Content
Roadmap
4.8.12
There are currently no work packages assigned to this version.
4.8.13
There are currently no work packages assigned to this version.
4.9.6
Finish date 02/04/2026
about 4 months late
0 closed (0%) 6 open (100%)
Related work packages
- Bug #10226: Remove single quote (') surrounding the arguments in the localization keys within midpoint-localization project
- Bug #10353: SchemaDoc links are probably incorrect
- Bug #10363: Update documentation and other resources influenced by H2 removal
- Bug #10558: Error in log during configuration of extension schema by GUI
- Task #9594: Check the performance reduction in Oracle-master jobs in recent Jenkins tests
- Task #10435: Adapt certifications tests
4.9.7
There are currently no work packages assigned to this version.
4.9.8
There are currently no work packages assigned to this version.
4.10
Related work packages
- Bug #889: closed When reimporting resource, connection pool is not invalidated, old connections may be reused causing strange problems
- Bug #4502: Random password generator sometimes generates passwords that do not meet policies
- Bug #5896: closed Approval performance issue when using byClaimingWorkItem
- Bug #6647: Extra label for default/additional reviewer spec
- Bug #8152: closed "Cloning a Serializable (class ObjectQueryImpl). It could harm performance." message in log
- Bug #8196: closed When starting writing Axiom query, a nonsense error message is shown
- Bug #8834: closed Work item list: search doesn't work for name attribute
- Bug #9192: closed Role mining -> business role wizard
- Bug #9193: Role mining -> business role wizard, modification preview
- Bug #9204: Role mining, session clustering tasks issues
- Bug #9272: closed Create task from resource
- Bug #9618: closed Initial objects (reports) does not use MidPoint Query language.
- Bug #9632: closed Report preview not resolving ObjectReferenceType
- Bug #9670: Fix referencedBy/ownedBy filter authorization checking
- Bug #9868: closed Dashboard widget with multiple variations does not work
- Bug #9879: closed Dashboard widget without object collection
- Bug #10206: closed Unable to display ServiceType correctly in the role catalog of request access
- Bug #10312: closed Permission error with shadow partitioning in 4.9
- Bug #10315: closed Description column in role / service tables is too wide
- Bug #10415: Resource wizard: attribute autocomplete uses "startsWith" filter instead of contains
- Bug #10418: ninja import systemconfiguration ends with reason: Version must be a number: null. Reason: Version must be a number: null
- Bug #10467: closed Query with expression does not work with single backticks, works with triple backticks
- Bug #10471: closed Localization error - password already used
- Bug #10485: closed Search by ObjectReferenceType attribute not working
- Bug #10486: closed Sorting not working correctly for the first column in collection view
- Bug #10487: closed Object collection filter not working correctly on All users page
- Bug #10496: closed Recomputation task does not start at the next scheduled time
- Bug #10498: closed 500 error when setting read permission with filter on ReportDataType
- Bug #10502: closed Accumulation of authentication attempts
- Bug #10504: closed Role analysis: attribute analysis incompatible query construction
- Bug #10507: closed Remove button for credentilas visible without proper authorization
- Bug #10519: closed Role analysis: group by configuration
- Bug #10526: closed Role mining: member panel above user-permission table headers
- Bug #10539: closed Can't search shadows in GUI Repository objects view in basic mode
- Bug #10561: closed Role mining: user-permission table icon resolver
- Bug #10570: Default authorization roles refer to removed and deprecated properties
- Bug #10620: Visualizer does not correctly set "descriptivness" on VisualizationItem
- Bug #10630: closed Preview of password change has duplicit "headings"
- Bug #10631: Delta formatters used in notifications contains hardcoded text without localization
- Bug #10638: closed GUI: list of application classifications is empty
- Bug #10710: closed The "Matching rule" dropdown in Attribute override settings shows incorrect options
- Bug #10734: closed Allow creating generic policies through the GUI
- Bug #10770: closed TestPageOrg.test005testCreateChild needs rework
- Bug #10848: Can't hide query playground for superuser (with #all authorization)
- Improvement #6112: closed Use "official" model delta/items visualizer in notifications
- Improvement #8448: Dashboards with asynchronous widgets should have date and time of last update displayed.
- Improvement #8551: Synchronization reaction to set lifecycleState value
- Improvement #8633: Resource wizard: show archetype display name (as in simulations)
- Improvement #8858: closed Mail Transport - Modern Authentication
- Improvement #10240: closed Update Logo in MidPoint
- Improvement #10287: closed Standardize reporting of task progress (what is done at the end).
- Improvement #10347: closed RBAC Generator Improvements
- Improvement #10414: closed Global setting for max page size
- Improvement #10483: LookupTable label not displayed in Object Collection View list
- Improvement #10632: closed Switch use of `ValueFormatter` in notifications to `VisualizationBasedDeltaFormatter`
- Improvement #10633: closed Add logging to visualization based delta formatters
- Improvement #10635: closed Add fallback description handler to the`Visualizer`
- Improvement #10647: closed Policy rule: requirement: support for archetypes
- Improvement #10663: closed Triggering assignment policy rules for indirect assignments
- Improvement #10764: Classification icon
- Task #981: Document system initialization
- Task #8832: closed Remove AD2016 conntests
- Task #9277: Cleanup role mining code
- Task #10337: closed Prepare Jenkins jobs for Oracle23ai
- Task #10442: closed Prepare tests for comparing old vs. new style for associations
- Task #10446: closed Compare performance by system components
- Task #10462: Collaborative filtering prototype
- Task #10711: closed Spring boot upgrade to 3.5.x
- Task #10866: closed Remove support for generic DB implementation
4.10.1
There are currently no work packages assigned to this version.
4.10.2
There are currently no work packages assigned to this version.
4.10.3
There are currently no work packages assigned to this version.
4.10.4
There are currently no work packages assigned to this version.
4.11
Finish date 10/15/2026
Due in about 4 months
Related work packages
- Bug #11184: Accept all association type suggestions on resource fail with error 500
- Bug #11199: closed Studio: Upload button does not work for directories
- Bug #11201: midpoint.sh does not process post-initial-objetcs recursivelly
- Bug #11202: Services without archetype in initial objects
- Bug #11281: Smart Integration - Display existing object types along with suggestions on the object type suggestion page
- Bug #11288: Smart Integration - I want midPoint to support basic complex attributes to allow SCIM integration
- Improvement #2340: Search clause editor
- Improvement #8281: Add attribute for application environment to standard schema
- Improvement #8617: Resource wizard: showing details data of shadows in wizard
- Improvement #8774: Simulation results: related objects improvements
- Improvement #8802: Add new user property for preferred user's name
- Improvement #9356: Attribute-bound correlation definition is not displayed in resource wizard
- Improvement #9375: closed Resource wizard: LDAP basecontext for object Type is not supported
- Improvement #9476: closed Problems with Search Box in Object Collection View
- Improvement #9639: User Profile - All accesses leaking assignments
- Improvement #10061: Safe expression language
- Improvement #10174: Metadata documentation
- Improvement #10380: Gui improvements: Correlation wizard
- Improvement #10381: Gui improvements: Association tile
- Improvement #10382: Gui improvements: Status display for object type
- Improvement #10832: Add caching support for complex attributes
- Improvement #10921: closed Smart Integration - Implement Error Loop in suggest mappings operation
- Improvement #10922: closed Smart Integration - Implement Error Loop in suggest object types operation
- Improvement #11050: Multi-tab Browser Support
- Improvement #11155: closed Smart Integration - Make re-try mechanism configurable in generating mapping scripts
- Feature #10783: closed Smart Integration - suggest focus type method
- Feature #10784: closed Smart Integration - resource data loading
- Feature #10785: Smart Integration - suggest associations
- Feature #10786: closed Smart Integration - initial smart integration service interface
- Feature #10787: closed Smart Integration - initial object types flow
- Feature #10788: closed Smart Integration - initial suggest correlation for user type
- Feature #10789: closed Smart Integration - initial attribute mapping
- Feature #10790: closed Smart Integration - change focus type method to async interface
- Feature #10792: closed Smart Integration - add focus type suggestion s to suggest object type method
- Feature #10793: closed Smart Integration - extend object type suggestion with display name and description
- Feature #10795: closed Smart Integration - extend object type sugestions with prefix/postfix statistics
- Feature #10796: closed Smart Integration - extend object type suggestions with statistics on LDAP dn
- Feature #10803: closed Smart Integration - mini simulation for correlation
- Feature #10804: closed Smart Integration - mini simulation for mapping
- Feature #10943: closed Smart Integration - Provide support for outbound mappings
- Feature #10965: closed Fast simulations of correlators
- Feature #10971: closed Fast simulations of correlators - UI
- Feature #10992: Smart Integration - Mappings suggestions
- Feature #11031: closed Fast simulations of correlators - allow to define additional mappings
- Feature #11049: TOTP Support
- Feature #11051: Focus-based policies support for task activity
- Feature #11255: Connector Generator: Search / Read customization support for SCIM
- Feature #11256: Connector Generator: Search / Read customization support for Multitable Connector
- Feature #11257: Connector Generator: Support for ITSM connectors
- Feature #11258: Connector Generator: Connector Import / Export Support
- Feature #11260: Connector Generator: YAML Declarative form of Low-Code Connectors
- Task #7748: Review default config for approvals (and docs)
- Task #8804: Discuss Orphaned account (and add mark for it if needed)
- Task #10780: Upgrade to AdmiLTE 4
- Task #10817: Implement GUI panels for suggestions of correlation rules
- Task #10818: Implement GUI panels for suggestion of object type
- Task #10872: closed Re-enable and fix failing smart integration tests (WP23)
- Task #10923: Smart Integration - I want to get suggested complex associations
- Task #11276: Smart Integration - Suggest outbound mappings for simple associations
- Task #11277: Smart Integration - I want all expressions generated by Smart Integration to use MEL
- Task #11278: Smart integration - Tune LLM prompts for better MEL generation
- Task #11279: Smart Integration - Filter existing object types from suggestions
- Task #11280: Smart Integration - I want to re-generate suggestions for partial data
- Task #11282: Smart Integration - Use existing object types while generating object type suggestion
- Task #11283: Smart Integration - Extend microservice API/LLM prompt with existing object types
- Task #11284: Smart Integration - Migrate experiment to run in safe EL
- Task #11285: Smart Integration - I want to get suggested mapping that usually requires iteration token
- Task #11286: Smart Integration - I want to be able to easily simulate existing/suggested outbound mapping for an attribute
- Task #11287: Smart Integration - I want to get suggested pre-defined mappings for SCIM resources
5.0
LTS, Evolution-revolution
Related work packages
- Bug #1561: Extra values in tolerant multi-value attributes with high-order dependencies
- Bug #1619: Cleanup: ICF concepts in UCF Operation interface
- Bug #1651: Building code with tr-TR locale
- Bug #1956: Some kinds of changes are lost (not recognized) when editing via debug pages
- Bug #1982: Documentation not generated for XML attributes
- Bug #2003: Schema doc: no documentation for references
- Bug #2092: When parsing a bean, object factory is taken from bean's package
- Bug #2101: Changing connectorType without changing namespace and connectorRef oid is ignored in debug pages + fix discrepancies stemming from diff(isLiteral:=true) use!
- Bug #2171: Wrongly-typed property cannot be fixed via debug pages
- Bug #2313: Security Policy <QuestionNumber> contradiction
- Bug #3090: closed Dynamically linked WSDL contains unproxied xsd reference
- Bug #3105: Problem with (connector specific) exceptions when using Connector Server
- Bug #3263: Schemadoc: some documentation missing
- Bug #5280: Fixed narrow method causes problems with incomplete data (passwords, task result, etc)
- Improvement #823: Test connection should test also "connector sanity", e.g. invalid attribute names
- Improvement #966: Cleaner StAX/Prism parser
- Improvement #1312: Deprecated annotation for schema
- Improvement #1496: Audit records and target
- Improvement #1515: Warning/error for wrong ProtectedStringType structure.
- Improvement #1704: Provide clusterwide information on stalled tasks (currently, only stalled tasks running on current node are shown in GUI as stalled)
- Improvement #1760: ConnId Javadoc
- Improvement #1970: Intelligent validation of data when importing/editing
- Improvement #2111: closed Resource wizard: Deprecated synchronization actions
- Improvement #2229: Testing samples while building is too sensitive, failing even if the objects are importable
- Improvement #2409: Change provisioning synchronization()/fetchChanges() to callbacks
- Improvement #2417: Shutdown methods in interfaces
- Improvement #2683: Do not show actions on GUI where I don't have access
- Improvement #3051: closed Special-purpose services and ModelService
- Improvement #3069: PolyString groovy operator overload
- Improvement #3078: Optimistic locking exception
- Improvement #3123: Repo/resource indicator
- Improvement #3129: ModelService option to return edit schema
- Improvement #3211: Security questions cleanup
- Improvement #3231: Allow to specify multiple target types in prism reference definition
- Improvement #3433: Resolve references to names in debug pages (as comments) for assignments and lookuptables
- Improvement #3435: getObject() support for editSchema
- Improvement #3837: Common-3 schema include issue (not possible to import diff. files with same targ. NS)
- Improvement #3980: Better management of "add" buttons on authorization/configuration
- Improvement #4779: Proper use of connector dispose()
- Improvement #6052: Unify template expressions in midPoint
- Improvement #6386: Support for structured default and constant values
- Improvement #6833: Clarify clone/copy contracts, mutability, freezability in midPoint
- Improvement #6935: User-friendly matching rules in queries
- Improvement #7907: Inbound mappings with multiple sources
- Improvement #8280: closed Adding new schema extension in a seamless way
- Feature #777: closed System configuration summary
- Feature #1654: Role-Org inducement improvement
- Feature #2268: API method to check existence
- Feature #3523: Prism cleanup (part 2)
- Feature #3989: Prism 5
- Feature #8468: Allow empty object names in midPoint (first steps)
- Task #663: Describe connector schema in wiki
- Task #797: Review Maven setup
- Task #1768: Finish workflow cleanup.
- Task #2168: Document: requirements and recommendations for IAM integration
- Task #2191: Formalize rules for using unqualified QNames and review the code accordingly
- Task #2286: Decide if, where and how to use default values provided in the schema (e.g. for enumerations)
- Task #2495: Security Policy Error Handling
- Task #3412: Plugin: clean up source code
- Task #5010: Eliminate the need for artificial element names for abstract containers
- Task #5576: Make PolyString really immutable (except for norm)
- Task #8012: Decide on the fate of origIgnoreCase/normIgnoreCase/strictIgnoreCase
backlog
The pool of all tasks that are planned to be implemented eventually. The scope of each release is selected from backlog.
97 closed (9%) 1012 open (91%)
Related work packages
- Bug #710: closed JMX sometimes becomes unreachable
- Bug #918: ScriptedSQL connector won't survive database restart
- Bug #919: ScriptedSQL connector will not "see" users created in the database during its run making synchronization useless
- Bug #1007: Better error messages for adding a user to OpenDJ with some items missing + Incorrect treatment of 'sn' attribute.
- Bug #1243: suspicion: OpenDJ resets synchronization token after purge delay
- Bug #1296: Conflicting IDs in swallow
- Bug #1518: Notifications on retried account operations may contain wrong or empty REQUESTER information
- Bug #1644: midPoint does not reflect account rename if it is long-time/pending operation on resource
- Bug #1869: Return runtime state information on cluster nodes via getObject() call
- Bug #2046: DBTable Connector caches the schema until either DB/midPoint restart
- Bug #2070: Use resource wizard in special mode (button) to generate resource configuration documentation
- Bug #2087: Provisioning + consistency + strict dependencies problem
- Bug #2132: Editing assignment parameter for role duplicates role assignment
- Bug #2232: Colliding deltas in workflows
- Bug #2288: More flexible approval notifications (candidates + on task cancellation)
- Bug #2328: connectorConfiguration in connector schema is without maxOccurs
- Bug #2397: Expression with concatenation of polystring throws "Cannot execute null+null expression"
- Bug #2435: "Resolve" option does not work with multi-segment paths
- Bug #2448: AssignmentTargetSearch script vs. path problem
- Bug #2458: Slow provisioning and fast livesync
- Bug #2476: Provisioning to AD fails if user to be created with iteration that is same as a group or in a protected object
- Bug #2477: closed Audit Events - dummy entries
- Bug #2518: Exotic mapping interaction with multi-resource reconciliation
- Bug #2613: Can't create orgs with russian names
- Bug #2618: closed Conditional mapping to administrativeStatus does not work
- Bug #2817: Display MIME type for binary attributes with possible preview (small icon for image)
- Bug #2843: Duplicate Error in Name (username) Field
- Bug #2912: noFetch + resolve
- Bug #3127: closed MP Repo MSSQL: dbo.hibernate_sequence
- Bug #3221: Delete and deny
- Bug #3245: Connector Server logs case insensitive filter on Error logger (or higher)
- Bug #3256: AD livesync throws NPE when AD Configuration was changed
- Bug #3270: Unable to change intent in association definition
- Bug #3301: Password policy not applied on direct resource modification
- Bug #3302: SSO user missing End User role
- Bug #3347: Allow configuring validation query (and other data source parameters) for Quartz scheduler
- Bug #3350: Allow editing approvalSchema structures
- Bug #3361: Show actual pictures when changed (in user change preview)
- Bug #3376: ReturnDefaultAttributes is ignored by connId
- Bug #3378: Quartz scheduler in JDBC mode intermittently fails with MySQL
- Bug #3427: closed WSDL cannot be retrieved online
- Bug #3444: Operation result does not display the primary error (projector issue?)
- Bug #3449: Reconciliation when importing from LDAP
- Bug #3485: Object merge bugs & improvements
- Bug #3487: Delta with "filled-in" reference is temporarily not supported
- Bug #3602: Having an account with two UIDs prevents midPoint from listing any accounts
- Bug #3611: edit resource -> Accounts -> Resource -> unknown number of matching results for CSVConnector
- Bug #3621: Vague exception after setting "Enabled security protocols" field
- Bug #3644: warnings in log when run Audit log report
- Bug #3651: closed scripted SQL connector and image type attribute errors
- Bug #3676: Password generator does not use per-organization password policy when creating users
- Bug #3707: reconcile read data one by one from resource not only find all at the beginning
- Bug #3714: limitations/maxOccurs=1 on user ri:description attribute is ignored when I'm using auxiliaryObjectClass in AdLdapConnector
- Bug #3715: Check if concurrent startup of 2 instances over common empty DB works correctly
- Bug #3722: closed Fill-in channel in certification campaign operations (e.g. stage close)
- Bug #3723: closed Eclipse XML formatting
- Bug #3752: closed Problem with compile
- Bug #3765: Fix intolerantValuePattern for properties.
- Bug #3776: Progress count for executeScript bulk action task is not updated
- Bug #3781: objectForms in adminGuiConfiguration are not functioning as intended
- Bug #3795: Configuring global policy rule for conditional approval of role requests
- Bug #3817: Missing RequestId for REQUEST vs. EXECUTION
- Bug #3818: Missing resource reference in audit log event
- Bug #3822: closed LDAP could not modify shadow, Item '{http://midpoint.evolveum.com/xml/ns/public/resou rce/instance-3}dn' without definition can't be saved
- Bug #3825: Merge page does not display error messages (they are displayed in idm.log and on next page)
- Bug #3872: Attribute 'id'
- Bug #3905: closed Quartz: optimize the synchronization process
- Bug #3912: XML Configuration Ressource Synchronize Creating user by specific template
- Bug #3913: Eclipse plugin should save the file before uploading
- Bug #3918: Extremely slow organization units browsing after expansion
- Bug #3936: More strict parsing of filters
- Bug #3966: Dynamically-evaluated assignments are not processed correctly
- Bug #4016: closed Installing from binary, midpoint did not start
- Bug #4019: MidPoint 3.5.1 and Tomcat 8.5.5 WARNING errors
- Bug #4057: closed Shutdown of midpoint and Powehell connector - WS Management exception
- Bug #4077: Fix deepClone on ObjectClassDefinition
- Bug #4097: Provisioning notification of FAILURE
- Bug #4106: Live sync with AD accaunt stalled
- Bug #4107: Clustered Midpoint Breaking Own Repository Object
- Bug #4117: Shadow has no attributes after refresh schema (LDAP Connector)
- Bug #4122: closed DB connection leak
- Bug #4125: closed SOD Policy rules approval and prune policy actions not evaluated
- Bug #4161: Problem reading activation attribute (simulated capability) if the attr is operational
- Bug #4164: closed Change password and illegible error messages
- Bug #4189: CAS Login Broken, maybe just needs some documentation
- Bug #4237: Save from Preview changes goes through the focus page (was: Adding new value shows wrong "bullet" (black))
- Bug #4239: impossible to create shadow account when creating user
- Bug #4288: Function basic.norm() delete "Ł" and "ł" instead replace them with "l"
- Bug #4368: UI_CSV_NAME_ATTRIBUTE field undocumented in GUI
- Bug #4420: "Repository objects" page could erase data
- Bug #4421: simpleWorkflowNotifier messages are not localizable
- Bug #4428: long vs int value in prism
- Bug #4501: Resource schema validation error when editing the XML in the GUI and option 'Validate Schema' is checked.
- Bug #4520: closed There are Chinese chaotic codes on some pages
- Bug #4557: User is not created from synchronization if the target accounts are failing with ObjectAlreadyExistsException
- Bug #4579: closed Make LightweightIdentifierGeneratorImpl cluster-aware
- Bug #4621: adminGuiConfiguration vs other roles without that
- Bug #4627: CAS: Logout after inactivity leads to 500
- Bug #4633: Higher order inducements defined with orderConstraint does not work for targetRef
- Bug #4683: Google Connector
- Bug #4717: Can't assign more than one GSuite group via GoogleAppsConnector to user
- Bug #4718: Google connector source code doesn't prompt for credentials so that I can get the refresh token
- Bug #4745: Audit improvements
- Bug #4750: Erro Office365 Connector
- Bug #4769: closed Resource Wizard problem: Can't create DatabaseTable Resource
- Bug #4771: Check expressions in password policy does not apply when validating password
- Bug #4774: User is capable of uploading a "too large" jpeg photo
- Bug #4812: ADD deltas for single-valued properties break mapping evaluation
- Bug #4834: Query.match issues
- Bug #4907: Can't list users on russian language in UI ( Error 500 )
- Bug #5003: Password propagation does not work ("user" channel)
- Bug #5041: Fix failing TestWorkersManagement.test220PartitioningToWorkersMoreBuckets
- Bug #5059: Too many tables error when trying to view user details
- Bug #5065: Prism delta validation
- Bug #5123: YAML !!binary is treated as text not as a binary
- Bug #5142: Ninja does not correctly use relative paths for arguments
- Bug #5148: Scripting hooks scripts are evaluated with evaluateNew = false
- Bug #5271: Remove password action throws error trying to remove resource account password, but removes the password from midPoint user
- Bug #5276: Support isIdempotent on LookupTableType deltas involving deletion of rows by keys
- Bug #5302: closed Eclipse plugin: configurable raw vs full object import
- Bug #5311: Ldap comparator (midcredible)
- Bug #5409: Concurrent transactions on H2 corrupt data
- Bug #5412: Plus symbol in emailAddress breaks password reset
- Bug #5432: Midpoint 3.9 does not search users with names in Russian
- Bug #5468: com.evolveum.midpoint.util.exception.ConfigurationException: Configuration error: ERR_13219_NULL_SYNTAX_CHECKER Cannot validate 1000000006 with a null SyntaxChecker
- Bug #5506: Import Account from OpenLDAP to MidPoint
- Bug #5623: closed Eclipse plugin fetches data from REST and shows strange whitespaces
- Bug #5708: LDAP recompute user error
- Bug #5745: ldap connector (apache ldap library) does not support opendj schema
- Bug #5784: isMemberOf check does not work with role pruning
- Bug #5831: Index-only attributes are not supported by searchObject call
- Bug #5833: Fix the performance of large groups processing
- Bug #5848: closed Modification of associations throws ClassCastException
- Bug #5852: Prism hashCode is sometimes too weak (ignores equivalence strategy setting)
- Bug #5859: Implement missing OrgFilterImpl.match method
- Bug #5860: Resource wizard: setting limitations fails with 500 internal server error
- Bug #5861: Audit report shows ObjectNotFound ERROR in log for deleted resources
- Bug #5877: Error in front end If Birthdate is 10/11/1998 (english notation, 1998-10-11, october)
- Bug #5924: closed Notification does not contain correct channel during import
- Bug #5931: Unexpected "No resource schema; have you executed the Test Resource operation?" in async connector
- Bug #5937: Extensive (and misleading) error messages on "already exists" condition
- Bug #5955: Reconciliation bricks whole midPoint instance
- Bug #5957: Resource wizard: schema and auxiliary object classes
- Bug #5976: maxAge security policy parameter ignored for passwords without timestamp
- Bug #6207: Synchronous bulk action output is lost
- Bug #6272: DatabaseTableConnector fails on large tables due to timed out connection
- Bug #6292: Targets for skipped assignments are not loaded
- Bug #6295: NPE in UnixConnector updating or querying users
- Bug #6317: Cleaner stream closing in DomLexicalProcessor#read* methods
- Bug #6323: Enable ModelController.preProcessWorkItemSecurity
- Bug #6339: Entitlements use cases failure
- Bug #6357: Synchronization doesn't update shadows
- Bug #6470: English: capitalisation is not consistent
- Bug #6582: Keyboard shortcut ENTER sometimes doesn't work in search filter
- Bug #6598: Issue meaningful warnings when bulk actions variables cannot be cloned
- Bug #6614: Audit record opened in new tab - midpoint does not remember audit record
- Bug #6639: Strange "change owner" icon for resource objects
- Bug #6642: Resource wizard: error after Add protected account button click
- Bug #6649: Empty dropdown menu on 'Delegation to me' tab
- Bug #6652: closed Certification-related tasks do not have correctly set visible items
- Bug #6686: Consolidation of PCVs with IDs does not work
- Bug #6687: ConnId: script exit code
- Bug #6711: Rethink usage of "Internal(s) Configuration"
- Bug #6741: Emoji on Request comment breaks several parts of midpoint
- Bug #6808: equals() for generated schema type uses different equivalence strategy than its prism container
- Bug #6829: Suspended tasks due to m_assignment_reference_pkey constraint in DB
- Bug #6856: Date handled incorrectly
- Bug #6986: PrismPropertyDefinition.getTypeClass() returns null for some ENUM types
- Bug #7003: modifyObject with invalid delta with wrong reference target type can be stored, but getObject fails
- Bug #7057: Excessive object cloning on ID-only PCV deletion: implement serious solution
- Bug #7069: Asynchronous provisioning connector does not distinguish between error types
- Bug #7092: It's not possible to fix wrong XML namespace used for anyc connector in GUI
- Bug #7126: Issue when deleting an assignment/inducement with documentation tag [not sure if this is a bug or by design]
- Bug #7140: Cant create Org and/or role wich name conflicts after normalized with already existing org or role
- Bug #7166: It is no longer possible to limit reconciliation scope in a flexible way
- Bug #7180: Race conditions in task management
- Bug #7194: Assignment activation doesn't work properly
- Bug #7210: Cluster authentication error between separate docker hosts
- Bug #7243: Slow consolidation for large items
- Bug #7244: Needless Projector execution
- Bug #7320: Obsolete information in "objects being processed"
- Bug #7336: Required attribute UID not found in identification set while attempting to fetch object
- Bug #7338: Future of midPoint evaluation (demo) deployment
- Bug #7352: midpoint.sh and systemd service file generator uses incorrect parameters
- Bug #7357: Page refresh (including auto-refresh) refreshes the page to the original state before user interaction again and again
- Bug #7361: Multi-node task is shown as running, although the work is done
- Bug #7417: Merge identities doesnt work
- Bug #7419: Reconsider correctness of raw mode implementation in provisioning get/search ops
- Bug #7441: midPoint cannot be stopped during startup
- Bug #7453: Wrong authorization in hogwarts demo (in midpoint-samples)
- Bug #7479: closed MP Studio errors with HTTP/2
- Bug #7506: Incorrect / inconsistent icon for Resource / Accounts / Import
- Bug #7511: No warnings are reported when uploading object via REST with invalid references
- Bug #7584: Misaligned log records in trace file
- Bug #7595: Design problems on smaller screens
- Bug #7607: Wrong indent in task activity setting (recon)
- Bug #7635: Error fatal while listing resources
- Bug #7641: When profiling is turned off, it is still tracing
- Bug #7650: Discuss midPoint 4 mappings
- Bug #7653: ItemWrapperModel header wrapper without parent
- Bug #7663: Schema Registry (via PrismSchema objects) contains duplicate type definitions
- Bug #7667: Logging to syslog: problem with documentation vs GUI
- Bug #7699: Password reset warning: Null principal
- Bug #7721: Asynchronous update task can get closed during test connection operation
- Bug #7743: Sysconfig/logging/subSystem not configurable by UI
- Bug #7755: pagedSearchEstimate throws NPE
- Bug #7772: Missing statistics for asynchronous update tasks
- Bug #7784: only string attributes allowed for associations
- Bug #7786: "Intolerant value pattern" kills all attribute values
- Bug #7805: Multi-node task cannot be restarted "from zero state"
- Bug #7806: Security policy from organization is not applied during user creation
- Bug #7811: Misleading 128bit encryption key initialization
- Bug #7812: Problems with recovery of failed multi-node task
- Bug #7826: Browsing of org tree is broken if there are multiple parents
- Bug #7828: Documentation on object collections and views and dashboards is messy
- Bug #7830: Multi-node import task freezes the system
- Bug #7832: Logo settings with relative path does not work on Windows
- Bug #7838: Undiagnosable 500 from ID Match service
- Bug #7841: Variants for asynchronous dashboards do not work
- Bug #7852: Parameter column expression code is lost
- Bug #7854: Task in "suspending" state is shown as "suspended"
- Bug #7856: Task is marked as stalled even if it's already running
- Bug #7857: Report tasks write operationExecution records on objects being reported
- Bug #7858: Unnecessary namespace declarations when report params are serialized
- Bug #7863: Various "cloning a Serializable" performance hints
- Bug #7864: Distributed export produces strange warnings in the log
- Bug #7867: Review date-time formats used for reports
- Bug #7870: "Deep clone of container definition" performance hints
- Bug #7876: Strange exception when running multi-node task
- Bug #7878: Partial reports data cannot be deleted via GUI
- Bug #7881: "Cleanup after completion" does not work with multinode tasks (task trees)
- Bug #7883: midpoint.sh: generate systemd object add unrelated string (log) to the output
- Bug #7915: Use of string instead of byte array for PBEKeySpec
- Bug #7919: Misleading synchronization statistics in recon task (concerning protected accounts)
- Bug #7920: Creating and immediately deleting Grouper group suspends the asynchronous task and throws NPE
- Bug #7929: Specify (and unify) semantics of PropertyLimitationsType
- Bug #7949: BasicExpressionFunctions library: completion for library functions does not see all functions
- Bug #7961: Request approval history incorrectly states approver (approval on behalf of)
- Bug #7970: ContextLoader.loadFullShadow silently returns repo-only shadow even if full shadow is available
- Bug #7971: Couldn't parse object ResourceType
- Bug #7980: API JSON ExecuteScript request (Pipeline) leads to 500 Error IllegalStateException
- Bug #7997: Sync job on LDAP ressource not re-started
- Bug #8003: User history - Create report - report preview shows deltas in very strange way
- Bug #8010: Exception on checking name
- Bug #8015: midPoint allows to create assignment with any relation name (undefined before using)
- Bug #8046: Captcha Problem in MidPoint Docker Container
- Bug #8064: Notifications - actor's changed contact info not reflected until relogin
- Bug #8070: Missing object template referenced from System configuration causes different behaviour for UserType and OrgType and strange errors
- Bug #8080: Dark mode small issues
- Bug #8091: Duplicates in shadows tags are not detected
- Bug #8117: Import report/reverse report gets error if data contain accents
- Bug #8118: findLinkedSource function throws java.lang.IllegalStateException (missing OID) if called during creation of the focus
- Bug #8151: Suspicion: LDAP connector SPR implementation, wrong paging after reconnect
- Bug #8153: TestActivities.test310 fails occasionally
- Bug #8159: "Current CID sequence (x) is not above max used CID (y)" during 4.5->4.6 upgrade
- Bug #8180: "Export to CSV" is confusingly slow
- Bug #8193: New collection-based report cannot be previewed (in non-popup mode)
- Bug #8203: It is possible to invoke "change archetype" even if there is no other archetype available
- Bug #8211: Header, text and buttons are not aligned in confirmation dialog.
