Release Notes July 2024

Here's a glimpse of what you can expect to see in Clarity with our latest update.

If you only read one thing: Major Enhancement to Reporting!

You can now create and save your own reports! Here’s the scenario. Let’s say you are working on a specific audit report export, and got the data you needed. Now you can SAVE that report, it’s filters and everything in it for later. You can also load a saved report, and clone it to make a new report! This is a massive improvement for key tasks like:

• Quarterly Admin audit exports
• Monthly Termination reviews
• Etc

Now you can save “Q1 Termination Report” and then each quarter, copy it with all your filters preserved. This is a massive time saver, and can even enable internal audit teams the ability to self-serve their own data requests.

There are new types of reports!

• “All Entitlements”

• “All Nested Entitlements”

• “All Identities”

• “All Alerts”

• “All Application Service Users”

• “All Reviews”

• “All Roles”

• “All Role Access”

• “All Role Members”

  Note: Each report has a full export of the key data so that you have full visibility into every aspect of that part of your identity infrastructure.

Finally, there are new quick filters for reports:

Easily find the reports you need by favoriting them, or reviewing your recently run reports, or just searching based on the name like before.

More New Features

New Connector - Oracle Cloud Identity Domain

Oracle Cloud Identity Domain is a comprehensive identity management service that offers secure user authentication, authorization, and access control across cloud environments. It ensures that only authorized users can access specific resources, simplifying identity governance and enhancing security for enterprise applications and services. Clarity now supports incorporating that data in our identity governance framework.

Supports the following entitlements/relationships (nesting):

• Applications
• AppRoles
• Groups
• Dynamic Groups

• Apps -> Admin Roles
• Apps -> User Roles
• Apps -> Dynamic Groups
• Apps -> Groups
• AppRole -> Groups

Contact us if you’d like to deploy this new connector!

Access Review Re-assignment Improvements

Access Reviews can be assigned to multiple users, which would previously block re-assignment of the review to other users not already on the list. Now re-assignment is always possible, and a single owner review can be made a multi-owner review, or a multi-owner review can have their reviewers changed. This enhancement makes the re-assignment process “just work” the way managers and review owners expect.

Entitlement-Entitlement Reviews For Federated Apps

Nested group access reviews is kind of our thing. Clarity has improved our ability to handle nested groups and entitlements for federated applications in entitlement-entitlement access reviews, where before we could handle only a single application (Like AD)

Here’s an example:

Active directory group “I have the power” grants access to a Linked Application “my special federated application” with its own permission of “read” / “write” / “both”. It’s now possible to review those linked permissions generating a review.

Access Review Summary Export and Download page

Access Reviews are one of the key audit assets that needs to be downloaded to provide as a proof of your review process. Historically, Clarity has generated a summary page of “what’s in the review” but not all the detailed configuration was included in that page. This could lead to confusion on what was actually in the review, when looking at the review after the fact. Clarity has updated the summary page to include the full review config.

We’ve also made it even easier to access what can be an extremely large CSV! There’s a dedicated downloads page, and exports that are being generated will show the export progress.

When creating a review

Resolved Bugs

Clarity is dedicated to resolving impactful bugs quickly. Hopefully you have not been impacted by these issues, but for your awareness the following issues have been resolved:

Issue: Our server scaling jobs could incorrectly terminate before sync work completed, causing intermittent failures for small amounts of data. Future syncs would “fix” the failures, but full sync completion was delayed.

Resolution: This is now correctly handled and will improve sync times during high load.

Issue: Access Review Summary Stats Not Updating, meaning some access reviews would show as “in progress” even though they were fully complete

Resolution: Access Review summary stats now correctly match the current state of the review.

Well, that's all for this month. Be on the lookout this time next month to see what's coming next.