What's new

The Identity Platform provides the ultimate deployment freedom using the same interface and capabilities for all environments – hybrid, cloud, or on-premises. The Identity Platform includes the SecureAuth® Intelligent Identity Cloud (at no additional cost) which delivers advanced security, user experience, analytics, administration and extensibility functionality out-of-the-box without the need for cumbersome implementations and integrations with third-party services.

A new and customizable end user theme is included in this release. To improve the login experience, you can use cascading style sheets (CSS) to change backgrounds, add logos, and modify the position of fields.

The new Identity Platform interface simplifies the creation and administration of authentication login experiences with reusable templates, policies, and settings.

SecureAuth Connector and data store integration

For cloud and hybrid deployments, the Identity Platforms integrates with the local data stores in your organization for user authentication. To establish communication between the data store and the Identity Platform to check if the user has access, requires the use of the SecureAuth Connector.

The user interface provides installation and configuration instructions for the SecureAuth Connector before you add and integrate data stores.

For more information about the SecureAuth Connector, see Data store integrations.

Global multi-factor authentication methods

Globally define which multi-factor authentication (MFA) methods are available for users to select and use for authentication during the login workflow. Any time a change is made a globally-defined multi-factor method, it is automatically reflected in the default and custom policies.

For more information about out-of-the box settings for global multi-factor methods and each of its configurations, see Global multi-factor authentication (MFA) methods overview.

Policies

A policy is a collection of rules about how to handle login attempts to allow and block users to certain applications. The Identity Platform comes with a default policy, which cannot be deleted. Each time you add a new policy, the rules from the default policy are applied – to which you can further limit in a customized policy.

In a policy, you define the following types of rules:

For more information about policies, see How policies are used in the Identity Platform.

A new Identity Security Intelligence dashboard provides key metrics at a glance. It includes the number of logins; login by system; successful vs failed logins; MFA methods used; and more.

Provide a secure and seamless user experience for your end users who use a mobile device; use biometric MFA as part of the authentication process. You can enable face or fingerprint biometrics for Apple and fingerprint biometrics for Android mobile devices, to ensure the user is the owner of the device.

Another layer was added to the set of Threat Detection rules in the form of adaptive authentication IP threat protection. It provides more protection for WS-Trust and other protocols based on attack pattern recognition. This capability is part of the Prevent Package.