Release Notes on SGNL

1.178

Thu, 16 Apr 2026 00:00:01 +0800

Administration

We now provide capabilities for enhanced searching of SGNL Logs
We’ve made improvements to managing snippets, triggers, and directory in the SGNL Console

1.177

Thu, 09 Apr 2026 00:00:01 +0800

Improvements and Bug Fixes

Fixed a bug where Protected System Administrators could not modify transforms
We improved the size and visibility of nodes in Data Lens

1.176

Thu, 02 Apr 2026 00:00:01 +0800

Policy

The look and feel of creating relationship conditions has been improved

Administration

AWS Assume Role with Web Identity is now Generally Available for Action authentication

1.175

Thu, 26 Mar 2026 00:00:01 +0800

Policy

We’ve made it easier to view and manage applied Policies in the Protected System details pages
We’ve made improvements to Snippet builder when modifying conditions

1.174

Thu, 19 Mar 2026 00:00:01 +0800

Systems of Record

We’ve added improvements to how entities are managed within Systems of Record

1.173

Thu, 12 Mar 2026 00:00:01 +0800

Policy

We’ve made minor improvements to the Snippet building experience

1.172

Thu, 05 Mar 2026 00:00:01 +0800

Policy

We’ve launched Relationship Conditions, enabling you to put constraints or conditions on relationships that exist in Policy creation

1.171

Thu, 26 Feb 2026 00:00:01 +0800

Administration

We now support Lists in Data Lens, enabling you to search for values that might exist in your entities and attributes
We improved the size and visibility of nodes in Data Lens

1.170

Thu, 19 Feb 2026 00:00:01 +0800

Improvements and Bug Fixes

We improved how we handle logs in the console

1.169

Thu, 12 Feb 2026 00:00:01 +0800

Administration

Added support for HTTP Log Stream sinks, providing more flexibility in log destination configuration
Enhanced action testing functionality to automatically use integration authentication and address when not explicitly provided

Improvements and Bug Fixes

Improved handling of array values in Data Lens

1.168

Thu, 05 Feb 2026 00:00:01 +0800

Systems of Record

Added sync status indicators on the dashboard for better visibility into data synchronization

Policy

Enhanced custom context support across Protected Systems, Policy Lens, and Reports

Improvements and Bug Fixes

Fixed a pagination bug in Access Reporting

1.167

Thu, 29 Jan 2026 00:00:01 +0800

Administration

Improved parent-child entity relationship management with automation at entity creation time

Improvements and Bug Fixes

Enhanced entity metrics to properly include nested children in counts

1.166

Thu, 22 Jan 2026 00:00:01 +0800

CAEP Hub

Enhanced AWS Actions to support new authentication method ‘Assume Role with Web Identity’

Administration

Added support for configuring additional OIDC scopes in admin security settings for enhanced identity provider integration

Improvements and Bug Fixes

Improved S3 as an SoR data transfer efficiency

1.165

Thu, 15 Jan 2026 00:00:01 +0800

Systems of Record

Added support for AWS STS Assume Role with Web Identity authentication for enhanced cloud integration

Protected Systems

Added the ability to include context in Evaluations and Search requests

Administration

Added session permission sets display in the admin header and tables for better permission visibility
Enhanced snippet management with assignments view to track where snippets are being used
Added triggers and rules to admin labels for improved resource organization and filtering

1.164

Thu, 08 Jan 2026 00:00:01 +0800

Administration

Minor improvements to Provider Hook Visualizer experience

1.163

Thu, 01 Jan 2026 00:00:01 +0800

Improvements and Bug Fixes

Happy New Year – we released a small number of minor bug fixes and improvements this week

1.162

Wed, 24 Dec 2025 00:00:01 +0800

Systems of Record

Enhanced Directory API to support multiple queries aligning it with Search and Evaluations APIs

Improvements and Bug Fixes

Optimized performance by implementing separate rate limits for Event Push, Entity Push SCIM SET, and SCIM 2.0 operations
Removed validation requirement for pushExternalId in Custom Event Push Systems of Record configurations

1.161

Thu, 18 Dec 2025 00:00:01 +0800

Policy

Added support for country codes in snippet templates for better location-based policy decisions

Administration

Made permission sets optional when creating new users
Added support for Azure Storage as a destination for log streams

1.160

Thu, 11 Dec 2025 00:00:01 +0800

Systems of Record

Enhanced Salesforce adapter with support for multi-select picklists and custom field JSON path configurations

Administration

Improved provider configuration with visual JSON routing preview for better setup experience
Fixed issue preventing modification of push method after datasource creation

1.159

Thu, 04 Dec 2025 00:00:01 +0800

Systems of Record

Improved handling of empty responses from CrowdStrike endpoints for more reliable data synchronization
Improved ingestion task management with better locking mechanisms to prevent conflicts during data synchronization

CAEP Hub

Updated CAEP Hub Insights for improved clarity and user experience

1.158

Thu, 27 Nov 2025 00:00:01 +0800

CAEP Hub

Enhanced CAEP Action attribute display with improved sorting for better organization
Improved relationship filtering logic to ensure accurate directional filtering

Improvements and Bug Fixes

Enhanced SCIM 2.0 push integration with additional schema attributes for User and Group entities

1.157

Thu, 20 Nov 2025 00:00:01 +0800

Administration

Improved Provider Hook configuration experience for routing across Protected Systems

Improvements and Bug Fixes

Improved logging visibility for SCIM 2.0 Push SoRs
Implemented continued improvements for data ingestion

1.156

Thu, 13 Nov 2025 00:00:01 +0800

Systems of Record

Enabled support for custom schemas when using SCIM 2.0 Entity Push

Administration

Added time picker to log custom range selection to enable more granular selection of logs
Enhanced Synchronization Safety capabilities to provide enhanced visibility into sync status

1.155

Thu, 06 Nov 2025 00:00:01 +0800

Systems of Record

Enhanced CSV import functionality to support child entities and improved data parsing capabilities
Improved MySQL adapter with better connection handling, pagination, and error logging
Added Sync Frequency display in the entity management interface for better visibility
Improved notification and handling of issues when Sync Safety is triggered

Administration

Enhanced Data Lens with improved node filtering and increased node limit warnings

1.154

Thu, 30 Oct 2025 00:00:01 +0800

Systems of Record

Enhanced logging capabilities across all adapters for better troubleshooting and monitoring
Added Ingestion Safety feature with new safeguards to protect against data corruption during synchronization

Administration

Added comprehensive event logging for adapter services, connector agents, and directory transforms
Introduced new log streaming options including Loki and Datadog integrations
Added ability to save Policy Lens queries in URLs for easier sharing and bookmarking
New SGNL Dashboards are available on the Grafana marketplace to monitor SGNL via Log Streams to Loki
Updated the SGNL On-Premises Connector to v1.8.0 with logging now available on the SGNL service

1.153

Thu, 23 Oct 2025 00:00:01 +0800

Systems of Record

Added a default SCIM 2.0 Push Template to the SoR Catalog

Administration

Improved Access Logging consistency across requests
Enabled ‘All’ as the default filter for reviewing Audit Logs

Improvements and Bug Fixes

Fixed an issue where Action Testing was unable to cryptographically sign test messages
Improved Data Lens sorting functionality for Systems of Record

1.152

Thu, 16 Oct 2025 00:00:01 +0800

Systems of Record

Enhanced Jira adapter with support for Enhanced JQL Issue Search for more flexible data retrieval
Improved Entra ID group membership synchronization to support ingesting multiple group members per sync operation

Improvements and Bug Fixes

Fixed parent relationship handling in Snippet Builder v2
Enhanced Data Lens UI functionality for better user experience
Added support for IP address conditions in Snippet Builder v2 operator conditions

1.151

Thu, 09 Oct 2025 00:00:01 +0800

Systems of Record

Improved the Entra ID SoR Adapter to enhance page synchronization efficiency

Administration

Data Lens now allows for advanced filtering based on attributes and relationships

Improvements and Bug Fixes

Resolved node display issues in Snippet Builder v2
Added helpful tooltips to entity lists in Snippet Builder v2
Fixed an issue where duplicate nodes in directory configuration could return incorrect results

1.150

Thu, 02 Oct 2025 00:00:01 +0800

Systems of Record

Improved Entra ID group member entity synchronization

Improvements and Bug Fixes

Changes to a System of Record configuration will no longer trigger synchronization of entities
Fixed an issue where CAEP Hub recent activity messages were unclear
Resolved node selection problems in the Snippet Builder v2 interface
Improved provider mapping operations to run sequentially for better reliability

