What's New

More precise search for last user log-in - On the Users search page, two new fields - Last Log In: From and Last Log In: To - replace the Last Log In Prior To date filter. This lets you search for user log-in instances within a more precise date range.

Restricting access to IDI environments by allowed IP addresses - New settings let you specify a pre-defined list of allowed IP addresses to restrict access to IDI web modules (Customer Care, Orders, Workflow, etc…). This helps ensure your employees or contractors are only accessing IDI environments from networks, work spaces, and computers that have proper security controls in place.
You can opt to bypass this restriction for certain power users as appropriate for your organization. For example, you may want to let trusted associates that travel frequently to access web modules from IP addresses not included in the allowed list.
Access to required setup in Security for IDI platform users requires Manage Domain permission.
For complete details on this see Restricting Access to IDI Environments by Allowed IP Addresses.

Bulk Updating Users - From the User Search Results, you can now select or deselect one or more individual users on the page by checking the corresponding rows, or select and deselect all users by clicking the down arrow in the first column and choosing Select or Deselect all items on the page.
Default Activation Date to Current Day - The Activation date defaults to today’s date rather than blank (no date),
More Info Icons for Account Information and Settings Panels - Info icons have been added to several settings to provide more information.

This page lists the following Security changes for v1.09:

Single-Sign On Support
The IDI platform supports the ability for user to log in using account credentials from external systems. This feature is supported using the Open Authentication standard (OAuth).
Single Sign-On Authorization Codes
Customer development teams now have the ability to Single Sign-On users into the IDI platform by requesting an Authorization Code for a user from the Security API.
- A new operation (CreateAuthorizationCode) has been added to the Security API which will create a temporary Authorization Code for a user account. The Authorization Code can be used in lieu of a user’s password to programmatically bypass the IDI ploatform Log In screen and send them directly into the application.
- Authorization Codes provide a Single Sign-On option for customers without needing to delegate authentication to a third-party OAuth provider or to host an OAuth service themselves.
IDI Switch Environment Enhancements
Using the IDI Environment Switcher no longer requires the user to authenticate to the new environment. Prior to release 1.09 users would be presented with the Log In screen for the new environment after being logged out of their existing one.
Note
Switching Environments will still log a user out of their current application session. The Environment Switcher dialog will caution the user to save any work in-progress before switching environments.
Security Styling Updates
Security has been updated with the IDI platform 2015 web styling.