<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Dear midPoint community, </div><div><br data-mce-bogus="1"></div><div><div>The third LTS version of midPoint, midPoint 4.8 code-named ‘Curie’, has been released. What does it bring?</div><br><div>One of the focuses in midPoint 4.8 is to provide <a data-mce-href="https://docs.evolveum.com/midpoint/reference/master/deployment/ninja/upgrade-with-ninja/" href="https://docs.evolveum.com/midpoint/reference/master/deployment/ninja/upgrade-with-ninja/">streamline upgrades</a>. Improvements were made for reporting, object validation, and data migration. With our improved Ninja, users can better see what’s going on, where and what the problems are, and which data must be migrated. The Ninja tool continuously leads users throughout the upgrade.</div><br><div>One of the biggest and maybe the most interesting features midPoint 4.8 brings is <a data-mce-href="https://docs.evolveum.com/midpoint/reference/master/roles-policies/mining/" href="https://docs.evolveum.com/midpoint/reference/master/roles-policies/mining/">role mining</a>. In cooperation with <a data-mce-href="https://kinit.sk/sk/projekt/evolveum-use-of-ai-methods-in-identity-and-access-management/" href="https://kinit.sk/sk/projekt/evolveum-use-of-ai-methods-in-identity-and-access-management/">KInIT</a>, we looked for a way to use AI/ML algorithms to help with mining business roles based on existing assignments to application roles. At the end of role mining sessions, new business roles are suggested. Such candidate roles can then be fine-tuned by business users. We believe that, among other benefits of role mining, this will simplify the bottom-up approach for creating business roles.</div><br><div>MidPoint 4.8 also brings plenty of improvements regarding security. For example, our <a data-mce-href="https://docs.evolveum.com/midpoint/reference/master/security/authorization/configuration/selectors/type-and-parent/" href="https://docs.evolveum.com/midpoint/reference/master/security/authorization/configuration/selectors/type-and-parent/">authorization model was extended</a> to support more use cases than before, and authorizations <a data-mce-href="https://docs.evolveum.com/midpoint/devel/design/apply-schemas-and-security-4.8/summary/" href="https://docs.evolveum.com/midpoint/devel/design/apply-schemas-and-security-4.8/summary/">performance</a> was improved. A faster and more flexible <a data-mce-href="https://docs.evolveum.com/midpoint/reference/master/security/privilege-elevation/" href="https://docs.evolveum.com/midpoint/reference/master/security/privilege-elevation/">elevation feature</a> is also now available. In addition to those improvements, an <a data-mce-href="https://jenkins.evolveum.com/view/midPoint-master/job/midpoint-master-security/" href="https://jenkins.evolveum.com/view/midPoint-master/job/midpoint-master-security/">OWASP dependency-check</a> was added to our Jenkins to quickly detect any publicly disclosed vulnerabilities within used dependencies.</div><br><div>Another significant area we were focusing on during the development of midPoint 4.8 was the so-called <a data-mce-href="https://docs.evolveum.com/midpoint/methodology/first-steps/" href="https://docs.evolveum.com/midpoint/methodology/first-steps/">First Step Methodology</a>. For this area we mainly focused on improving user experience in midPoint. Different improvements were made, mostly related to the <a data-mce-href="https://docs.evolveum.com/midpoint/reference/master/admin-gui/resource-wizard/" href="https://docs.evolveum.com/midpoint/reference/master/admin-gui/resource-wizard/">resource wizard</a> to make the process of connecting new systems as simple as possible.</div><br><div>Last but not least, driven by a subscriber, a new feature for <a data-mce-href="https://docs.evolveum.com/midpoint/reference/master/security/credentials/identity-recovery/" href="https://docs.evolveum.com/midpoint/reference/master/security/credentials/identity-recovery/">identity recovery</a> was added.</div><br><div>Those are just some of the improvements added in midPoint 4.8. For the full list of changes, please see the <a data-mce-href="https://docs.evolveum.com/midpoint/release/4.8/" href="https://docs.evolveum.com/midpoint/release/4.8/">release notes</a>. If you are interested in learning more about what’s new in midPoint 4.8, join us at the <a data-mce-href="https://evolveum.com/training-and-certification/whats-new-in-midpoint-4-8-webinar/" href="https://evolveum.com/training-and-certification/whats-new-in-midpoint-4-8-webinar/">webinar</a> taking place on November 2nd at 2PM CET / 9AM EDT / 10PM JST. Should you be curious about midPoint 4.8 in action, you can try our <a data-mce-href="https://demo.evolveum.com/" href="https://demo.evolveum.com/">demo</a>.</div><div><br data-mce-bogus="1"></div><div><span style="font-size: 11pt;" data-mce-style="font-size: 11pt;">(Reposted from <a data-mce-href="https://evolveum.com/midpoint-4-8-curie-released/" href="https://evolveum.com/midpoint-4-8-curie-released/">Evolveum blog</a>)</span></div><div><br data-mce-bogus="1"></div></div></div><div><br></div><div data-marker="__SIG_PRE__">--<br>Katarina Bolemant<br>Development Team Leader<br>evolveum.com</div></div></body></html>