1.149

Fri, 26 Sep 2025 00:00:01 +0800

Improvements and Bug Fixes

Fixed time-based conditions in Directory API
Optimized the creation of Path Relationships during ingestion of large Systems of Record

1.148

Thu, 25 Sep 2025 00:00:01 +0800

Policy

Enhanced Snippet Builder v2 with drag-and-drop functionality
Improved support for the handling of conditions on nodes in Directory

Systems of Record

Enhanced Microsoft Entra ID adapter with improved query performance for advanced filters using NOT operators
Updated Okta System of Record configuration to include Application entities
Enhanced CrowdStrike Alert entities with additional attributes for better security monitoring

Administration

Updated Reports interface for improved usability

Improvements and Bug Fixes

Improved YAML export functionality with parent-child entity sorting for better organization
Fixed Global Reader permissions to include access to Provider configurations
Resolved SCIM 2.0 PATCH operations to properly handle nested paths and SET operations

1.147

Thu, 18 Sep 2025 00:00:01 +0800

Systems of Record

Enhanced pagination added for MySQL adapter
Added Applications entity support to Okta System of Record
Improved Jira adapter to better handle array attributes and child entities

Improvements and Bug Fixes

Improved node selection in Snippet Builder v2 by highlighting the need for binding to request context
Enhanced processing of triggers in CAEP Hub to prevent race conditions

1.146

Thu, 04 Sep 2025 00:00:01 +0800

Policy

Added snippet visualization in the Policy viewer to better understand snippet structure and relationships
Added support for the current time as Context on Directory configuration

CAEP Hub

Enhanced rule display names in recent activity for improved clarity

Improvements and Bug Fixes

Fixed LDAP adapter issue when attributes contain empty values

1.145

Thu, 28 Aug 2025 00:00:01 +0800

Systems of Record

Added support for CrowdStrike Alerts API to enable security incident data synchronization
Enhanced support for advanced Jira Datacenter configurations

Administration

Enhanced session permission set audit logging with additional user context
Added warning when using paths in Splunk log forwarding addresses

Improvements and Bug Fixes

Resolved duplicate relationship issues in Duo integration

1.144

Thu, 21 Aug 2025 00:00:01 +0800

Protected Systems

Added support for multiple Integration assignments on a single Provider Hook for improved flexibility
Improved Okta OIDC transform to support JSON values

Administration

Added Session Permission Sets functionality for enhanced user session management

Policy

Added Snippets history page to track changes and manage policy snippet versions

Systems of Record

Added IsNull and IsNotNull filter support to the MySQL Adapter for more flexible data querying capabilities

Improvements and Bug Fixes

Fixed relationship descriptions display when multiple matches are found

1.143

Wed, 13 Aug 2025 00:00:01 +0800

Protected Systems

Updated Directory and Access Search APIs to include IpAddress and DeviceId in response body to enable additional context and traceability
Added support for Provider Hook mappings for Protected Systems, enabling multiple applications in an IdP to be mapped to a SGNL Protected System

Policy

Added a Preview tab for snippet versions in the UI to enable users to better visualize snippet versions

Administration

Added session permission sets during Single Sign-On, giving administrators control over session-level permissions

1.142

Thu, 07 Aug 2025 00:00:01 +0800

Protected Systems

Added support for Principal Search Transforms to customize how user identities are processed during access evaluations

CAEP Hub

Enhanced support for Array and Object parameter types in SGNL Actions
Improved error logging for SGNL Actions with more detailed response information

Systems of Record

Improved Jira Data Center adapter performance by optimizing attribute filtering for issues

Improvements and Bug Fixes

Improved path handling and merging in data ingestion queries for better performance

1.141

Thu, 31 Jul 2025 00:00:01 +0800

Protected Systems

Added enhanced logging and metrics for Directory API requests to improve observability
Added support for filtering relationships in directory builder for improved usability

CAEP Hub

Added support for object and array parameters in Actions for more flexible configurations

Improvements and Bug Fixes

Improved relationship management by preventing accidental deletion of relationships referenced in policies
Enhanced error handling for regex validation with more user-friendly error messages

1.140

Thu, 24 Jul 2025 00:00:01 +0800

CAEP Hub

Created new “Update User by ID” action for Okta integration

Protected Systems

Added support for Custom Transforms for the Directory API

1.139

Thu, 17 Jul 2025 00:00:01 +0800

Protected Systems

Assets are now counted in the Protected System Request configuration to help guide filtering and advanced configurations

Improvements and Bug Fixes

Fixed issues with relationship visualization in the CAEP Hub Trigger builder
Resolved multiple UI issues related to Directory management and chart displays
Improved handling of version management in Directory configuration

1.138

Thu, 10 Jul 2025 00:00:01 +0800

CAEP Hub

Enhanced Trigger Builder functionality with new look and feel
Added new Okta User Update action for managing user attributes
Introduced Slack Direct Message action for automated notifications

Improvements and Bug Fixes

Fixed various UI issues including dropdown placement and condition group styling
Resolved path relationship validation issues with parent entities
Added unique ID validation during attribute creation to prevent duplication

1.137

Thu, 03 Jul 2025 00:00:01 +0800

CAEP Hub

Replaced the Trigger Builder with a new Snippet Builder interface for improved rule creation and management
Enhanced dropdown functionality with keyboard navigation and jump-to-key support for faster item selection
Added support for creating users in Okta through SGNL Actions

Improvements and Bug Fixes

Improved dropdown menu accessibility with proper tab indexing

1.136

Thu, 26 Jun 2025 00:00:01 +0800

Protected Systems

Enhanced request configuration with support for query parameter filtering in the Search and Access API

Systems of Record

Added support for Custom Transforms for Okta and Entra ID integrations, particularly when using Provider Hooks
Improved LDAP adapter response handling and attribute filtering

Improvements and Bug Fixes

Improved System of Record YAML export functionality
Improved sync status visibility for child entities

1.135

Thu, 19 Jun 2025 00:00:01 +0800

CAEP Hub

Enhanced CAEP Hub Insights with updated log duration settings
Enhanced Path Relationship usage in CAEP Hub Triggers

Protected Systems

Restricted creation of Master Control Plane (MCP) Protected System types
Enhanced AWS S3 sink configuration with improved externalId validation
Added capability to test transforms with custom decision data

Systems of Record

Fixed Crowdstrike User Account and Active Directory relationship mapping
Added support for Custom Event Push Systems of Record with configurable event paths

Improvements and Bug Fixes

Enhanced attribute creation with additional validation rules
Improved handling of unique ID during Entity configuration
Fixed parent relationship direction display in entity relationships

1.134

Thu, 12 Jun 2025 00:00:01 +0800

Systems of Record

Improved AWS S3 adapter performance with streaming support for large CSV files
Enhanced LDAP adapter with connection pooling and improved cursor handling for large directories

Administration

Improved relationship visualization in DataLens to correctly display parent-child relationships
Updated connector management interface with improved status visibility and control mechanisms
Enhanced logging capabilities to better track and diagnose query execution issues

1.133

Thu, 05 Jun 2025 00:00:01 +0800

Systems of Record

Added Group Member entity and relationships to Salesforce template
Enhanced Catalog Templates with additional parent relationships where applicable

Protected Systems

Added standardized request duration metrics for Access and Search APIs, enabling improved analytics

Administration

Released DataLens v1, providing enhanced data visualization capabilities

Improvements and Bug Fixes

Fixed filtering functionality in the CAEP Hub Snippet Builder for improved rule creation

1.132

Thu, 29 May 2025 00:00:01 +0800

SGNL Intelligence / Model Context Protocol

(Closed Beta) Launched the SGNL Gateway to support Model Context Protocol (MCP) integrations

Protected Systems

Fixed JWKS endpoint construction to ensure proper authentication handling

Improvements and Bug Fixes

Fixed an issue with evaluation counts for specific policies on the SGNL Dashboard

1.131

Thu, 22 May 2025 00:00:01 +0800

Protected Systems

Added support for Custom Transforms to enhance data processing flexibility
Improved handling of Device ID when transitioning from logs to Policy Lens

Administration

Improved High Availability configuration for On-Premises Connectors
Fixed issues with Systems of Record creation when using On-Premises Connectors
Enhanced Log Filtering capabilities to simplify debugging
Improved DataLens performance for faster data analysis and visualization

1.130

Thu, 15 May 2025 00:00:01 +0800

Protected Systems

(Closed Beta) Enhanced search performance with parallel execution capabilities

Systems of Record

Added entity sync status visibility in the UI
Implemented safeguards to prevent use of disabled connectors in Protected Systems and Systems of Record
Enhanced On-Premises Connector management with improved connection handling and configurable parameters

