In case you hadn't heard, we will be upgrading our platform (Centrify Identity Service and Centrify Privilege Service) to version 16.8 this weekend (Saturday, August 27th). The complete list of new features is available in the release notes, but as always I will tell you about the most important features here:
Enhancements to the Administrative User Interface
When logging into Cloud Manager, you will immediately notice some improvements we've made to the dashboards User Interface. Specifically, we've made the following improvements:
- We've done a refresh of the dashboards, using new widgets and colors. I think they look much cleaner.
- We now have a toggle option to switch between our standard white background and a dark grey background (this is great if you like to use these dashboards in presentations with a dark background).
- We've changed the icon for selecting the option to "pin" a dashboard as the default dashboard to show in the Dashboards tab. The gear icon has been replaced with an ellipsis (...).
- We've also added a new Security Overview dashboard featuring a great time-based view of successful and failed login attempts. This dashboard is interactive, it features a slider widget to specify a time range, and clicking on elements within the dashboard will filter the data set. In the lower left-hand quadrant of the dashboard you will see a detailed list of the active data set. This entire list can be downloaded easily from the dashboard, or clicking on an individual user will bring up a new "User Inspector" dialog showing details about that specific user and his/her recent activity.
In addition to the enhancements to the Dashboards, we've also made the following UI changes:
- The "About" menu now shows which Pod a tenant is on. This is helpful information when looking at Centrify's Trust page so you can see if there are any issues affecting your pod.
- We've also improved the interface for Infinite Apps (our tool for adding username and password apps to the service).
- Finally, we've cleaned up the design for the Cloud Connectors page (in Settings> Network> Cloud Connectors). With the new design, we've replaced the individual columns for the services running on each Cloud Connector (e.g. AD Proxy, App Gateway, RADIUS, etc.) with a single column listing all of the "Enabled Services" running on each Connector.
Expanded MFA Support
Continuing on our MFA Everywhere initiative, we have added 2 big features to further expand our support for Multi-factor authentication:
- For customers who use Smart Cards instead of usernames and passwords, we've added Smart Card support for Office 365 thick clients!
- We've extended our RADIUS support to allow both client and server connections!
Let me dive into RADIUS a little further to provide better context here. In 16.2, we added support for RADIUS where the Cloud Connector would serve as a RADIUS server allowing us to extend our MFA to RADIUS clients (enabling us to add MFA to VPNs, etc.). At that time, we also added support to integrate 3rd party MFA solutions that use OATH (e.g. Google Authenticator). Since that time, we've had a number of customers ask us to support MFA responses from other 3rd party solutions through RADIUS (e.g. RSA SecurID). With 16.8, our Cloud Connector can now serve as both/either a RADIUS client and/or server. To enable 3rd party MFA through RADIUS, you will need to do the following:
- Go to Settings> Authentication > RADIUS Connections and Add a RADIUS Server
- Go to Settings> Authentication > Authentication Profiles and add (or update) a profile to accept "3rd Party RADIUS Authentication"
- Go to Settings> Network> Cloud Connectors and enable a Connector as a RADIUS Client
- Go to Policies > User Security Policies> RADIUS and enable "Allow 3rd Party RADIUS Authentication"
We hope you enjoy these new features and look forward to hearing your feedback!