efficient management of user activities and access within the organization.

      • User with Email: Administrators can invite users to join accounts, streamlining the process of granting access and managing permissions.

      • Users without Email: Administrators have the ability to add users without email to their accounts and can provide them with a temporary password.

  • Groups Management

    • Groups can be established within the context of an Account. A group consists of multiple identities like User, Device, and Application. This method simplifies and enhances administrative efficiency.

  • Roles Management

    • Roles and Permissions Management: Roles and permissions provide a structured and secure access control system that is adaptable, scalable, and meets regulatory requirements. Administrators can assign roles based on user responsibilities and can review or revoke roles as job functions evolve. An application subscribed to IAM can create new permissions. These permissions can be grouped into a new role and assigned to users within an account or application.

    • Role-Based Access Control: Accounts support centralized role-based access control, enabling administrators to invite users and assign predefined roles. This ensures secure and efficient management of access permissions.

    • TAM Rego Built-in methods to retrieve IAM roles: The TAM appliance now includes a new Rego built-in method that allows seamless retrieval of user roles from the Identity and Access Management (IAM) system.

      Refer to the below TAM documentation for more details.

    • TAM Policy for IAM Authorization: A common and reusable policy has been developed for IAM authorization, leveraging Rego built-ins to retrieve permissions from IAM for evaluation. This enhancement enables integrators to make authorization decisions more efficiently and simplifies IAM integration for various authorization use cases. Policy reference

  • Existing Data Migration

    • Data Migration: All current data related to users, accounts, and user-account memberships, including roles from CDH, Profiles, and ProfileX that adhere to IAM requirements, can be accessed within IAM.

    • Data Sync from TID, CDH & Profiles: To ensure seamless adoption, live synchronization is enabled from TID, CDH, and Profiles to IAM. However, data created in IAM is not reverse-synchronized to profiles and CDH at this release.

For more detailed information, please refer to the documentation available on our documentation page.