- Bug #8212: "Expand" symbol for assignments cannot be hidden
- Bug #8215: Reset to factory defaults deletes all objects in strange order
- Bug #8220: When the account deletion is disabled, user deletion error is misleading
- Bug #8228: Incorrect feedback message on the Repository objects page
- Bug #8237: Import without sync settings is mistakenly shown in green
- Bug #8240: Strange empty label in a completed correlation case summary panel
- Bug #8246: Correlation: when some of the candidate owners are deleted in the meanwhile, none is displayed
- Bug #8249: closed Users details page: Enter key click submits the form but doesn't redirect to users list
- Bug #8253: Weight setting for single correlation rule is ignored
- Bug #8266: 500 when using search on the organization tree page
- Bug #8276: Error while trying to access a malformed report with GUI
- Bug #8284: spring framework security config (log)
- Bug #8285: (non critical) invalid reference during the init import (log)
- Bug #8286: Axiom YAML expression obscure error when not indented
- Bug #8290: Correlation item is not "correlator"
- Bug #8296: Report task modify inconsistent data on AD resource through discovery channel
- Bug #8307: Protected accounts cannot be displayed in Resource configuration
- Bug #8311: Self registration: registration confirmation page isn't loaded after user opens a link from the notification
- Bug #8312: DynamicFormPanel usage should be reviewed
- Bug #8322: Cleanup task does not have System task archetype assigned
- Bug #8325: Ninja in 4.5 does not warn of deprecations since 4.6
- Bug #8338: Invalid mapping in activation/valid(From|To)/source produces unhelpful error
- Bug #8342: Environmental Performance from Clustered Task
- Bug #8352: Provisioning Scripts arguments
- Bug #8356: Excessive task updates when running them, especially Cleanup task
- Bug #8374: Duplicate user repository modify on login
- Bug #8393: XML editor and code suggestion (or what)
- Bug #8417: Report preview on user's history generates delta in unreadable format
- Bug #8428: PPV(null) for metadata sent by GUI after Object template is removed
- Bug #8433: Python Script Evaluator always returns NULL as a result of executing a multi-line script
- Bug #8442: Missing schemas in schemadoc.
- Bug #8450: Axiom serialization not working for some filters
- Bug #8472: No layer specified in limitations does not include presentation layer
- Bug #8473: Calendar widget - part of month name is hidden
- Bug #8481: Midpoint - DB ERROR: insufficient data left in message
- Bug #8504: Table width on resource accounts page vs content
- Bug #8507: Fix TestImportRecon seriously
- Bug #8522: asPrismObject on PCV-based Objectable returns null
- Bug #8532: Multithreaded async update does not work?
- Bug #8552: expression/script/returnType seems to do nothing
- Bug #8564: Docker examples not working
- Bug #8579: "Report configuration before run" page displays incorrect values.
- Bug #8618: Slow and buggy Class loggers setting to StandardLoggerType
- Bug #8626: cleanupAfterCompletion doesn't handle subtasks
- Bug #8627: Resource template should skip Test phase
- Bug #8632: GUI differences between a:maxOccurs and maxOccurs in schema definition.
- Bug #8645: CSV export button can't generate report with 0 records
- Bug #8661: Weak construction doesn't work in case of multiplicity
- Bug #8673: Shadow Administrative status can be set to Undefined which causes warnings later
- Bug #8678: Responsive UI - switching between panels displays wide menu
- Bug #8680: Role wizard: additional keys for translation needed
- Bug #8682: Role wizard: Button moving to next step does not work when validation error info is displayed.
- Bug #8693: Schema: Referenced Lifecycle state element doesn't contain attribute values from parent element
- Bug #8695: Mark management buttons are shown even if not applicable
- Bug #8702: Using axiom filter in resource query produces different filter notation in connector API
- Bug #8703: Info about skipping of synchronization/inbound (object marks related)
- Bug #8709: Mark with severity 'error' for 'synchronize/outbound' doesn't get any error
- Bug #8715: OperationPolicyConfigurationType is not Containerable
- Bug #8716: Lockout strategy of "none" is not proposed by the connector
- Bug #8727: Password reset: Strange error message during normal processing
- Bug #8729: Role wizard: Refreshing page breaks wizard - opens new role page
- Bug #8754: Fix credentialsReset/authenticationSequenceName property name
- Bug #8757: Password reset: strange WARN message
- Bug #8760: Role wizard: Keep view where wizard started.
- Bug #8764: Nonsense Configuration error while navigating through Resource wizard
- Bug #8765: Avoid "(unknown)" values in audit log entries
- Bug #8771: Role wizard: Warning in log when role is saved
- Bug #8777: Error while running a reconciliation task with filtered items reporting
- Bug #8782: Simul. results: Confusing information about processed objects after them deletion
- Bug #8783: Simulation result -> Processed objects table: search by oid parameter leads to error
- Bug #8786: Role wizard: Adding one approver stops adding other governance members or members in wizard.
- Bug #8791: Broken icon on create member popup
- Bug #8792: Misleading WARN during preview changes
- Bug #8794: User Default vs User Member translation issue
- Bug #8797: closed Cannot instantiate panel error occurs for "User" dashboard links
- Bug #8799: Benign errors reported in multi-threaded create-on-demand scenario
- Bug #8810: User's Application don't work in old repository
- Bug #8811: "Notify" bulk action is executed even in simulation mode
- Bug #8812: "Reencrypt" bulk action is executed even in simulation mode
- Bug #8813: "Resume task" bulk action is executed even in simulation mode
- Bug #8826: Reset to factory default doesn't work while using h2 db
- Bug #8844: Resource/Accounts: account icon shows activation status unknown
- Bug #8846: Projection details: inbound mappings are not indicated (outbounds are)
- Bug #8852: Dashboard error 500
- Bug #8877: Midpoint 4.6 - Could not search shadow by name and resource ref
- Bug #8884: Password reset issues
- Bug #8897: Reset to factory settings load initial objects, but not post-initial objects
- Bug #8903: Changed password is replicated to JDBC table resource with disabled credentials capability in SelfService channel
- Bug #8913: Extraneous Hibernate WARN message
- Bug #8914: Resource wizard: resource details page is opened while new resource creation
- Bug #8927: closed Multiaccounts nightmare
- Bug #8930: effectiveMarkRef visible in GUI forms
- Bug #8943: ItemPath.toString() incorrect
- Bug #8951: GUI: Ditch the stacked icons in important actions
- Bug #8959: GUI: Translation in use while default language is set English
- Bug #9015: closed Task is not scheduled, although it should be
- Bug #9041: NPE when auth channel not present
- Bug #9059: Schema elements related to correlation marked as experimental. Documentation is missing as well.
- Bug #9084: Enduser role does not allow to read archetype name
- Bug #9088: LDAP authentication configuration is somehow cached in session
- Bug #9092: Schema definitions missing in SchemaDoc
- Bug #9100: Object Collection Search item panel weird behaviour
- Bug #9101: Induced entitlements: adding ends up with schema exception
- Bug #9110: Audit details for resource mapping changes are strange
- Bug #9113: Summary delta is incorrect in discovery situations
- Bug #9117: Missing name of the account and also name of the resource in addObject / deleteObject operations in audit
- Bug #9118: Incorrect data in audit delta while auditing of resource operation. Missing original attribute value.
- Bug #9121: Search: Can't switch between Basic and a Axiom query.
- Bug #9131: Task with a fatal low-level issue indicates SUCCESS in GUI
- Bug #9146: Menu links for resource objects in Resource template configuration UI failed with error 500
- Bug #9157: Resource -> Object classes shows object types
- Bug #9170: Cannot create a business role when there are no application roles
- Bug #9172: Experimental property shown even if experimental features are turned off
- Bug #9173: Cannot add a value to an existing association mapping
- Bug #9174: GUI attribute "Approver relation" has wrong data type in Dropdown-Menu
- Bug #9187: Inappropriate "Exit wizard" button
- Bug #9188: Shouldn't we have display name in the role summary panel?
- Bug #9194: Exit business role wizard redirects to wrong page
- Bug #9195: role mining business role wizard steps missing
- Bug #9198: Strange looking archetype selection page
- Bug #9199: Probably inadequate identity recovery error messages when there are too many matches
- Bug #9200: Confusing reporting of "no match" situation during identity recovery
- Bug #9203: Resource wizard: mappings table looks strange
- Bug #9208: Identity recovery: strange behavior when no archetype is selected (two scenarios)
- Bug #9209: Identity recovery: crash when multiple matches are there
- Bug #9211: midPoint behind proxy server with LDAP authentication won't show login page
- Bug #9213: Identity recovery: "unable to audit found identities" without further explanation
- Bug #9214: Identity recovery fragments are not composed properly
- Bug #9227: Object collection: edit filter throws 500
- Bug #9230: Role Wizard: Other role
- Bug #9232: Identity recovery: Harsh treatment of "no match" situation
- Bug #9233: Identity recovery: missing values are not supported
- Bug #9243: Password reset: notification mail is not sent after previous unsuccessful reset
- Bug #9248: Resource wizard: repeated password input
- Bug #9259: I receive a 500 when clicking on "Created Reports" in the GUI
- Bug #9261: 500 for new App role when clicking from Service filter to Service tile
- Bug #9262: Returned by default column on resource schema page is always unchecked
- Bug #9269: ninja doesn't return correct return code / exit code for validation
- Bug #9270: Ninja and truststore
- Bug #9275: GUI: inconsistent user page on smaller screens
- Bug #9276: userAccountControl failing to update with "Incorrect value type" error
- Bug #9289: Resource Data : filter value placed in code block cause 500 (internal server error)
- Bug #9303: connector-scripted-sql does not compile
- Bug #9304: Audit log: resource stage does not log association modification
- Bug #9306: Mark editor does not show objectOperationPolicy content
- Bug #9347: Self-Service Password reset ignores resource password mapping
- Bug #9352: Resource wizard: inherited object type information is not displayed
- Bug #9517: Performance issue using assignmentTargetSearch in object template
- Bug #9574: Performance advisor warning during reconciliation: Cloning a Serializable
- Bug #9815: Initial object localization gaps
- Bug #9878: displayOrder in dashboard does not work
- Bug #10339: Add support for dereferencing object references in extensions
- Bug #10356: "Deep clone of container definition: ..." in the log
- Bug #10394: closed Extremely low Synchronization performance
- Bug #10587: Many stack traces are logged when executing asynchronous task via policyAction
- Bug #10717: Localization hardcode values
- Improvement #318: Improved data model documentation
- Improvement #652: Invert the schema dependencies
- Improvement #708: Success / error messages after operation in GUI
- Improvement #760: Support provisioning to containers
- Improvement #763: URL-limited End-user GUI
- Improvement #935: Resource-global password policy
- Improvement #1091: closed Create user accounts when importing the user.
