Skip to content
Identity and Access Management

18 May 2026

Production release: 18 May 2026
Staging release: 15 May 2026

18 May 2026

Section titled “18 May 2026”

Features

Section titled “Features”

  • Search Organization API Enhancements: Dealers can now view organizations created by other dealers that match the search criteria, in addition to Trimble-created organizations.

  • Origin-Based Organization View Tagging: Organizations are now tagged based on their origin: dealer-created organizations are marked as “dealer”, while customer-created organizations are marked as “customer”, improving internal organization visibility and management.

  • Dealer DoingBusinessWith Customer Account API Enhancements: Enhanced the API to include organization details and verification status for dealer accounts interacting with customer accounts.

  • Customer Account–Organization Association Improvements: Improved the handling of customer accounts linked to organizations by allowing a maximum of two organization associations per account, with distinct views for dealers and customers.

  • Arrowhead – AOSS Sync Enhancements: Updated the AOSS schema and live synchronization scripts to include new attributes such as name, purchaseOrderNumber, and salesOrderNumber, enabling improved downstream filtering capabilities.

  • Internal Device Management API Enhancements: Introduced additional fields for device creation and updates, including SKU, po, and so numbers to support IAM shipping workflows.

  • F2C Transfer API Approval Workflow: Introduced support for dealer-mandated approval workflows for transfer requests based on contract status.

  • GraphQL Group Users Filter Extension: Extended GraphQL support to filter users within a group using the requestType filter, improving notification management in the Developer Console.

  • Device Friendly Name Support: Dealers and customers can now assign friendly names to devices for easier identification and management. Friendly names are retained during device transfers.

  • Customer Accounts API Enhancements: Dealers can now retrieve customer accounts with organization relationship details and validation statuses.

  • Passthrough Gateway Certificate Rotation: Implemented certificate rotation support for the passthrough gateway across staging and production environments.

  • Improved GraphQL Error Reporting: Enhanced GraphQL error handling by introducing detailed error codes for invalid queries, improving client-side debugging and understanding.

  • SAML Field Resolution Fixes: Resolved issues where SAML-related fields such as isAuthnRequestSigned and isAssertionsSigned returned null instead of false in GraphQL responses.

Bug Fixes

Section titled “Bug Fixes”

  • Delete Relation Event Filtering: Fixed an issue where delete relation events were incorrectly filtered out by recent rule updates.

  • Roles API Performance: Reduced latency across roles-related APIs by optimizing DynamoDB queries and configurations.

  • LiveSync Lambda Certificate Rotation: Resolved a bug where rapid, successive intermediate certificate rotations mistakenly routed events to the Dead Letter Queue (DLQ).

  • Device Sync API Validation: Fixed multiple validation errors in internal device synchronization APIs, including missing order numbers, empty SKU values, and incorrect error codes.

  • Parallel List Resources API Timeouts: Fixed an indefinite runtime blocking issue when processing more than 10 items, preventing API timeouts.

  • Profiles-to-IAM Sync Reliability: Ensured the most recent device record is preserved when INSERT and MODIFY events occur simultaneously.

  • DoingBusinessWith API Optimization: Improved response times for the GET accounts/{dAccId}/doingBusinessWith endpoint via DynamoDB query optimizations.

  • Search Organizations Results Improved: Resolved issues where newly created organizations were not appearing in search results and unrelated organizations were being returned for search criteria.

  • Cross-Account Privileges Validation: Fixed the permissions/isAllowed API endpoint to correctly validate and return privilege access across accounts.