Automated Scheduled Imports with UI Configuration (Early Access): We’ve laid the groundwork for scheduled automation in the platform. Currently, you can set up recurring imports for users, groups, and group memberships for all of your provisioning applications. No more having to manually import users via CSV. This is the foundation for a broader scheduling framework we’ll roll out later this year. This is opt-in only. To get access, email your CSM or file a ticket with “Scheduled Imports Beta” in the subject. We’ll enable it for your tenant and walk through the setup. Once enabled you will find the settings under Automations >> Schedulers. [Click here to Read More]
Provision Users from a Remote File Server: You can now ingest user records directly from an SFTP server. The system polls designated SFTP paths on a configurable interval (default: 5 minutes), parses user records in JSON or CSV format, and provisions accounts automatically into miniOrange. To enable go to Apps >> Add Application and create a File Server Sync Application. [Click here to Read More]
App-Specific Shared Identity: Shared Identity behavior can be configured at the application level instead of globally, providing precise control over where it is enabled. This functionality is supported across SAML, JWT, and OAuth applications.
It can be configured using the Shared Identity option in the app’s advanced settings. For the Self Service Console flow, Shared Identity can be managed through the Enable Shared User Login for End User Dashboard option in the customer preference settings. [Click here to Read More]
Attribute Transformation at runtime: You can now set up custom rules to automatically modify user profile attributes during user creation or update operations in the system. To get started check the settings under Automations >> Rules. [Click here to Read More]
Improvements:
Provisioning:
Full Name Support in Provisioning Events: Included a dedicated full name attribute for “Custom Provisioning Apps” that gets passed to external applications when you trigger provisioning actions.
RBAC for SCIM Server Apps: Automatically sync user Roles and Entitlements to SCIM-enabled applications, letting downstream systems enforce access controls without manual role mapping. [Click here to Read More]
User Deletion Control: Choose to delete or disable users in miniOrange when they're removed from the source app during user provisioning sync.
Bulk Password Updates for End Users: Set passwords for multiple users simultaneously useful for compliance resets, security incidents, or bulk onboarding scenarios.
Active Directory Improved Group Sync: Users and groups no longer share the same search filter and search base, configure each independently for more precise import control.
Active Directory Username Alias Import: Pull username aliases from Active Directory to support legacy systems and alternate login usernames. Map Active Directory attributes to miniOrange Username Aliases under your LDAP / AD configuration >> Attributes >> Provisioning Attributes. [Click here to Read More]
Active Directory Better Auditing: LDAP / AD Provisioning operations now log detailed audit trails and error contexts, making it easier to diagnose sync failures and permission issues.
Admin Audits:
Provisioning Configuration Changes Audits: Every admin action across all provisioning apps is now audited and available as reports. You can go to Reports >> Admin Activity Audit Report to get your logs.
Workflows:
Better Dormant Account Reporting: Workflow-triggered reports for Dormant Accounts can now be sent to multiple email addresses other than the main Administrator.
Improved Visuals and Usability:
CAS IDP Configuration Page, AWS Cognito IDP Configuration Page, Database Directories Configuration Page, and Slack + Salesforce SCIM Provisioning Application Pages now have redesigned interfaces with better layouts for better usability and quicker load times. [Click here to Read More]
