Issue No. 12 | September 2025 

September marks the first full year publishing this newsletter 🎉 Big thank you to all the folks that helped make it happen and to those of you who have provided valuable feedback to help make this content better.

This month, the DOMO contract renewal completes. We have details on the merger between Core Platform and AECO Platform. There is a sweet new application for working with JWTs and other sensitive data that many developers should like, and much more! 

New to this newsletter is a link to a form to request join this mailing list, go to the bottom of this message for details.

Merger of Core Platform and AECO Platform

A few weeks ago, the merger of Core Platform and AECO Platform was announced, resulting in the new Trimble Platform. This union brings an expanded mandate, as the team will not solely serve the AECO segment but will lead and develop Trimble's construction platform efforts (AECO + Field Systems) from both internal and customer-facing perspectives. The Trimble Platform team will also continue to be responsible for many Trimble-wide initiatives that Core Platform previously handled.

From 1M to 2M! Trimble Identity's Passkey Journey Continues!

The Trimble Platform is thrilled to announce that Trimble Identity has now surpassed 2 million Passkey adoptions! This milestone aligns with our ongoing efforts to enhance security across all Trimble products, requiring users to enter a one-time passcode if they do not have other MFA methods, such as Passkey, enabled.

Check out the announcement on Charlie:

🚀 Trimble Internal Developer Tools

The team in India has released a series of developer tools aimed at decoding tokens and other sensitive information. This is a single and secure place to:

• Decode JWT tokens
• Encode / Decode Base64
• Encode / Decode Urls
• Date / Time converter
• SHA 256 Hashing
• UUID Generator

You can click here to go straight to the application or check out the post on Charlie for more details:

Domo contract renewal

Our Domo contract has been renewed and we are now officially under the consumption pricing contract. Our teams did a great job of negotiating this deal in such a way that Trimble has time to right size its Domo consumption.

See this Charlie post for complete details:

App Xchange Connector updates for August

The App Xchange team is excited to announce the latest updates to connectors on the platform!

New connectors and enhancements:

• Intuit QuickBooks Online
• Procore
• Trimble ProjectSight

See this Charlie post for complete details:

Trimble Identity TypeScript SDK Beta Release 👀

We’re excited to announce the beta release of the Trimble Identity TypeScript SDK (v1.0.0-beta.1)—a modernization of the existing SDK from UMD to ECMAScript Module (ESM) format. This release maintains functional equivalence while delivering major improvements in developer experience, type safety, performance, and maintainability.

This update aligns the SDK with modern JavaScript best practices, ensures compatibility with today’s frameworks, and provides an optimized development workflow.

Read the notice for all the details:

UPCOMING EVENTS

Trimble Identity: Login Verification for users without MFA

Trimble ID (TID) is implementing a new security feature to enhance account protection for native users that don’t have Multi-Factor Authentication (MFA) enabled, excluding Social and Federated users. This will enhance the security posture of TID by requiring all users to provide a second form of verification (a one-time passcode) beyond a password. This feature will go into production on September 29th.

TAM: Deprecation of Older Versions

On October 20, 2025, we will deprecate all TAM appliance versions older than 2.3.6. This is a crucial security enhancement to enable Mutual Transport Layer Security (mTLS) on our end.

API Cloud v2 : Certificate Rotation in Prod environment

If you are an API provider using mTLS authentication. Cloud Production environment’s TLS certificates attached to certain domains will be rotated on 12 September 2025, between 06:00 and 12:00 UTC. The existing certificate is expiring on 14th September 2025. 

No action is required if you are not using mTLS or client authentication. Otherwise read the notice for complete details.

Trimble Identity: OAuth Access Token Certificate Change

This is a reminder about the upcoming change to the Trimble Identity OAuth access token certificate. The new certificate will begin signing tokens on October 7th, 2025, on Production.

Trimble Identity SAML Signing Certificate Change

This is a reminder about the upcoming Trimble Identity SAML Signing Certificate change, as the current certificate expires on December 2nd.

IAM: Bootstrap api 

IAM has released its bootstrap api which enables devices to get its very first operational certificates in the field and also rotate in case of certificate compromise or expiry or due for expiry.

APICloud v2: Simplified Subscription Approvals in Console

The approval process has been simplified by consolidating all subscription and team requests into the Notifications menu, which now features a new, unified team-centric view. This will be available in production environments on September 18th. Read the notice for complete details.

Processing Framework: VPC migration

The Processing Framework AWS infrastructure is being migrated to a new VPC in each of the deployed environments. Most of the backend infrastructure can be migrated without disruption to customers, however the API and database components will require a brief period of service downtime during the migration. Staging will be migrated on October 1st, Production will be migrated on October 15th. Read the notice for complete details:

DISASTER RECOVERY DRILLS

IoT - Disaster Recovery Drill in Staging

IoT DR Drill for transitioning from Primary to Secondary in the Staging environment is scheduled for Sep 23, 2025 - 04:30 UTC to 8:30 UTC, with a rollback to Primary. This activity may cause partial downtime for integrators..

Read the notice for complete details.

AuthZ: Disaster Recovery Drill in Staging

Authz will conduct a Disaster Recovery drill in Staging on September 24th, 2025. During the DR drill, we may have intermittent availability for the integrators using our Staging environment.

Read the notice for complete details.

RELEASE NOTES

Trimble Identity

• The latest UI changes for user consent, account switcher, and passkey enhancements now support multiple languages.
• SAML Certificate Rotation.
• External Application Logo Displayed in Consent Screens.
• Account Switcher Feature Enabled in Myprofile.
• Included the "account_id" claim in the well-known configuration.

API Cloud & Cloud Console

• Implemented the Referrer-Policy header for Console to enhance user privacy and security.
• Added the X-Frame-Options header to prevent the console from being embedded in malicious sites.
• Implemented the X-Content-Type-Options header on all responses for Console to prevent browsers from MIME-sniffing the content type.
• Implemented the Strict-Transport-Security (HSTS) header on all HTTPS responses for Console.
• Introduced a streamlined workflow for API and Product creation within the Console to improve the user experience.
• Flattened API Subscription Sync.
• Restructured API Deployments for Dev & QA.
• Expanded Consent Control.
• Enhanced Product Visibility for External Teams.

Identity and Access Management (IAM)

• Applications or Users can now look up accounts using their unique short code.
• Account Search by user email ID.
• Address Search by CDH ID.
• Real-time Events Publish for Invitation.
• Updated our Identity and Access Management (IAM) service to include a new, clear, and extensible error code strategy.
• Public key management in device api.
• We now publish add_organization_address and add_organization_enrichment events alongside existing organization lifecycle events.

IoT

• TDMG metrics data has been successfully migrated from DataHub to the new EDW pipeline.
• Migration of Harvester Metrics Data to New EDW Pipeline.
• Migration of IoT Metrics Data to New EDW Pipeline.
• Device Token Support for IAM Devices in IoT.
• Improved Code Quality and Coverage for IoT-Lifecycle Lambda.

Processing Framework

• Enhanced rescheduling of Engine.
• Updates to the EKS.
• Enhanced delegated authorization.
• Increased the configured memory limit.
• Enhanced Datadog logging.

Trimble Access Management (TAM)

• Seamless data.json Updates via TAM API and CLI.
• Global WAF Rules for CloudFront Listeners.
• Explicit Capabilities File Support in CLI Test Runs.
• Improved OTEL Log Instrumentation.
• API Error Code Documentation Hyperlink.
• Upgraded Rego Builtins for EMS 4.1.

Need to join the mailing list for this newsletter or know someone who does? Let us know by filling out this very short form: