Upgrade Considerations

  • For existing applications (created before December 2023) to support aggregation and provisioning of associated Administrative Units, manually add the attribute in the Account Schema with properties such as Managed, Entitlement, and Multi-Valued.

  • After upgrading IdentityIQ to version 8.1 Patch 4, 8.2, or 8.0 Patch 5, to support the alias user name for the upgraded existing Duo application, add the alias schema attributes manually to the application debug page as follows:

    Copy 
    <AttributeDefinition name="alias1" type="string">
       <Description>Username Alias 1</Description>
    </AttributeDefinition>

    <AttributeDefinition name="alias2" type="string">
       <Description>Username Alias 2</Description>
    </AttributeDefinition>

    <AttributeDefinition name="alias3" type="string">
        <Description>Username Alias 3</Description>
    </AttributeDefinition>

    <AttributeDefinition name="alias4" type="string">
       <Description>Username Alias 4</Description>
    </AttributeDefinition>

  • While upgrading IdentityIQ to version 8.1 Patch 4, 8.2, or 8.0 Patch 5, to manage the Duo Administrator user’s perform the following:

    1. Select the Manage Administrator Users checkbox in the Configuration tab. For more information, refer to Configuration Parameters.

    2. Add the following account schema attributes manually:

      • role (type-string)

      • user_type (type-string)

      • restricted_by_admin_units (type-boolean)

    3. Add the following entry to the application debug page:

      <entry key="adminUsersUri" value="/admin/v1/admins"/>

    4. For provisioning of the administrator user, add the following attributes with the required settings:

      • user_type

      • name

      • password

      • phone

      • role

    5. To enable the password management operations for the administrator user, the PASSWORD feature value must be added to the features string in the application XML as follows:

      featuresString="PROVISIONING, SYNC_PROVISIONING, UNLOCK, ENABLE, SEARCH, PASSWORD"

  • After upgrading to IdentityIQ version 8.1 Patch 4, 8.2, or 8.0 Patch 5, delete the existing password field from the create account provisioning policy.