- Improvement #1092: Make error messages (e.g. those related to provisioning errors) better structured.
- Improvement #1125: Mapping source type conversion
- Improvement #1143: How to get full ICF Exception to GUI?
- Improvement #1162: closed Extensible relation attribute editing in assignment
- Improvement #1169: Lazy mapping evaluation
- Improvement #1191: When rotating logs, please write info to the just-rotated-log that it has been rotated
- Improvement #1235: Add provisioning script results to provisioning results
- Improvement #1249: Provisioning script criticality
- Improvement #1252: closed Expose overwrite option in WS addObject
- Improvement #1310: Native connector host failover
- Improvement #1420: closed reload allowed actions for logged user after changes in roles definitions
- Improvement #1438: Provide account owner OID in ResourceOperationListener notifications.
- Improvement #1446: hasAssignedAccount function
- Improvement #1450: closed Show complete model context information in tasks (not only primary delta).
- Improvement #1474: Add validators to specific GUI fields (phone number, email address, ...)
- Improvement #1484: Synchronization and DELETED situation
- Improvement #1487: closed Show task result in synchronization (livesync/recon/import) task including information about situations and number of accounts
- Improvement #1490: Mapping script optimization for single-value/replace case
- Improvement #1493: Recon, inbound and many accounts
- Improvement #1567: Force flag and dependencies
- Improvement #1576: closed Add a "pre-correlation" expression to contain logic common for subsequent (multiple) correlation expressions/conditions
- Improvement #1578: Add argument support to CSV Scripts
- Improvement #1583: Value policy: dictionary check
- Improvement #1629: Rework uniqueness
- Improvement #1636: Script cache cleanup
- Improvement #1646: closed Performance improvement for "Drop all identities"
- Improvement #1699: Send notifications when something goes wrong in the model.
- Improvement #1708: Make the workflow service callable through model API
- Improvement #1761: Support assignment parameters in mappings - when assigning roles (e.g. in Object Template)
- Improvement #1765: Show object name in GUI results
- Improvement #1821: Validity recompute in roles (transitive assignment)
- Improvement #1875: Notification enhancement for non-user/non-account objects
- Improvement #1894: Password policy based on organization improvement
- Improvement #1929: Improved reconciliation for generic sync
- Improvement #1958: closed Progress indicator also for bulk actions tasks
- Improvement #1985: Hostname change in connector host is not recognized
- Improvement #1986: closed Authorization for adding users - no attributes displayed in User Details form
- Improvement #2083: Unknown ICF attribute in provisioning.getObject()
- Improvement #2084: Extending resource schema in schemaHandling
- Improvement #2130: Start approval for any security-sensitive role that is indirectly assigned to a user
- Improvement #2153: Support normal strength and full authoritativeness for inbound mappings
- Improvement #2179: Enhance wf samples so that approvers have the appropriate access rights
- Improvement #2185: Visually distinguish accounts-to-be-deleted/added/unlinked when editing a user + allow to undo such operation
- Improvement #2249: closed Create a bulk action "unassign"
- Improvement #2267: Smart mappings to create assignment
- Improvement #2271: Pre-calculate attribute values in the Account assignment form before submission
- Improvement #2275: closed Display infor about incomplete operations in shadow
- Improvement #2297: Lookup table case insensitive search
- Improvement #2299: Spreadsheet-like editor for lookup tables
- Improvement #2315: closed Resource wizard: connector host
- Improvement #2338: Resource wizard tutorial
- Improvement #2352: closed Access Certification II
- Improvement #2356: Make Export objects use background tasks
- Improvement #2358: Operational attribute flag in ConnId
- Improvement #2481: closed When opening a user with an account that was freshly discovered as missing, show an indication
- Improvement #2485: Reference filter resolution enhancements
- Improvement #2508: Redirect user after login to the page according to his rights
- Improvement #2521: Grouping of resources in GUI (user details)
- Improvement #2525: Allow import task to continue from where it was stopped
- Improvement #2532: Inbound mappings from several sources to the same user property
- Improvement #2535: Add reevaluate search filter option to the import page
- Improvement #2543: Notify user about session expiration
- Improvement #2552: When click object in midPoint (User, Org, Role, ...) and there are consistency tasks executed, display progress indicator or some other kind of information
- Improvement #2555: Implement notifications for resource-initiated changes
- Improvement #2571: Convenient editor for assignments/inducements
- Improvement #2599: Simple user profile page
- Improvement #2635: On-demand loading of expensive focus properties (model)
- Improvement #2642: ConnId schema attribute ordering
- Improvement #2674: Username case sensitivity
- Improvement #2688: set redirect page after login in
- Improvement #2692: Case insensitive search of resource objects
- Improvement #2702: Cache retrieved LDAP schema between LDAP connector instances
- Improvement #2708: Organization tree order
- Improvement #2716: Large schemas
- Improvement #2749: after recompute in organization tree is showd firs org and not when I was before
- Improvement #2772: Make creating a custom notifier easier
- Improvement #2777: Do not display attributes not returned by default
- Improvement #2789: Implement owner-based security restrictions for repository searches
- Improvement #2790: Implement owner-based security restrictions for resource searches
- Improvement #2800: Bulk task - "log" action enhancement to log custom information instead of object dump
- Improvement #2823: Is it possible to display attempted-to shadow name even if it was not created due to an error?
- Improvement #2827: closed Task that retries unfinished operations
- Improvement #2833: closed Turn off ConnId filters by default
- Improvement #2849: certification-impl dependency on model-impl
- Improvement #2880: Do not die when reading attributes that are not in schema
- Improvement #2910: Object icons and tooltips
- Improvement #2923: Deleting a resource should delete tasks related to that resource
- Improvement #3029: Password policy not used from GUI when creating user without password
- Improvement #3042: closed Catch-all objectSynchronization configuration...
- Improvement #3062: Optimize and fix associationFromLink
- Improvement #3064: Search option for "distinct"
- Improvement #3100: Tenant property when assign Org to user
- Improvement #3128: Seriously implement "certification scheduling" page
- Improvement #3134: Task to check status of resources that are down
- Improvement #3155: Certification - Campaign Definition Improvements
- Improvement #3169: Show link to midpoint in workflow notification
- Improvement #3171: closed RW: add templates for search filters (and maybe expressions as well)
- Improvement #3172: closed RW: add missing properties (e.g. shortcut, aux OCs for associations)
- Improvement #3179: Fix illogical (random) order of attributes in DatabaseTableConnector
- Improvement #3180: closed RW: implement downloading of graph files
- Improvement #3223: GUI status message mess - cleanup
- Improvement #3234: Assignment vs parentOrgRef and security (GUI)
- Improvement #3238: Implement bulk Enable and Disable for orgs (like for users, roles, services)
- Improvement #3257: SMS password template should be externalized
- Improvement #3260: PageSecurityQuestions does not use MailTransport
- Improvement #3274: Option for synchronization task to allow rewrite intent information stored in shadow
- Improvement #3280: Overlay Project Improvements
- Improvement #3291: Password History - Resources
- Improvement #3297: Optimize expression execution
- Improvement #3327: Expose password policy as variable in scripts
- Improvement #3329: Allow use of non-DN bind names in LDAP connector (e.g. for AD)
- Improvement #3330: Clarify working of mappings with target of "password value"
- Improvement #3345: Hide assigned roles in request a role dialog
- Improvement #3346: Request role unassignment
- Improvement #3355: Consider 'relaxedEquals' for comparing values
- Improvement #3364: Allow expressions in search filters in bulk actions
- Improvement #3374: Seriously support non-string values for activation simulation attributes (status, lockout)
- Improvement #3377: Parallel integration tests
- Improvement #3410: Separate self-service URLs and admin URLs
- Improvement #3419: Activation mappings not relativistic
- Improvement #3434: Setting up ScriptedSQLConnector without SearchScript filename results in unhelpful error
- Improvement #3446: Provisioning scripts in schemaHandling
- Improvement #3459: Refactor Model Controller
- Improvement #3462: CSV File collector needs write access to directory
- Improvement #3491: closed possibility to hide red star from 'Name' over minOccurs=0
- Improvement #3498: Proper Schema documentation
- Improvement #3502: Display claimable work items in user's home screen
- Improvement #3503: Additional functions
- Improvement #3513: Support resend invitation notification
- Improvement #3519: Allow using paging/orderBy in report filter query
- Improvement #3520: Assignment cleanup
- Improvement #3529: Devel/production mode
- Improvement #3533: Certification scope GUI parameters
- Improvement #3557: Shopping cart improvement: parameters
- Improvement #3558: Shopping cart improvement: catalog categories
- Improvement #3560: Improved execution of strong mappings during unrelated changes
- Improvement #3572: REST interface improvement
- Improvement #3574: Support resource that return empty strings
- Improvement #3575: Prism optimizations
- Improvement #3587: ScriptedSQL connector logging level
- Improvement #3589: polyStringNorm vs. stringIgnoreCase (not only) in query playground
- Improvement #3594: Show default values of connector parameters
- Improvement #3601: Visual improvements for item path widget
- Improvement #3607: Refresh resource schema issues
- Improvement #3638: JSON/YAML export for ad-hoc reports/lists
- Improvement #3642: possibility to hide content menu on List users page
- Improvement #3643: support two keystores
- Improvement #3656: help in GUI to find answer to question "why this user has account in resource X"
- Improvement #3658: limit number of accounts for cloud target systems
- Improvement #3699: Strong mappings are applied when other attributes change and reconcile checkbox is not checked
- Improvement #3711: Configurable lifecycle states
- Improvement #3729: Adaptive fetch strategy (FetchStrategy troubles)
- Improvement #3732: "Recompute all of selected members" in org. structure
- Improvement #3736: closed UX: Recertification review screen does not have any confirmation/cancel buttons and not information message how it applies
- Improvement #3751: Projector/clockwork update
- Improvement #3777: different icon for enabled and disabled org in Org structure
- Improvement #3798: Organization Tree - highlight/find user in the structure
- Improvement #3807: Parallelized background tasks - /scripting/handler-3
- Improvement #3835: WF "preview changes" functionality
- Improvement #3839: after maxAge occured, change password mandatory in next logon before user can continue in MP
- Improvement #3859: Password metadata improvement
- Improvement #3864: Customization of headbar link colors
- Improvement #3889: Reaction to outcomeIfNoApprovers situation
- Improvement #3899: List personas authorization
- Improvement #3924: Log new session ID after authentication
- Improvement #3930: Origin metadata in assignments
- Improvement #3935: Switch LDAP connector to updateDelta() operation.