Improvements and Bug Fixes

Improved list sorting functionality across various sections of the product
Fixed formatting issues in comma-separated lists for better readability
Improved attribute update functionality
Enhanced action testing interface for better usability

1.129

Thu, 08 May 2025 00:00:01 +0800

Systems of Record

Improved Entra ID (formerly Azure AD) integration with new relationships and attributes

Administration

Added validation checks before relationship deletion to prevent unintended data loss

Improvements and Bug Fixes

Improved form field handling for adapter configurations with dynamic height adjustment

1.128

Thu, 01 May 2025 00:00:01 +0800

Protected Systems

Improved entity relationship handling with enhanced parent relationship validation

Systems of Record

Added new entity push logs for better visibility into data synchronization status

Administration

Redesigned authentication flow for improved user experience

Improvements and Bug Fixes

Enhanced CAEP Hub Snippet Builder with various improvements and fixes
Improved validation for CSV uploads by ensuring unique attribute requirements are met

1.127

Thu, 24 Apr 2025 00:00:01 +0800

CAEP Hub

Fixed duration settings in CAEP Hub Insights to ensure proper time window displays

Administration

Improved Data Lens visualization to better handle event-type entities

1.126

Thu, 17 Apr 2025 00:00:01 +0800

Protected Systems

Added support to customize attribute name formatting in Okta SAML transforms for improved flexibility in identity mapping
Added support for Hashicorp Boundary as a Protected System

Systems of Record

Enhanced CSV data synchronization to support nested child objects when reading from S3 Buckets

1.125

Thu, 10 Apr 2025 00:00:01 +0800

Protected Systems

Fixed an issue where restricted permissions would hide some allowed Policies when viewing a Protected System

Systems of Record

Added support for Jira Datacenter
Enhanced Okta System of Record with advanced filtering capabilities for Users and Groups

Improvements and Bug Fixes

Added support for the None authentication method when testing SGNL Actions
Improved YAML export functionality to better handle child entities

1.124

Thu, 03 Apr 2025 00:00:01 +0800

CAEP Hub

We made additional improvements to relationship handling within CAEP Hub Triggers

1.123

Thu, 27 Mar 2025 00:00:01 +0800

CAEP Hub

Enhanced relationship handling in CAEP Hub Triggers to properly process parent/child relationships

Administration

Added additional capabilities into the SGNL Support Panel

1.122

Thu, 20 Mar 2025 00:00:01 +0800

Improvements and Bug Fixes

Fixed CSV template examples for improved clarity
Resolved issues with condition deletion and type handling in Snippet Builder
Improved handling of location-based snippets
Fixed device ID handling in Policy Lens

1.121

Thu, 13 Mar 2025 00:00:01 +0800

Policy

Added Device ID field support to Policy Lens and Snippet Builder to simplify creation and introspection of Policies using Devices

Protected Systems

Enhanced Access Policy evaluation with improved logging

Improvements and Bug Fixes

Improved action testing functionality with better handling of non-JSON response bodies

1.120

Thu, 06 Mar 2025 00:00:01 +0800

CAEP Hub

Added testing capabilities for CAEP Hub Actions to validate and test configuration

Policy

Enhanced snippet builder interface with sorted attributes and entity selectors for improved usability

1.119

Thu, 27 Feb 2025 00:00:01 +0800

Systems of Record

Released support for the MySQL System of Record, enabling connectivity to SQL databases

1.118

Thu, 20 Feb 2025 00:00:01 +0800

CAEP Hub

Enhanced dashboard metrics for action and rule usage
Improved relationship validation during snippet creation for more reliable rule development

Protected Systems

Added principal ID validation in the Policy Lens to simplify debugging

Systems of Record

Enhanced CrowdStrike integration with improved filtering capabilities for REST objects

1.117

Thu, 13 Feb 2025 00:00:01 +0800

CAEP Hub

Added per-rule metrics in the CAEP Hub for more granular monitoring and analysis

Policy

Expanded relationship attribute selection options for more flexible policy creation in the simplified snippet builder

Protected Systems

Enhanced Policy Lens interface with a new option to explicitly indicate no Asset ID value

Improvements and Bug Fixes

Fixed an issue where relationship attributes were being incorrectly filtered in selections

1.116

Thu, 06 Feb 2025 00:00:01 +0800

Protected Systems

Added support for filtering Assets that can be returned by the Search and Access API on the Protected System Request Config

