27 July 2026

Production release: 27 July 2026
Staging release: 20 July 2026

27 July 2026

Features

Credential Access for Address Source Systems Enhanced: Address PUT/DELETE operations now support the isSource query parameter for improved endpoint synchronization.

Standardized pyjwt Library Version Across All BLUs: Uniform and secure version of pyjwt implemented across all BLUs, ensuring compatibility and security.

Account Name and External Systems Support Added to User Accounts API: The users/{userId}/accounts API now includes account names and external systems support. Design Document

First-Party Trimble Applications Granted Access to Application Info API: Internal Trimble applications can now access the GET /applications/{applicationId}/info API for application classification details.

Ownership Flag Added to Application Sync Endpoint: Distinguishes between “ownership” and general belongs-to relations in IAM application sync endpoints.

Application API Enhanced to Include Product and Account Details: The Application/{applicationId} API now returns API product and account details.

Credential Access Improvements for Account and Address Source Systems Sync: Enhanced validation and paging support added for external systems during credential access sync.

File Service Ingestion Logs Enabled: Success file upload messages are now logged for better traceability.

Timeout Handling Improved for IAM Search Organizations API: DNB API timeout increased to 10 seconds with a clear error message for timeouts.

Custom Header Evaluation for DPoP Validation Investigated: Identified custom headers for reconstructing client-facing URLs during API Gateway or mTLS routing.

Permission Access for CDH Sync API Functionality: New role and permissions created to secure CDH Sync API functionality.

Credential Access for OSR Handling in Accounts: Enhanced API logic for managing OSR changes during account sync.

Notification-Based Consent Flow Implemented for New TID Users: New consent flow implemented for TID users, routing them to the notifications page for approval.

Inviter Metadata Added to List Groups API for User Consent: The GET /users/{user-id}/groups API now includes inviter details for pending group memberships.

DPoP Validation Enabled for Internal Gateway and GraphQL Resources: DPoP validation logic integrated into internal gateway endpoints and GraphQL resources.

Apollo Error Messages Sanitized for Security: Apollo’s hideSchemaDetailsFromClientErrors enabled to prevent schema disclosure in production environments.

Domo Integration Configured with Aggregated Parquet Datasets: Domo now consumes analytics datasets stored in S3 with refresh schedules and dashboards configured.

Organization Role Mapping Updated for New Roles: New roles mapped to organizations for improved role management.

IAM API Automation for Developer Console: Automated IAM API processes for the Developer Console.

LastUpdateOrigin Header Added for CDH Sync User Roles: IAM endpoints updated to manage lastUpdateOrigin internally for CDH sync.

Credential Access for Site Source Systems Implemented: Enhanced synchronization logic for site source systems with API-based architecture.

Credential Access for Address Entity Enhanced: Improved address creation, modification, and removal workflows for CDH sync.

User Account Relation Node Authorization Improved: Additional permission checks added for user nodes within account contexts.

Accounts Service Handler Naming Conventions Standardized: Refactored service handlers in accounts BLU for consistent naming conventions.

Bug Fixes

Infinite Pagination Loop Fixed in User Account Listing: Resolved issue causing repeated accounts and infinite pagination during user account listing.

CSV Format Issue in EDW Export Fixed: Special characters like double quotes are now handled correctly in CSV exports for EDW.

Default Account Field Updated After Last User-Account Removal: Resolved issue where the defaultAccount field was not cleared after removing the last user-account relationship.

Cascade Workflow Issues in Non-Hierarchical Organizations Fixed: Addressed multiple issues in cascade workflows, including incorrect flag settings and missing field replications. Testing Evidence

401 Misinterpretation from TAM Appliance Fixed: Expired access tokens now correctly return HTTP 401 Unauthorized instead of 403 Forbidden.

Role Sync Remove Event Handling Improved: Revisited logic for handling remove events when users do not exist in IAM.

IAM Health Endpoint Fixed: Service status now correctly reflects success instead of 503.

Application Account Mapping and Relationship Cleanup Fixed: Resolved mismatches in application-account mappings and ensured complete relationship cleanup during deletion.

Incorrect Error Fixed for RefID Update with Existing RefID: Correct error variant now returned for invalid operations involving existing RefIDs.

IAM API Changes for Invitation Webhook Status: User-to-account relationships are now updated or removed based on invitation webhook status events.

IAM API Changes for Group Invitation Flow: User-to-account relationships are created during group invitations with proper status transitions.

IAM Prod Get User References Monitor Fixed: Resolved 500 errors in IAM prod workflow monitor for user references.

Apollo Data Loader Function Updated for Null Data Handling: Enhanced error handling for null data in Apollo’s getSimpleDataLoaderBluDispatchFunction.

IAC Script Changes for Application Logo Profile Picture: Updated IAC scripts for managing application logo profile pictures.

IAM API Changes for User Invitation Flow: Enhanced API logic for creating user-to-account relationships during group invitations.

IAM Search Organizations API Timeout Handling Improved: Timeout increased to 10 seconds with clear error messages for DNB API.