- Improvement #3937: able to put role in the basket multiple times
- Improvement #3940: Bulk actions: searchIterative and delete
- Improvement #3941: Review mapping relativity
- Improvement #3975: ConnId handler configuration improvement
- Improvement #3982: New values for limitPropagation: resource, objectType
- Improvement #3995: Shield EndUsers from technical errors
- Improvement #4001: Allow focus selector to have more than one object type
- Improvement #4003: Better handling of missing extension items definitions
- Improvement #4083: UserPasswordNotifier: No password in user delta(s), exiting.
- Improvement #4147: Make requestComment mandatority configurable
- Improvement #4148: WF - Split one request into many
- Improvement #4153: Add message keys for context help to common schema for focus attributes
- Improvement #4156: closed Add ability to search object by OID in "Repository objects"
- Improvement #4163: User icon color
- Improvement #4166: Perfect manual connector atomicity
- Improvement #4167: closed Storing of view type per org root
- Improvement #4170: Better optimistic consistency for clockwork
- Improvement #4194: Asynchronous creation of objects
- Improvement #4201: Evaluate validity changes as relative ones
- Improvement #4234: More precise working with focusContext.objectTypeClass
- Improvement #4235: UCF: caseIgnoreAttributeNames in initialize()
- Improvement #4256: Approval/Disapproval note on bulk decision
- Improvement #4264: Re-evaluate constraints when starting "spun off" approval process
- Improvement #4289: Implement result count to CSV connector (for search)
- Improvement #4301: UX improvement ideas
- Improvement #4303: Role Governance task - technical WF detail
- Improvement #4314: GUI policy rules: usability improvements
- Improvement #4325: Assignment/inducement and authorizations in GUI
- Improvement #4326: GUI customization persistence: search, columns, ordering, etc.
- Improvement #4327: Color codes and tooltips
- Improvement #4330: Consistency user experience: repeated message
- Improvement #4335: closed Self Services: Password Credentials - UX
- Improvement #4411: Make logging stacktrace to db optional
- Improvement #4418: Notification for approved roles
- Improvement #4423: closed Custom headings for attributes
- Improvement #4445: Smarter rules around managing defaultness when multiple objectType elements are found
- Improvement #4447: Configurable association editor
- Improvement #4464: add+delete deltas
- Improvement #4470: Role can be assigned twice to a user at one time (with validity constraints)
- Improvement #4473: User has no information where the password was changed
- Improvement #4490: Merging conflicting shadows
- Improvement #4523: closed Assignments cannot be sorted
- Improvement #4565: Display lifecycle status at least in projections somewhere near the account name
- Improvement #4573: AWS midpoint cluster size
- Improvement #4580: CSV connector duplicate detection
- Improvement #4589: Certification approval GUI enhancements
- Improvement #4599: Use of spring beans in expressions
- Improvement #4616: Approval automaticallyCompleted, when requester=approver(s)
- Improvement #4646: Focus list columns ordering ability is hardcoded
- Improvement #4692: Provisioning (fetching) support for associations in GUI
- Improvement #4714: closed Review and improve "induced associations" tab
- Improvement #4724: Add variable with list of approvers to approval expressions
- Improvement #4728: Clean up prism equals() methods
- Improvement #4730: Time rounding
- Improvement #4735: closed Eclipse plugin improvements
- Improvement #4751: Missing operation label in feedback box during test resource
- Improvement #4753: Date picker with support for seconds, milliseconds and timezone
- Improvement #4782: Improve tooling to support object representation conversion (esp. objectModification) XML<->JSON<->YAML
- Improvement #4787: Support scripts in retried (postponed) operations
- Improvement #4790: Allow to redefine attributes in schemaHandling (and define new attributes)
- Improvement #4796: Implement proper behavior of staleness=0 in provisioning
- Improvement #4816: Support for basic format for policy breaking messages
- Improvement #4824: Clean up ContextLoader
- Improvement #4859: Authorizations: implicit filters
- Improvement #4905: Optimize memory footprint when exporting objects
- Improvement #4906: Move authorization to allow moving of organizational unit
- Improvement #4922: Make notification evaluation more intuitive
- Improvement #4937: closed Enable "push" mode of resource->midPoint communication
- Improvement #4938: Setting delegation requires seeing all assignments
- Improvement #4966: Inducement orderConstraint GUI
- Improvement #5008: Add support for xsd:date
- Improvement #5036: Org tree "Indirect" checkbox usage is not very intuitive
- Improvement #5056: Too many pointer travelling in GUI when assigning
- Improvement #5074: ModelInteractionService "assignable" methods alignment
- Improvement #5133: Provide an ability to convert closed single-run task into recurring one
- Improvement #5156: Export XML with names of objects
- Improvement #5170: basic.sendNotify(to, subject, body, ...)
- Improvement #5181: Multivalue parameter for bulk action
- Improvement #5234: Support attribute restrictions (e.g. XSD maxLength for string)
- Improvement #5253: Consider creation of second-level tabs bar in Resource details/Accounts (Entitlements, Generics...)
- Improvement #5272: minAge security policy setting applies also for administrative password change
- Improvement #5274: Indicate disabled assignments in Dashboard (self-service)
- Improvement #5279: Org. tree menu does not support collections/views
- Improvement #5305: Resource update operation not always relative
- Improvement #5319: Create recompute task - add archetype restriction
- Improvement #5343: Uploaded compilation error in script code prohibts midPoint startup
- Improvement #5352: Better icon for "role"
- Improvement #5443: Nonce should use hashing instead of reversible encryption
- Improvement #5454: Persona target search
- Improvement #5464: closed Update JasperRepors Eclipse plugin
- Improvement #5471: Optimize updating synchronization situation in shadows
- Improvement #5493: Improve audit log viewer
- Improvement #5495: Implement precise and efficient clusterwide cache invalidation
- Improvement #5511: Remove stacktraces from INFO/WARN/ERROR levels
- Improvement #5529: Reconcile menu works even when you have readonly access
- Improvement #5531: Add custom audit fields also to audit log viewer list AND details
- Improvement #5539: Improve performance of typical tasks
- Improvement #5566: Optimize change execution
- Improvement #5579: Full support for searching AssignmentHolderType
- Improvement #5619: Delegate multiple Workitems
- Improvement #5632: WARN level message too long, too many of them
- Improvement #5651: Consider matching rule while applying deltas
- Improvement #5662: Improve (unassign) member operations to be more intuitive
- Improvement #5675: GUI support for lang part of PolyString
- Improvement #5702: Audit log viewer: add Previous/Next to the audit log details window
- Improvement #5709: "display" for ObjectType
- Improvement #5717: Deleting (workflow) case should maybe also delete the associated execution task
- Improvement #5718: Better authorizations for views
- Improvement #5737: Automatic GUI session invalidation
- Improvement #5741: Lifecycle model: assignmentSelector that can be used to selectively activate/deactivate assignments
- Improvement #5755: Change password hint
- Improvement #5759: Configurable default relation for GUI
- Improvement #5781: Mapping Range defaults
- Improvement #5785: Entitlement membership handling for large entitlements (groups)
- Improvement #5789: Improve workitems page - enable fulltext search and table sorting
- Improvement #5806: Test connection GUI improvements
- Improvement #5807: Rework Java Connector Server
- Improvement #5820: UCF future
- Improvement #5827: Workflow bypassed under some circumstances
- Improvement #5837: Implement more efficient duplicate avoidance strategy for LDAP groups
- Improvement #5854: My work items should be formatted in the same wide panel as My requests
- Improvement #5880: Improve start-up error message for SQL Server
- Improvement #5882: Request roles using role catalog style problem
- Improvement #5902: closed Notification attachment content id (cid) support
- Improvement #5918: closed Import from resource AD to mid
- Improvement #5919: closed Need clarification about important features
- Improvement #5929: Audit log viewer improvements
- Improvement #5930: Hook improvements: preview and initial state
- Improvement #5941: Numeric/integer source fields are not displayed in the resource detail page
- Improvement #5948: closed Make propagationUserControl=userChoice GREAT again!
- Improvement #5963: Use of constants in systemConfiguration object
- Improvement #5964: Config.xml documentation
- Improvement #5966: Fallback to another approver if current is missing
- Improvement #5968: Audit log viewer improvements
- Improvement #5975: Pre-compute archetype attributes in GUI
- Improvement #5990: Systematic approach to constraint checking
- Improvement #5996: closed Automatic reload of security policies (cluster)
- Improvement #5998: midPoint should compile resource objects during import via REST
- Improvement #6001: Support on-demand item loading in ObjectDeltaObject sources
- Improvement #6002: Implement caching of objects with "include" option
- Improvement #6012: closed make disabled fields readOnly
- Improvement #6017: closed Ability to sort assignment list by Role Name
- Improvement #6067: closed Approvals via REST
- Improvement #6069: Scripting SSH connector
- Improvement #6111: closed Make notification delta renderer more robust
- Improvement #6114: Skip approval stage option, if requestor is one of approvers
- Improvement #6118: Support search shadows with noFetch without requiring resource and objectClass/intent defined in query
- Improvement #6121: Make node ID assignment more robust
- Improvement #6123: Certification items - show "No response from me"
- Improvement #6124: closed Visual indication on progress in creating campaing
- Improvement #6132: Provide lens context cleanup methods
- Improvement #6147: Optimize the number of repository operations
- Improvement #6152: Thresholds for recompute task (and possible others)
- Improvement #6157: Password reset - policy which decides who can reset password
- Improvement #6162: Show only user-relevant operation result tree nodes (by default)
- Improvement #6168: AssignmentTargetRelationApproach for members tables
- Improvement #6169: Union MainObjectListPanel and MultivalueContainerListPanel
- Improvement #6208: Smart validators in GUI
- Improvement #6227: tolerantValuePattern make it as expression
- Improvement #6233: Forwardovanie schvalovania
- Improvement #6236: Add approval date&time to
- Improvement #6247: Language artifacts after changing language
- Improvement #6276: closed Compiled groovy class garbage name
- Improvement #6288: closed Configure / make configurable column width for views in GUI
- Improvement #6302: Basic expression function startsWith - case sensitivity problem
- Improvement #6304: Paging settings / option to cancel paging for the organizational structure (org tree).
- Improvement #6308: Axiom: namespace aliases
- Improvement #6347: Metadata and "repository objects" GUI pages
- Improvement #6355: Metadata authorizations
- Improvement #6359: Finish roleRelation authorization
- Improvement #6380: getObject Function; setting options parameter dosn't do anything
- Improvement #6382: Axiom should recognise nested augmentation items in default namespaces
- Improvement #6385: Axiom Model Reactor should be one-phase
- Improvement #6389: Metadata migration
- Improvement #6423: Breadcrumb item click
- Improvement #6441: archetype-based authorization efficiency
- Improvement #6500: Stop requiring element definition for PCD in schemas
- Improvement #6515: LDAP connector: Support additionalSearchFilter for SunChangelogSyncStrategy
- Improvement #6555: REST interface makes it really hard to diagnose errors with 500 internal server error
- Improvement #6602: Default attribute hints are not translated
- Improvement #6616: getObject() in Audit API
- Improvement #6628: Making possible to set the item "Request comment (optional)" in the shopping cart as mandatory
- Improvement #6666: Review and improve Page title
- Improvement #6679: Convenient editor for objectTemplate
- Improvement #6696: Http/404 when Tomcat's error.jsp is used
- Improvement #6702: Rest ignores include/exclude options in search
- Improvement #6768: Allow deleting primary delta in the hook
- Improvement #6812: UserProfileStorage DEFAULT_PAGING_SIZE=20
- Improvement #6818: Prism: Prism API should model composite object references easily to detect
- Improvement #6821: Audit log viewer / report: search by Node
- Improvement #6845: Unify constant, recommended and usual prefixes
- Improvement #6863: Report progress for audit, reports, and campaigns cleanup
- Improvement #6895: Make generated JAXB types freezable
- Improvement #6928: Form validation (object template) is always checking also previous value of attribute - making it impossible to fix invalid value
- Improvement #6937: AbstractInputGuiComponentFactory doesn't count with multiple form components
- Improvement #6938: SAML: Not possible to set maxAuthenticationAge
- Improvement #6970: Make hints in GUI more user-oriented
- Improvement #6981: Improve delta builder to be able to work with shadow attributes
- Improvement #6997: Enable manual control over cluster nodes
- Improvement #7010: Provisioning operations UI improvement
- Improvement #7036: Cleanup task progress
- Improvement #7056: Can't use contants in security policy object
- Improvement #7072: Validity scanner task (partitioned) slow
- Improvement #7161: Account lock event not triggered
- Improvement #7170: Implement repository#executeJob method for new repo
- Improvement #7187: Implement "before" and "after" activity tailoring
- Improvement #7189: Implement pre/post activities
- Improvement #7190: Implement activity state compatibility check on task resume
- Improvement #7231: Import report parallelism
- Improvement #7246: Reconsider assigned mappings with ranges
- Improvement #7439: Better support for multi-tabs
- Improvement #7477: Validity scanner start without lastScanTimestamp
- Improvement #7518: Axiom use cases from GUI
- Improvement #7556: AD connector and minimal fetch strategy
- Improvement #7572: Report library: add resolveArchetypes and resolveServices methods
- Improvement #7590: When a value is set in a single-valued item, clear the "incomplete" flag
- Improvement #7710: Get rid of PanelInstance annotation
- Improvement #7868: Can't edit model hooks on GUI
- Improvement #7869: Can't edit workflowConfiguration/generalChangeProcessor/scenario on GUI
- Improvement #7887: Admin GUI config count bagdes not updated properly during edit
- Improvement #7972: closed Clearer "blocky" filters in fluent Java Query API
- Improvement #8062: Cannot fetch auxiliary attribute from Active Directory
- Improvement #8130: displayOrder in org tree
- Improvement #8171: Empty search boxes are not preserved when the search is saved
- Improvement #8217: Better entitlements handling
- Improvement #8221: Review and improve implementation for changing account activation
- Improvement #8297: REquest access tiles truncating tile title
- Improvement #8305: closed Reset password with security questions: add status message after reset password is produced
- Improvement #8331: Unsaved changes are lost when editing object and clicking to main menu
- Improvement #8396: Shopping cart requests (ULB)
- Improvement #8435: closed Import report task strips policy violation results
- Improvement #8456: Modal windows for assigning members are too large
- Improvement #8566: Multi tab browsing in Midpoint is difficult
- Improvement #8576: Improve error reporting for import report tasks
- Improvement #8586: Vacant visibility of panel in objectDetailsPage overrides visible setting
- Improvement #8742: Implement 100% collision-free lightweight identifiers
- Improvement #8866: Synchronization situation transitions do not show reasonable information if resource accounts were deleted during task run
- Improvement #8868: Subtasks run on separate nodes from the main task
- Improvement #8910: Resolve AuthorizationObjectSelectorType#parent-induced recursion more seriously
- Improvement #8921: authorization-ui-3#mergeObjects & #usersAll is not used for merge button
- Improvement #8922: model-3#modify for activation/administrativeStatus is not enabled, but "Enable" and "Disable" buttons are visible
- Improvement #8924: Allow navigating from account to its owner in simulation results
- Improvement #8984: Resource->Accounts is slow
- Improvement #9002: Lookup tables are always alphabetically ordered - allow engineer to order them logically
- Improvement #9027: Role Mining: Improvement
- Improvement #9086: Missing search options - level, indirect members
- Improvement #9138: Mandatory/hidden approver's comment field
- Improvement #9149: Bad UX - "Assignments" in any object type
- Improvement #9185: Tasks dependency cycles
- Improvement #9190: Role mining
- Improvement #9251: Improve performance for "resolve" options.
- Improvement #9257: Certification Campaigns - Improvement IDEAS
- Improvement #9278: Annotations review, code improvements
- Improvement #9326: Better pretty print for deltas in reports
- Improvement #9371: User can't define query for object selection in task via GUI
- Improvement #9410: Query for object selection in tasks hard to define and read via GUI.
- Improvement #9446: Add lifecycle status support for notifications
- Improvement #9521: Use REST to "Run" a Report
- Improvement #9522: Use REST to download a created Report.
- Improvement #9697: GUI: Textarea instead of inputbox for midPoint query filters
- Improvement #9711: Missing button to get back to dashboard
- Improvement #9756: AD reconc searchOptions
- Improvement #9813: Manage PolicyType in roleAssignments panel
- Improvement #9949: Make docker compose automatically upgrade DB schema on start
- Improvement #9951: Default approval rules do not make sense any more
- Improvement #9990: Saving files and downloading them does not bring same file suffix§
- Improvement #10012: Delete campaign as a background task
- Improvement #10037: Role wizard - incorrectly handled steps for role configuration and midpoint allows to continue with wizard even approval process has been started for role creation.
- Improvement #10052: Approval-related tasks do not record operation statistics
- Improvement #10088: Preview changes related to persona object operation (add/remove persona object) are not displayed in GUI preview panel
- Improvement #10159: Policy rule - incorrect or missing configuration values in GUI
- Improvement #10188: Insufficient DOC Entitlements and Associations
- Improvement #10201: Support for setting incomplete flag using deltas
- Improvement #10242: Approve / Done successfully over email GET request
- Improvement #10249: Clarify how to execute actions over shadows (in the repository)
- Improvement #10253: Certification: adHoc element is not displayed in campaign definition.
- Improvement #10264: Documentation on which attributes are returned as "incomplete"
- Improvement #10265: Certification: Configuration of itemSelectionExpression should be possible via GUI
- Improvement #10266: Certification: It would be good if certification campaigns have individual names.
- Improvement #10268: Certification: Store remediation operation reason to audit permanently.
- Improvement #10461: Improve documentation for Anonymous export of data for role analysis purposes.
- Improvement #10919: Configuration progress/completeness indicator for resource/objectType, possibly application
- Feature #80: Object validation during import in edits
- Feature #132: Naming attribute support
- Feature #325: Import from file as async task
- Feature #340: Test connector sanity
- Feature #539: RBAC GUI
- Feature #619: closed Assign unmatched accounts
- Feature #631: Password synchronization with Windows Domain
- Feature #645: History and rollback
- Feature #661: Custom functions in expresions
- Feature #740: When editing object (user, role, ...) and there are unsaved changes, warn user if he/she clicks on menu links (all levels) before leaving the page
- Feature #761: Manual processing marks
- Feature #762: closed Object lifecycle status
- Feature #770: Parallel provisioning
- Feature #773: Enforce password change after password policy change
- Feature #775: Prohibit changes to inactive users
- Feature #787: Parallel object resolution
- Feature #873: Add "Test connection" for ConnectorServer
- Feature #878: Add support to distinguish if user has some of his assignments unsatisfied
- Feature #931: Value policy: prefix and suffix
- Feature #936: Account archivation
- Feature #943: Limit reactions to a specific channel
- Feature #1024: Reactions for sync failures
- Feature #1094: Notify failure
- Feature #1118: Tool wrappers for Linux
- Feature #1164: Calling provisioning scripts from expressions (mappings)
- Feature #1196: GUI preferences
- Feature #1245: Script-driven provisioning
- Feature #1327: closed Expression global variables (constants)
- Feature #1330: Protected user
- Feature #1346: Full and Incremental reconciliation
- Feature #1411: Support fetching password in CSV connector
- Feature #1540: Generic workflow integration code
- Feature #1648: Reserved usernames
- Feature #1655: closed Scripting functions as midPoint objects
- Feature #1657: Value policy: excluding user/account properties
- Feature #1658: Value policy: N out of M
- Feature #1659: Disable reason
- Feature #1660: Synchronization reaction: notify
- Feature #1661: Assignment notifications
- Feature #1685: Allow (user recomputation) tasks to reference object templates
- Feature #1693: Add an option to update (midPoint user) attribute value when account is deleted
- Feature #1769: Make midPoint self-aware regarding version, display in Server Tasks-Nodes for multi-node deployment
- Feature #1797: Indicate that the organization has multiple parents - in the organization list
- Feature #1820: Validity recompute in roles (immediate assignment)
- Feature #1906: Authentication method in webservice/REST
- Feature #1931: closed Add a setting for user to specify paging size (i.e. 50 users displayed on one page) and support it in searchs in GUI
- Feature #1932: Role closure table
- Feature #1934: Add tenant concept to authorizations
- Feature #1977: Uniqueness checking/validation for user attributes (other than name)
- Feature #1991: Add display name attribute for associations to be displayed instead of entitlement name
- Feature #1992: Add expression to be used as display name for association
- Feature #2002: Support storing/reading passwords in config.xml or some other external form
- Feature #2026: Password expiration notifications
- Feature #2041: Display results from the progress indicator in the result
- Feature #2049: "Recently used" object feature
- Feature #2050: LDAP connector OpenLDAP livesync using OpenLDAP replication protocol
- Feature #2053: Option to limit provisioning for no/one/selected resource(s) and/or selected attributes during recompute or reconciliation...
