a good thing!
The PingDirectory REST API allows developers to create customized applications for managing the entries in a directory instance. The PingDirectory REST API now supports controls previously only available via LDAP calls. This includes the ability to do joins, which allows for advanced data modeling of relationships. Additionally, customers using the Delegated Administration Application can now upload and display image files and upload certificates for properly configured resource types. Certificates are encoded before being stored.
Many customers use Ping Data Sync to either migrate from Active Directory or use Active Directory in conjunction with PingDirectory to manage user accounts. Administrators can now configure Ping Data Sync to include account state information set in Active Directory, specifically lockout time, the last time the password was set and whether or not the account is disabled. This information can now be automatically set within PingDirectory based on the information in Active Directory.
This early access release includes a new Passphrase Provider API, allowing administrators to obtain passphrases or passwords from secure alternative locations such as a HashiCorp Vault or other password providers. We've also updated several existing APIs to allow for the use of JSON fields to filter values in constructed attributes, providing flexibility for developers when creating custom applications.
Admins are now able to inject an artificial delay before sending a login failure response, in order to mitigate online password guessing attacks. Improved password strength can also be achieved by checking passwords against an additional 10,000 entries in PingDirectory's password validator, which can now check for capitalization, reversed passwords and more. For increased visibility, admins can now track login successes and failures by user.
This early access release enables admins to protect PingDirectory from password guessing attacks, expands the dictionary password validator including the ability to run periodic password validation, and adds a user’s login histories to log data. Additionally, admins can now manipulate and filter reports in PingDirectory before downloading to a CSV file.
Admins can now launch server profiles as a recurring task using the admin console instead of connecting to containers, creating more consistent deployments and enhancing DevOps automation. New delegated administration features further simplify user management by enabling delegated account management access during user account creation, group management, resource management, and onboarding new tenants.
To further simplify the IAM workflow, Delegated User Administration has added configuration capabilities to support more directory data layouts. Admins, when using LDAP groups instead of organizations to group their customers' users, can now delegate adding new users to those existing customer groups. Note: this is an early release, please contact your account manager to sign up.
Address broader Customer IAM use cases with out-of-the-box solutions and less custom development. Easily send multipart HTML email notifications to end users for account state notifications, important attribute changes and invitation emails. Additionally, delegated administration has been expanded and allows for management of broader user types.
PingDirectory 22.214.171.124 is a cumulative maintenance release for PingDirectory 7.3 which introduced performance enhancements and issues fixes.
Delegated User Admin 3.5.0 tool expands support for attributes that can be delegated to other administrators. Now customers and partners can customize the UI look and feel. Additionally, attributes can be constructed from the combination of other delegated attributes.
More and more organizations want to follow DevOps and "continuous software delivery" practices to increase business agility and reduce risk. PingDirectory 7.3 adds a new Server Profiles feature plus updates to cluster topology management tools to greatly simplify the deployment and configuration management of PingDirectory in highly automated environments.
PingDirectory 126.96.36.199 and 188.8.131.52 are cumulative maintenance releases for PingDirectory 7.2 and 7.1. These releases contain important security and reliability updates. All customers are encouraged to update.
With PingDirectory Delegated User Admin 3.3 administrators can now allow delegated administrators to create groups and roles of different kinds. For example, delegated admins can create manage the membership to groups representing application entitlements.
We are pleased to announce PingDirectory 7.2.1. It includes a number of features that make it easier to manage identity data. PingDataSync now supports bi-directional synchronization with PingOne for Customers to help create a unified customer profile across software and IDaaS user stores. We also made it easier to integrate PingDirectory with Active Directory by adding flexibility to the pass-through authentication plugin. Lastly, we've enhanced delegated administration configurations so you can allow different sets of delegated administrators to manage subsets of the identities in PingDirectory.
PingDirectory 7.2 is a major release that includes a brand new API to make it easier for developers to manage identity data and meet business requirements quickly. The release optimizes how identity data is searched to improve directory performance and supports new platforms.
PingDirectory 7.0.1 adds new capabilities to the Delegated Admin application package, which enables directory administrators to delegate the responsibility of managing group memberships for users in the PingDirectory Server. Administrators can easily delegate to individuals or groups of users, and assign authority over one or more groups in the PingDirectory Server.
PingDirectory 7.0 adds new features for easier management and enhanced security. To lessen directory administration workload, now you can easily delegate profile management to others in the enterprise. The Delegated User Admin web application enables customer service reps or help desk techs to update user profiles, unlock accounts, and reset passwords. Also, take advantage of several new features for enhanced security. Now you can encrypt data indexes to secure data and maintain performance; you can more easily encrypt and decrypt data backups, LDIF exports, and log files; and you can more easily manage the SSL certificates used for secure replication within clustered environments.
The PingDirectory 7.0 beta release provides consent capture and management capabilities to meet GDPR and similar consent-based regulatory requirements. This beta also includes a user administration application to support delegating abilities from admins to regular users, such as the ability to update profiles or initiate password resets on behalf of other users.
PingDirectory can now be configured to run in a mode compliant with the Federal Information Processing Standard (FIPS) 140-2 enabling it to be deployed in compliance with FedRAMP. Additionally, the Delegated Administration application improves account management providing the ability to display more complete account and password state information. It also allows delegated admins to initiate company-defined password resets for their respective populations.
Organizations use automation to achieve high availability - this release provides new options to the dsreplication command and can now speed up this process by initializing replication on multiple servers in parallel. In addition, admins can apply their own branding to console elements such as background colors, images and logos, and certain text elements. Also, the Delegated Administration application can now be configured to link entries in a more flexible manner.