New in Version 8.2.2
IBM® Security Access Manager for Enterprise Single Sign-On, Version 8.2.2, is composed of AccessAgent 8.2.2 with Fix Pack 3, AccessStudio 8.2.2, and IMS Server 8.2.2 with Fix Pack 1. This release offers new features and currency support.
8.2.2 GA Refresh with IMS Server Fix Pack 1 (March 2018)
- IBM WebSphere® SDK Java™ Technology Edition Version 8.0 support.
- Microsoft Windows Server 2016 support.
- The following APARS or defects are resolved:
- Defect
Symptom: Machine policy template name is not shown properly in AccessAdmin if it contains any Unicode characters.
- APAR IV85194
IMS Server is not able to assign the right machine policy template based on the computer's Active Directory group.
- APAR IV87276
Unable to configure reset password from AccessAssistant when using non-SSL Active Directory.
- Defect
8.2.2 GA Refresh with AccessAgent Fix Pack 3 (March 2016)
Features
- Kerberos authentication
IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 supports Kerberos authentication of users in both personal and shared workstations.
Users can now log on to Windows Desktops by using any supported Windows authentication mechanism, including the default Credential Providers that are packaged with the Windows operating system.
See "Kerberos Authentication" in the IBM Security Access Manager for Enterprise Single Sign-On Planning and Deployment Guide
- IBM Security Access Manager for Enterprise Single Sign-On REST Web API
You can create, read, or update an application credential with the IBM Security Access Manager for Enterprise Single Sign-On REST Web API.
With the RESTful API based on HTTPS, you can use any client, operating system, or programming language that can submit an HTTP request.
IBM Security Access Manager for Enterprise Single Sign-On REST Web API replaces the Web API for Credential Management which was accessed through IBM Security Federated Identity Manager Security Token Service (STS). Configure the enterprise directory to Active Directory or Security Directory Server to use the REST Web API.
See the IBM Security Access Manager for Enterprise Single Sign-On REST Web API Guide.
- Support for Active Directory password synchronization in a non-trusted environment
Provide support for Active Directory password synchronization when the client workstation's domain does not trust the Active Directory domain that is configured as IMS Server enterprise directory. Enable this feature to synchronize Active Directory passwords in the non-trusted environment.
See the IBM Security Access Manager for Enterprise Single Sign-On Installation Guide.
- UI Automation extension
The UI Automation extension enables IBM Security Access Manager for Enterprise Single Sign-On administrators and profilers to create AccessProfiles to automate applications that support the Windows UI Automation accessibility framework.
For example, applications written using NET Windows Presentation Foundation support Windows UI Automation, out-of-the-box, to access basic controls like Text Fields and Buttons.
See IBM Security Access Manager for Enterprise Single Sign-On support for Observer Extensions.
Currency support
- Windows 10 32-bit and 64-bit support with AccessAgent Fix Pack 3
- IBM Security Access Manager for Enterprise Single Sign-On
AccessAgent, Version 8.2.2 with Fix Pack 3 supports Windows 10. However, the following features are not supported on Windows 10:
- Smart card authentication
- Hybrid smart card authentication
- Fingerprint authentication
- Virtual desktop infrastructure
There are additional prerequisites for installations on Windows 10. See Installing the AccessAgent using the installation wizard.
- Windows Server 2012 support
- IBM Security Access Manager for Enterprise Single Sign-On AccessAgent now supports Windows Server 2012 and Windows Server 2012 R2.
- Windows 8.1 32-bit and 64-bit support
IBM Security Access Manager for Enterprise Single Sign-On now supports single sign-on to applications on a Windows 8.1 32-bit and 64-bit operating system. However, IBM Security Access Manager for Enterprise Single Sign-On, Version 8.2.2 does not support Windows Store apps.
The following deployment and configurations are supported:- Shared and personal desktop configurations. See "Session Management" in IBM Security Access Manager for Enterprise Single Sign-On Planning and Deployment Guide.
- Network Provider configuration.
- RFID and password authentication factors.
- Single sign-on for Web and Windows applications that uses the bundled AccessProfiles.
- WebSphere Application Server 8.5.5 support
The IMS Server can now run on WebSphere Application Server 8.5.5.
- IBM DB2 10.5 support
The IBM DB2 10.5 can now be used as the IMS Server database.
- Citrix XenApp 7.5 and 7.6
IBM Security Access Manager for Enterprise Single Sign-On supports single sign-on and authentication services for applications hosted on the Citrix XenApp Server version 7.5 or 7.6 with Citrix Receiver 4.1.
- Citrix XenDesktop 7.5 and 7.6
IBM Security Access Manager for Enterprise Single Sign-On supports single sign-on to virtual desktops and applications hosted on Citrix XenDesktop 7.5 and 7.6.
- Microsoft Internet Explorer 11 support
All existing AccessProfiles for web applications that are accessed through Microsoft Internet Explorer 11 are supported.
- IBM Security Directory Server 6.4 support
- The IBM Security Directory Server 6.4 LDAP server is now supported.
- Mozilla Firefox Extended Support Release 31 and 38 support
Single sign-on and automation for web applications that are accessed through Mozilla Firefox Extended Support Release 31 and 38 are supported. To enable this support, see "Enabling single sign-on support in Mozilla Firefox Extended Support Release 31 and 38" in the IBM Security Access Manager for Enterprise Single Sign-On Installation Guide.
- BIO-key BSP 1.12 support
BIO-key Biometric Service Provider 1.12 for biometric devices are now supported.
- IBM Notes® 9 support
- IBM Security Access Manager for Enterprise Single Sign-On AccessProfiles are now supported on IBM Notes 9.