- Feature #2099: Connector reset button
- Feature #2114: Import objects through model WS
- Feature #2116: Improved support for structured values
- Feature #2142: closed Capabilities per objectType (e.g. Delete capability only for some intents)
- Feature #2144: Configured capabilities - add a way to ignore instead of "Operation not supported" error
- Feature #2152: Better logging/tracing for Connector Server (.NET) - rotation, formatting
- Feature #2188: Support DELETE+ADD instead of MODIFY operation for special cases such as unsupported attribute modifications
- Feature #2201: closed Bulk actions: CSV or DB table input
- Feature #2216: Preview mapping feature - when defining mappings in resource (role) wizard
- Feature #2237: Notifications: add option to filter by attribute changes. E.g. to send notification if given attribute has changed
- Feature #2256: Credentials: SSH keys
- Feature #2265: DatabaseTable connector rewrite
- Feature #2273: Support "virtual" resources
- Feature #2331: closed Deleting shadows for selected resource - all or selective using kind/intent/object class filters
- Feature #2343: Self-check service for midpoint
- Feature #2355: closed Reload connectors and extension schema automatically
- Feature #2360: Workflow state display (end user)
- Feature #2363: SMS based authentication
- Feature #2375: Unassign roles at the end of user lifecycle
- Feature #2482: Provisioning and model support for connector authentication
- Feature #2483: Advanced Segregation of Duties
- Feature #2502: CSV connector: support for other object types
- Feature #2505: Certificate-based authentication for REST
- Feature #2550: Web UI activity monitoring
- Feature #2575: End user role management
- Feature #2633: Open and closed enumerations (lookups)
- Feature #2634: Enumeration expressions
- Feature #2644: Assignment: assignment reason (process)
- Feature #2647: Smart data export (machine readable reports)
- Feature #2698: Scripted summary header
- Feature #2715: closed Service object type (advanced)
- Feature #2873: Track origin of objects (during object create/modify(?))
- Feature #2905: SoD exlusive role assignment in the context of some object
- Feature #3095: Basic connector pages
- Feature #3187: Notifications when task is started/finished/suspended
- Feature #3210: Simplified "cloud" resource wizard
- Feature #3259: Pass-through authentication
- Feature #3261: Separate end-user GUI
- Feature #3269: support HTTP/2 for demo - upgrade to Tomcat 8.5.3+
- Feature #3310: Connetor usage limitation in multi-node environment
- Feature #3372: Show user's manager(s) in Dashboard in self-service, and in admin GUI when editing that user (read-only is OK)
- Feature #3385: Indicate also indirect assignment in self-service dashboard/profile
- Feature #3389: Access Matrix
- Feature #3478: "password change at next logon" activation property
- Feature #3508: closed Service screen detail to display members
- Feature #3515: GUI support for parametric roles
- Feature #3581: Relation configuration
- Feature #3704: Automatic unassignment of inactive assignments
- Feature #3831: GUI pages for security policy
- Feature #3852: Mechanism similar to "owner" to allow read for already assigned roles, but keep this different from assignable roles
- Feature #3952: Set Shadow Integrity Check parameters via GUI
- Feature #3978: Flat organizational structure widget
- Feature #4032: Rework Organization tree page
- Feature #4065: Skip approvals (pre-approved batches)
- Feature #4073: Cleanup task (part 2)
- Feature #4116: closed Test midPoint with JBoss and fix issues
- Feature #4171: Allow midPoint to configure logback.xml as well as logging in System configuration
- Feature #4187: Allow localizable LookupTable labels
- Feature #4188: Allow patching of objects during upgrade / initialization
- Feature #4202: Relativistic member recompute after role change
- Feature #4205: Power of Attorney
- Feature #4212: Data provenance
- Feature #4448: "GUI featre" configuration in adminGuiConfig
- Feature #4510: Approvers in assignment metadata are missing information about approval stage
- Feature #4529: Better credentials UI
- Feature #4629: Topology visualization
- Feature #4684: Allow definition of role auto-assignment in GUI editor (including condition)
- Feature #4685: Message for users on dashboard
- Feature #4701: closed midPoint studio
- Feature #4711: Configurable enumeration widgets
- Feature #4817: Policy values edit - support in GUI
- Feature #4963: self-service for role management by IDM users
- Feature #5026: Make hashing password storage configurable
- Feature #5106: Show some information from midpoint.home in midPoint admin GUI
- Feature #5332: Add Connectors page to Resources part of GUI
- Feature #5338: Integrated performance monitoring
- Feature #5689: closed Use roleMembershipRef to resolve role owners
- Feature #5823: Prism 5
- Feature #5840: Livesync should be able to tell how many events are waiting in the queue
- Feature #5841: Handle delete attribute values on source system (performance)
- Feature #6081: Align Configuration Management and Version Control
- Feature #6421: Automatic and semi-automatic task redistribution
- Feature #6436: Idea: summary panel also for object lists
- Feature #6485: Indicate if the field has a lookup table attached (autocomplete) in GUI
- Feature #6576: Upgradability of initial objects
- Feature #6625: custom GUI for running anything
- Feature #6951: closed Allow querying repository Shadows with ri:dn attributes
- Feature #7000: "Change account owner" midpoint library function
- Feature #7015: closed Support for JSON language
- Feature #7059: Reconciliation ineffective
- Feature #7220: Automatic reporting of problems related to task
- Feature #7227: Option for Reverse Reports to produce an execution report after task run
- Feature #7279: closed Task wizard
- Feature #7302: closed Upload rollback feature
- Feature #9046: Implement different secure modes for user/focus authentication
- Feature #9308: New property for administrative status override
- Feature #9338: Autoassignment configuration: preview members by query
- Feature #10267: Certification: Certify object attributes
- Feature #10308: Implement versioned parsing of schema
- Task #807: ConnId connector documentation
- Task #863: closed Test with JBoss appserver and fix issues
- Task #1255: Design/discuss conditional before/after scripts execution
- Task #1329: Document expression functions
- Task #1930: Expression function javadoc
- Task #2078: Eliminate raw XNode data in prism as much as possible
- Task #2557: Clean up ResourceObjectChangeListener and ResourceEventListener
- Task #2626: Document JITP (Just in time provisioning)
- Task #2829: Clean up ShadowManager
- Task #3057: Design (look and feel) manual
- Task #3227: Authorizations and name resolution
- Task #3353: Consistency mechanism tests cleanup
- Task #3426: Disable Hibernate Validator (and consider using it in the future)
- Task #3588: AD LDAP connector disconnect error
- Task #3767: Test SOAP from .Net after removing "empty tags" hack
- Task #3790: XML/JSON/YAML user documentation
- Task #3828: Decide on equality of PCVs (also PRVs)
- Task #3847: Mapping cleanup
- Task #4007: Implement configurable summarization of operation results
- Task #4042: Consider reducing the size of OperationResultType structures
- Task #4089: closed Cleanup winrm4j
- Task #4263: Set initiator for workflow process termination event to "real" user
- Task #4273: Nicer default midPoint configuration
- Task #4366: Elaborate, recursive definitions, schema and security
- Task #4456: Cleanup samples
- Task #4480: Container id problem
- Task #4482: Unify rules for including xsi:type when serializing prisms
- Task #4689: Specify ObjectDelta.findItemDelta semantics
- Task #4713: Reasonable policy metaroles in initial objects
- Task #4888: Document asserters
- Task #5097: Add tests for recon dry run
- Task #5310: Check task manager test105 failures
- Task #5455: Implement browsing of completed work items
- Task #5562: Update documentation for system requirements
- Task #5563: Create documentation foundation of our internal performance lab setup
- Task #5574: Design advanced entitlements processing
- Task #5656: Speed up build
- Task #5665: Align icons in font evosome
- Task #5688: Implement staleness option in repository cache
- Task #5701: Review modelInteractionService.getAssignableRoleSpecification() and friends
- Task #5764: ConnTest NG
- Task #5824: Update developer documentation
- Task #5829: MidPoint CLI (python) as part of midPoint distribution
- Task #5834: Clarify change-related data structures in provisioning
- Task #5867: Clean up samples project
- Task #6042: ConnId2 Plan
- Task #6068: Automate transifex-git sync
- Task #6095: Consider repackaging GUI modules
- Task #6098: Documentation improvement ideas
- Task #6450: Fix implementation of repo add/delete op for multivalued items w.r.t. metadata
- Task #6463: Remove CXF from REST clients (tests and intra-node communication)
- Task #6505: User-friendly truststore
- Task #6603: Split and cleanup WebComponentUtil
- Task #6707: Review matching rules design
- Task #7084: Upgrade HTTP Client dependencies in connectors
- Task #7176: Document activity statistics handling mechanisms
- Task #7188: Decide on how single-activity tasks should be represented
- Task #7193: Review activity XML syntax, auto-scaling and threshold features
- Task #7564: Docs: update authorization documentation (model authz)
- Task #7992: Consider creating a container for "descriptive attributes"
- Task #8909: Check thread-safety of GuiComponentRegistryImpl
- Task #9115: Document import of application roles with assignments
- Task #9442: Review and clean up dist
- Task #10049: Review the behavior of weak inbound mapping for the password when caching
- Task #10160: Review automatic fetching of password (and some other items)
- Task #10301: Redesign the object-level (& model-level) "volatility" property
- Task #10355: Get rid of midpoint/config/initial-objects in git
- Task #10377: Reconsider how to assign resource object definition in UCF searchObjects call
- Task #10441: Review performance tests suite
- Task #10443: Improve performance analytics
- Task #10514: Re-enable TestValueMetadata
- Task #10580: Review copy() and immutableCopy() methods