NetIQ Cloud Bridge Agent 1.10.4 Release Notes

1.0 Introduction

In OpenText software-as-a-service (SaaS) or hybrid environments, Cloud Bridge is a data transfer bridge that simplifies and secures communication between SaaS applications, such as Identity Governance as a Service or Advanced Authentication as a Service, and on-premises identity sources and applications, such as Active Directory or Identity Manager. The Cloud Bridge Agent (CBA) is the on-premises entity that responds to the collection and fulfillment commands and directs them to the proper data source within the multi-tenant Cloud Bridge service for execution.

The Cloud Bridge Agent communicates with the SaaS applications through a secure messaging service outside the corporate firewall. This messaging service is adaptable for various workloads and provides guaranteed delivery of messages. No VPN is needed and all Agent connections are outbound connections to a well-defined port. Data is protected both in transit and at rest.

An on-premises administrator installs the Cloud Bridge Agent and configures it with the necessary service parameters, including locally-persisted and protected credentials for on-premises and third-party data sources. For more information about Cloud Bridge, see the NetIQ Cloud Bridge Agent Installation and Administration Guide.

The Cloud Bridge Agent 1.10.0 release includes new features, improves usability, and resolves previous issues. The Cloud Bridge Agent 1.10.4 release includes all updates in CBA 1.10.0 as well as some server updates in CBA 1.10.1 through 1.10.3, and also provides updated connectors. You can install CBA 1.10.4 without first installing CBA 1.10.0.

2.0 What’s New

The Cloud Bridge Agent includes the following new features and usability improvements.

Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the Identity Governance forum or the Advanced Authentication forum on OpenText Forums, our online community that also includes product information, blogs, and links to helpful resources.

2.1 JDK Updates

Cloud Bridge 1.10.0 and 1.10.4 include the following Java Development Kit (JDK) updates:

  • Cloud Bridge 1.10.0 has been updated to JDK 17, which is backward compatible with JDK 11

  • The connectors included with CBA 1.10.4 have been updated to JDK 11

The JDK updates have the following implications for Identity Governance 4.2 and Cloud Bridge 1.10.0 and later versions:

  • If you have custom connectors that were compiled with JDK 8, you will need to recompile them with JDK 11. You must also ensure that any new custom connectors are compiled with JDK 11.

  • With JDK 17, the Nashorn JS Engine is no longer a part of the JDK. As a result, Identity Governance 4.2 and Cloud Bridge 1.10.x now utilize the Graal JS Engine. This change could impact your transformation scripts in collectors and fulfillment, as well as your code in a custom collector or fulfillment. Ensure that you review and test all of your transformation scripts and custom code accordingly.

2.2 Updated Connectors in CBA 1.10.4

In Cloud Bridge 1.10.4, the CBA /collectors folder includes the following updated connector .jar files. In addition, the default logging files now account for all loaded connectors.

IMPORTANT:The CBA installation script does not automatically remove custom connectors from the /bridgelib folder, so you must manually remove them if you want to replace them with the updated connectors in Cloud Bridge Agent 1.10.4.

For information about configuring templates for connectors in Identity Governance as a Service, see the Identity Governance as a Service User and Administration Guide.

Connector Name

Connector Id

Version

IAM Connector for IDM Entitlement

daas-idm-entitlement-connector-service

4.1.10.0000

IAM Connector for GitHub

daas-rest-connector

1.0.1.0200

IAM Connector for JDBC

daas-jdbc

1.0.1.0000

IAM Connector for Native JDBC

daas-jdbc-native

4.1.8.0000

IAM Connector for Azure AD MS Graph and MS Teams

daas-azure-msgraph

4.1.10.0200

IAM Connector for SCIM

daas-scim-connector

4.1.8.0000

IAM Connector for Salesforce

daas-salesforce

4.1.9.0000

IAM Connector for ServiceNow

daas-servicenow

4.1.9.0000

IAM Connector for IDM

daas-idmservice

4.1.9.0000

IAM Connector for SharePoint

daas-sharepoint

4.1.9.0000

IAM Connector for Native LDAP

daas-ldapex-native

4.1.11.0000

IAM Connector for DXCMD Fulfillment

daas-fulfillment-dxcmd

4.1.9.0000

IAM Connector for Workday

daas-workday-connector

4.1.9.0000

IAM Connector for Salesforce Fulfillment

daas-fulfillment-salesforce

4.1.9.0000

IAM Connector for ServiceNow Fulfillment

daas-fulfillment-servicenow

4.1.9.0000

IAM Connector for CSV Fulfillment

daas-fulfillment-csv

4.1.9.0000

IAM Connector for Generic HTTP Fulfillment

daas-fulfillment-generic-http

4.1.8-37

IAM Connector for Azure AD Graph

daas-azure

4.1.7-6

IAM Connector for Native CSV

daas-csv-native

4.1.8-340

2.3 Enhancements and Updates in CBA 1.10.0

The Cloud Bridge Agent 1.10.0 release includes the following new features and usability improvements.

Improved Resiliency and Process Handling

This release includes enhancements to Cloud Bridge monitoring components to improve resiliency and reliability.

Enhanced CBA User Interface

The CBA user interface includes a number of enhancements, including the following:

  • Detailed information about the current CBA instance

  • Detailed information about all loaded connectors

  • Improved ability to filter and search on connector data

Simultaneous Startup of CBAs in High Availability Environment

This release resolves an issue that occurred in CBA 1.9.0. In some customer environments, if multiple CBAs in a high availability configuration were started simultaneously, an initialization deadlock could occur. Cloud Bridge now handles this situation gracefully. (Defect 379027)

3.0 Installing or Upgrading the Cloud Bridge Agent

You can install the Cloud Bridge Agent 1.10.4 in a new environment, or you can upgrade to CBA 1.10.4 from an existing installation of Cloud Bridge Agent 1.8.1 or later.

3.1 Upgrading the CBA

Before you upgrade an existing CBA installation, you should review your environment and do some planning for high availability. For planning information and upgrade instructions, see Upgrading Your CBA Environment in the Cloud Bridge Agent Installation and Administration Guide.

IMPORTANT:The connectors in CBA 1.10.4 have been updated to Java 11. The Cloud Bridge Agent 1.10.0 has been updated to JDK 17, which is backward compatible with JDK 11. If you have custom connectors that were compiled with JDK 8, you will need to recompile them with JDK 11. You must also ensure that any new custom connectors are compiled with JDK 11.

The CBA installation script does not automatically remove custom connectors from the /bridgelib folder, so you must manually remove them if you want to replace them with the updated connectors in Cloud Bridge 1.10.4.

3.2 Installing the CBA in a New Environment

For a new CBA installation, see the following topics in the Cloud Bridge Agent Installation and Administration Guide:

4.0 Additions to Documentation

In this release, the Cloud Bridge Agent Installation and Administration Guide now includes the content that was previously published in the document titled Configuring Secure Communication for Your Cloud Bridge Agent Technical Reference. For more information, see Configuring Secure Communication for Your Cloud Bridge Agent.

5.0 Contacting OpenText

For specific product issues, contact OpenText Support at https://www.microfocus.com/support-and-services/.

Additional technical information or advice is available from several sources: