As you may have already heard, the Centrify Cloud (Centrify Identity Service and Centrify Privilege Service) will be upgraded to version 15.8 this weekend (Saturday, August 29th). The first thing you will notice upon logging into the service after the upgrade is that we've refreshed the login screens. While, we think the "new coat of paint" looks really nice, we are super excited about the improved login speed (roughly 12% faster for IWA logins and 60% faster for non-IWA)! Once again this release has several cool new features, let me point out my favorites here...
In speaking with customers, several have told me that they wished they had a way to organize the apps that appear in the User Portal for their users. I'm happy to say we listened to you, and have delivered. When you login to the User Portal on Saturday, you will see a new toggle button allowing the user to switch the view from a single grid (listed alphabetically) to groups of apps.
Let me explain how the feature works. As you probably already know, all of the apps in the App Catalog are listed under a "category" -- this category is simply a classification that we at Centrify assign to the apps as we add them to our catalog. We are now exposing the category as an editable field in the app configuration menu for the administrator. If you choose to leave the field as is, it will be grouped by the name we've given it; if you overwrite it with a name you prefer, it will be grouped under that name. Your end users have the final say in the matter as apps are ultimately grouped based on the tags that they assign to their apps. For example, if you want to change the category for Dropbox from "Collaboration" to "Business", that's how it will be grouped for your users. If a particular user tags that same app with "Cool Stuff", it will appear under that label for that user instead. (A couple of additional notes: (i) apps added through a custom template or Infinite Apps will have the default label of "Other", and (ii) users will need to manually click the toggle option to see the groupings -- however, we will remember that state for subsequent visits to the user portal.)
More / Better Administrative Controls
First, we have made it easier for an Admin to see if a particular user has any administrative rights within the product. We've done this by augmenting the "Roles" tab in the User drill-down to include a column that shows the Administrative Rights for each Role for which the user is a member. While we were at it, we made the Roles "drill-able" so that the Admin can now click the row to go directly to a particular Role.
We've also improved the way an Admin can configure their infrastructure. As you may know, our Cloud Connector is an optional component that can be installed on the cusomter's network. When installed, this component can serve 3 purposes: (i) proxy for AD, (ii) proxy for LDAP and (iii) App Gateway. From the Cloud Connector page in the Settings menu, you can easily see which services have been enabled for each of your Cloud Connectors. With this release we allow you to enable and disable these services from the cloud.
This feature gives you the control to install Cloud Connectors for specific purposes (e.g. you may want to add a Cloud Connector in your data center where you run a particular on-prem app that you have enabled for you users through the app gateway, and you want to dedicate that Cloud Connector to only serve App Gateway traffic).
For those of you who use Centrify for MDM, you will love this new feature as it greatly improves the user experience and productivity from mobile. So you must be asking, "I already have SSO, what's true SSO?"
If you want to access a web app from your mobile device, you can easily do that by launching the Centrify app and clicking on the app tile. That flow works great, you get right into the app without having to enter your credentials. But, what happens when your colleague sends you an email with a link to something in Box, or Salesforce? Prior to 15.8, you would click the link and you would be directed to the user portal to authenticate. With the 15.8 mobile client, and the upgrade to the cloud this weekend, clicking on a link in your email or typing in a url in your mobile browser will behave the same as clicking the app in the portal! (NOTE: this works for SAML apps that support SP-Initiated logins).
We hope you enjoy these new features and look forward to hearing your feedback!