Skip to content
Identity and Access Management

08 October 2025

Production release: 08 October 2025
Staging release: 30 September 2025

08 October 2025

Section titled “08 October 2025”

Enhancements

Section titled “Enhancements”

  • Bootstrap API Enhancement: The Bootstrap API now returns operational certificates and TRN, enabling devices to obtain tokens using MTLS authentication.

  • View Roles and External Systems Support: Added support to view roles and external system details for an account. This brings the endpoint in line with the existing “List All Accounts” API functionality.

  • Custom Invitation Templates: Users and applications can now customize invitation templates when adding new users to an account, offering greater flexibility and personalization.

  • Role and Permission Sharing: Introduced a new role and permission sharing endpoint, allowing application owners to share roles and permissions across multiple applications seamlessly.

  • CertRotationLock Field in Device Response: The Devices GET and GET ALL endpoints now include the certRotationLock field in their responses when the query parameter include=true is specified.

  • Multiple User Search by Email ID: The POST /users/search API now supports searching multiple users by their email IDs, improving efficiency in user lookups.

  • Dealer Access to Organization API: The Organization API is now accessible to users associated with dealer-type accounts, regardless of whether their default account type is Customer.

  • Timezone Validation Enforcement: Added timezone validation during user creation based on the country field, ensuring consistency with the MyProfile page in TID.

  • Assign Roles and Permissions to Trusted Groups: Introduced a new API to assign roles and permissions to trusted groups through relations, enhancing access management capabilities.

Bugfix

Section titled “Bugfix”

  • Account Update – Internal Server Error Fixed: Resolved an issue causing an Internal Server Error during account updates due to missing required positional arguments.

  • User Role Endpoint – ID vs TRN Error Resolved: Fixed the Internal Server Error triggered when an ID was passed instead of a TRN to the ON parameter for the /users/{userId}/roles/{roleId} endpoint.

  • Intermittent 500 Errors on Adding User to Group: Addressed intermittent 500 errors encountered by the File Service team while adding valid users to groups.

  • Dangling References from CDH to IAM: Fixed an issue where roles created in CDH for non-existent IAM accounts were leading to dangling references.

  • Subgroup Removal – Internal Server Error Fixed: Resolved a internal server error that occurred when removing a subgroup from a group using the remove user from group endpoint.

  • Duplicate User Data Across Pages: Fixed an issue causing duplicate user entries to appear across pages when fetching users via the GET /users endpoint.

  • Central Events Handler Lambda – Exception Fixed: Addressed an unhandled validation error for the Trn resource_id field, ensuring it always follows UUID format.

  • Trimble Maps Endpoint – Connection Aborted Error Resolved: Fixed the connection aborted issue from the Trimble Maps endpoint, which previously resulted in a 500 error on the IAM side.

  • List Accounts Endpoint – Page Size Validation Added: Resolved the 500 error that occurred when providing a pageSize value greater than 50 or less than 0 in the List Accounts endpoint.

  • Duplicate Location and Country Entries in AOSS: Fixed an inconsistency causing duplicate locations and countries to be ingested into AOSS for certain organizations.

  • User-Application Relation Cleanup: Ensured that when the last role in a user–entity relationship is deleted, the entire relationship is removed, preventing orphaned records.