Skip to content
Identity and Access Management

19 May 2025

Production release: 19 May 2025
Staging release: 14 May 2025

07 April 2025

Section titled “07 April 2025”

Features

Section titled “Features”
  • Organization Create Functionality: Implemented functionality for dealers to create and enrich organizations, prevent duplicates via IAM enrichment ID, and associate accounts with organizations.
  • Implemented validation to guarantee that the IAM endpoints are accessed by the IAM Audience (Flagged off).
  • Expanded IAM invitation template to include all supported locales, beyond the current en-US locale.
  • Enhanced address validation for non-US accounts by sequentially checking state, province, and stateName fields to reduce invalid_region rejections in IAM.
  • Custom Email Template Options in POST /invitation Endpoint: Ability to use custom email templates for new and existing users, enhancing email customization.
  • Modified the scope of POST: users/{user_id}/roles/{role_id}?on={application_trn} to add roles only if an existing relationship is present, due to the absence of an API in IAM for assigning roles between a user and an application.
  • Added functionality to check permissions shared with the calling subject.
  • Support for RoleId in Application to Group Endpoint: Enhanced group management by supporting RoleId in the application to group relationships.
  • Support for RoleId in Device to Group Endpoint: Improved IoT integration by supporting RoleId in device-to-group relationships.
  • Updated the Invitation service to use IAM for email-based user availability checks, replacing the previous profileX method.
  • Shared Permission Checks Enhanced: Permissions shared with the calling subject are now considered during permission checks, improving access control.
  • Enhanced Live-Sync for account creation/update to handle “EMPTY” email values, allowing sync without contact email as it’s optional; removed non-essential fields like currency and country to aid migration, ensuring name field compliance.
  • Group Based Access for Devices API: UPDATE and GET device by id now supports group based authorization.

Engineering Improvements

  • Performance Test Pipeline Improvements: Enhanced the performance test pipeline to ensure more robust and efficient testing processes.
  • MTLS Gateway Support for User Search (Internal): MTLS gateway support has been added for the /users/search endpoint, improving security and functionality.

Bug Fixes

Section titled “Bug Fixes”
  • Lambda Package Size Limit Exceeded Issue Resolved: Adjustments were made to handle the 250MB lambda package size limit, preventing deployment failures.
  • Error Message Correction for User Invitation: Updated error messages to provide clearer information when inviting users not present in IAM.
  • Multiple Default Accounts Issue Resolved: Fixed an issue allowing multiple accounts to be set as default for a user in IAM, ensuring correct account settings.
  • Payload Attribute Type Correction in User Account Relations: Corrected the payload attribute type from List to Map in user account relations, ensuring data integrity.
  • Province/State Check During Live-Sync: Improved address validation during live-sync by considering province and state fields, enhancing data accuracy.