11 August 2025

Production release: 11 August 2025
Staging release: 05 August 2025

Account Search by Short Code: Applications or Users can now look up accounts using their unique short code. This functionality is enabled by assigning the new account-searcher role to a valid application/user ID.
Account Search by user email ID: As part of dealer-customer account enhancements, dealer admins and owners can now search for customer accounts using the user’s email address.
Address Search by CDH ID: The account lookup functionality has been improved with a new query parameter. You can now use the q parameter with a CDH ID in the accounts/accountId/addresses endpoint to filter related addresses.

Real-time Events Publish for Invitation: We now publish real-time events for the invitation lifecycle. This allows IAM (Identity and Access Management) consumers and other connected applications to subscribe to these events to automate workflows and enhance monitoring. Events published for following scenarios: Invitation Sent, Invitation Completed (Accepted), Invitation Failed , Invitation Expired, Invitation Cancelled
Strategy for Error codes: We’ve updated our Identity and Access Management (IAM) service to include a new, clear, and extensible error code strategy. The error code changes were implemented to users and roles related functionalities and documentation can be reviewed here: https://docs.trimblecloud.com/identity-and-access-management/content/reference/errors/api_errors/
Public key management in device api: We’ve streamlined public key management by adding optional attributes directly to the Device API’s POST (create) and PATCH (update) endpoints. Now we can manage a device’s public key at the same time you create or update its configuration, eliminating the need for a separate API call.
Events publish for Organization: We now publish add_organization_address and add_organization_enrichment events alongside existing organization lifecycle events. This provides a more complete and reliable data stream for all downstream consumers, including Virtual Warehouse and MTP.

We resolved an issue where using a custom invitation template with the POST /invitation endpoint in IAM would incorrectly result in a 401 Unauthorized error. This was caused by a permission problem where the IAM application was not automatically authorized to use templates created in the Invitation Service. This has been corrected, and custom templates now work as expected through IAM.
Attempting to delete the picture of a user synced from Profiles without an account ID in the JWT resulted in a 403 Forbidden error at the DELETE users/{userId}/picture endpoint, has been fixed.
A couple of bugs causing 500 error codes when searching organizations with certain keywords have been resolved.
The issue with the validation message when re-adding a user to an existing account, caused by a missing status field in the user relation, has been fixed.
Resolved the issue of missing metadata in the response of the POST /sync/users endpoint.
The status of the device’s associated account must be verified before syncing with Trimble Identity (TID) to ensure proper linkage and prevent errors or data inconsistencies during synchronization.