The following changes are included in this release of the Next Identity platform.

Enhancements

Unify

Consumer Access Control: Token invalidation improvement

This update includes an improved user access control feature. If a user's access is revoked, the system effectively blocks any unauthorized access by preventing the issuance of new tokens and invalidating the current token.

User API: Improved data retrieval for /external-ids methods

A key attribute has been added to the request body for improved data retrieval, and user information is no longer retrieved from the access token for maximum security and privacy.

Journeys: Hosted UI improvements

We've improved Next Identity Journeys Hosted to provide a better user experience:

• Added a configurable timer or countdown feature to inform users about the wait time before they can resend the verification code.
• login_hint value is now locked and supported in the forgot password screen.
• Save button is no longer clickable when no changes have been made on the email edit profile screen.

Adopt

Adopt API: Renamed the scope and add support for opaque tokens

The dynamic_registration scope has been prefixed to ensure compatibility with token and Adopt API endpoint requests. We have also included support for opaque tokens, allowing the creation and use of access tokens for Adopt API purposes. Learn more about the Adopt API.

Analyze

• Consistent sorting of matched results in aging graph and details section.
• Users can now use the "enter" key to select/deselect a property.
• Property names are sorted alphabetically in the property dropdown inside the new project modal.

Bug Fixes

Unify

• Journeys API - Consumer Access Control - OTP login: Resolved an issue in the Next Identity API related to OTP login cases. The problem where the property was not being found when application owner credentials modify the clients plural has been fixed.
• Journeys API: user/find endpoint: This endpoint now correctly checks the defined filter of the client in the client_id parameter to ensure proper authentication.
• Journeys Hosted: When a user account with passwordless authentication enabled is deleted or deactivated, the stored credentials on the user agent (browser) and the database will now be properly removed. Users will be prompted to register new credentials.
• Journeys Hosted: Removed the duplicated "done" message that appeared twice in the communication menu after clicking the save button.

Operate

• Login screen: Improved login screen user interface for the Next Identity management console.
• Inventory: Properties with "operational" status will now correctly display in the Property list dropdown.