In case you hadn't heard, we will be upgrading our platform (Centrify Identity Service and Centrify Privilege Service) to version 16.9 this weekend (Saturday, September 24th). The complete list of new features is available in the release notes, but as always I will tell you about my favorites here:
In order to improve the on-boarding experience and shorten the learning curve for Administrators, we have added step-by-step tutorials in the admin portal. When using the admin portal from a new browser (no cookie), the admin will see pop-up dialogs when they first navigate to each tab (i.e. Dashboards, Users, etc.). Now that we have these tutorials built into the product, we have removed the "Getting Started" dashboard (the Quick Start Wizard can now be started as an option in the drop-down menu under your user name). The tutorials also appear on the app configuration pages, providing a list of steps needed to deploy the application.
Please note, if you don't want to show the tutorials in your tenant, they can be turned off by going to the Account Customization page under Settings.
Applying Policies to "Sets" of Devices
I am very excited to announce that this release marks our introduction of "Sets". In the past, our platform could be used to apply policies to "All Users and Devices" or to "Roles". With 16.9, we are introducing a concept that we refer to as Sets, which are groups of things that policies can be applied to. We intend to use sets more extensively in future releases, but for now, we are introducing sets for devices. This allows the administrator to apply device policies to groups of devices. Specifically, device sets enable separate policies by OS, or by corporate vs personally owned devices!
Corporate owned devices are automatically identified as such through bulk enrollment (through Apple DEP, Android for Work, etc.). In addition, if you've already deployed your mobile devices, you can retroactively identify devices as corporate owned by importing a list of those devices by going to Settings > General > Corporate-owned Devices. We've even added new policies to enable admins to track the location of devices (this works great in conjunction with the Sets feature so that admins can now track the location of their corporate-owned devices without tracking personal ones).
As you probably know, Centrify Identity Service supports SSO through SAML and also enables SSO for username / password applications. For username / password applications that were brought in using the Centrify Browser Extension (including all apps added by an admin using Infinite Apps) we now support a land-and fill capability. More specifically, this enables users to go directly to a username / password application (instead of the user portal) to get signed in automatically to the application. With the form-filling beta, users will see a Centrify logo in a username field; clicking that icon will log them into the application!
This feature is currently available for beta testing for the Firefox browser only. Private message me, if you are interested in testing this capability.