10 August 2026
Production release: 10 August 2026
Staging release: 03 August 2026
10 August 2026
Section titled “10 August 2026”Features
Section titled “Features”Honor Correlation-ID Across Services: Implemented consistent propagation of correlation-id across service boundaries to enable end-to-end request tracing.
Remove “;building=” String from Organization Address Lines: Cleaned up organization address lines by removing the stray “;building=” string from existing records. Organization List
Site Address Reconciliation on Creation: Added reconciliation for CDH site addresses during creation to ensure updates are applied if the address already exists.
Support for Filtering Accounts by Account ID in Applications API: Enhanced the applications API to support filtering accounts by accountId.
Script to Remove Picture URL from User Entity: Developed a script to remove the picture URL from user entities when the profile picture is deleted.
Error Handling for Address Creation with Existing ID: Improved error handling for address creation with an existing ID to provide a more descriptive error message.
Enable DPoP Validation for /me Endpoint: Added DPoP validation for the /me endpoint to ensure proof-of-possession is checked before downstream service calls.
Permission Access for Address CDH Sync API: Updated the Address CDH Sync API to validate permissions for address-related operations.
Address Source Systems Sync Improvements: Enhanced the behavior of address source system synchronization to align with account source system handling.
Account Modify Reconciliation for Missing Accounts: Enabled reconciliation for MODIFY events in CDH sync to handle missing accounts by invoking account creation.
Address Credentialed Access OSR Handling: Implemented OSR logic for address creation and updates in CDH to ensure correct source system references.
Validation for Data Pushed to EDW from IAM S3: Added format validation for data pushed to S3 to prevent issues during EDW consumption.
One-Time Migration for Legacy Device Transfer History: Backfilled transfer history for legacy devices to ensure complete ownership records.
Profiles to IAM Sync for Device Membership Changes: Updated the Profiles-to-IAM sync pipeline to maintain transfer history when device-account memberships change.
Provisioning API for Support User Assignment: Added support for assigning roles to support users on IAM applications via the provisioning API.
Email Flow for Developer Approval Consent: Implemented an email flow for developer approval consent.
Bug Fixess
Section titled “Bug Fixess”SonarQube Issues Resolved Across Multiple Modules: Addressed critical and blocker issues in App, Org, Users, Roles, Events, and Common BLUs. Details
PX Membership Sync Fix for Manager Demotion: Resolved an issue where demoting a manager to a normal user incorrectly removed the user-account relation.
Error Response for List Users Iteration: Fixed an issue where the List Users API returned error responses without proper error codes or details.
Group Invite Cancellation Data Cleanup: Ensured user data is removed from the database when a group invite is canceled for a new user.
Token Expiration Validation in API Gateway: Added token expiration validation for cached tokens in the API Gateway to prevent potential vulnerabilities.
Pagination and Response Issues in GET Roles/Applications Endpoint: Fixed inconsistent responses and pagination issues in the GET roles/{roleId}/applications endpoint.
Device Role Assignment API Error Handling: Improved error responses for invalid query parameters in the device role assignment API.
Device Deletion Leaves Residual Relations: Fixed an issue where device-account relations persisted in the database after device deletion in certain scenarios.
Inconsistent Error Responses for Invalid Device IDs: Standardized error messages across APIs when invalid device IDs are provided.
Group and Device Relationship Deletion in Profiles: Ensured that deleting a group and its associated device in Profiles removes the corresponding relationship in IAM.
Offset-Based Pagination Issues in List Users API: Resolved multiple issues with offset-based pagination in the List Users API, including handling of invalid parameters and cursor links.
Rollback for Device and Certificate Deletion: Implemented rollback mechanisms for device and certificate deletions to ensure consistency in case of errors.
Group Account Relation Overwrites on Modify Events: Fixed an issue where MODIFY events overwrote existing group-account relation records unnecessarily.