Administration

Enhanced Access Evaluation logging with duration metrics for better performance monitoring

Improvements and Bug Fixes

Fixed CSV template handling to properly use externalId instead of the Display Name attribute
Resolved an issue where Path relationships would sometimes not be shown when creating a CAEP Hub Trigger

1.115

Thu, 30 Jan 2025 00:00:01 +0800

CAEP Hub

Added support for managing AWS IAM group memberships through SGNL Actions

Systems of Record

Added support for CrowdStrike Endpoint Protection entities including Devices, Endpoint Incidents, and Detections

1.114

Thu, 23 Jan 2025 00:00:01 +0800

Improvements and Bug Fixes

We fixed an issue in SGNL Reports that prevented reports loading if access to Policies was restricted

1.113

Thu, 16 Jan 2025 00:00:01 +0800

CAEP Hub

Enhanced filtering capabilities for CAEP rules and rule snippets to improve search and organization
Updated CAEP Action interface for improved usability and clarity
Added support for GCP Workforce Identity Actions

Protected Systems

Improved Access API decision logs for better auditing and troubleshooting

1.112

Thu, 09 Jan 2025 00:00:01 +0800

CAEP Hub

Enhanced CAEP Hub Insights with a default 24-hour view period for better monitoring
Combined CAEP Hub Action and Policy cards into a unified view on the dashboard to simplify visibility at a glance

1.111

Thu, 02 Jan 2025 00:00:01 +0800

CAEP Hub

We’ve extended support for Action Parameters beyond string types, to DateTime, Integer, and more sorts of values
New Retry Logic has been added for Actions in order to define how many times per execution they need to be retried, and whether to re-run or stop on failure
Creating Shared Signals Framework integrations with Okta are now easier, with address pre-population by default

1.110

Thu, 26 Dec 2024 00:00:01 +0800

Improvements and Bug Fixes

We’ve improved the clarity of decisions in SGNL Policy Lens
We now resolve User IDs to Display Name’s in the Logs in the SGNL Console
CAEP Hub now has improved support for Labels

1.109

Thu, 19 Dec 2024 00:00:01 +0800

Systems of Record

We added the option to import new configuration from System of Record Templates
We’ve added Advanced Filters for Service Now, to filter only members of specific groups, and their related nodes to SGNL

Administration

User Display Name is now available in SGNL Audit Logs

Improvements and Bug Fixes

We fixed a bug where a SGNL Client ID was showing in Data Lens

1.108

Thu, 12 Dec 2024 00:00:01 +0800

Systems of Record

We’ve improved the validation of configuration for Entra ID Advanced Filters

Policy

Policy Administrators are now able to Approve Policy Versions and have an audit trail with prior approvals

Improvements and Bug Fixes

We improved the clarity of a warning in Stream Configuration on Protected Systems

1.107

Thu, 05 Dec 2024 12:00:01 +0800

Systems of Record

You can now filter just members of specific Groups for Entra ID using advancedFilters

CAEP Hub

When configuring Supported Events in the CAEP Hub, you no longer need to first have a stream created

Administration

We now enable additional logging (e.g. Access Decisions, Ingestion Logs, Transform Logs, etc) to be returned in the SGNL Console

Improvements and Bug Fixes

We fixed a bug that made it difficult to compare number values in the simplified Snippet Builder

1.106

Tue, 26 Nov 2024 12:00:01 +0800

Policy

Region and Country Name are now available directly in SGNL Policy

Administration

SGNL Logs can now be streamed directly to S3 Buckets from SGNL Admin

Improvements and Bug Fixes

We fixed a bug that made it difficult to compare number values in the simplified snippet builder

1.105

Thu, 21 Nov 2024 12:00:01 +0800

Improvements and Bug Fixes

We’ve added a new capability to more gracefully handle access denials as part of our Effective Permissions API, look for updates and improvements in the SGNL Console over the coming weeks
We’ve fixed a bug that didn’t allow an empty body to be passed as part of a delete operation in CAEP Hub

1.104

Thu, 14 Nov 2024 12:00:01 +0800

Improvements and Bug Fixes

Enabled additional filter characters in Data Lens

1.103

Thu, 07 Nov 2024 12:00:01 +0800

Systems of Record

We’ve added RoleAssignment, RoleRequest, and GroupRequest entities to the Entra ID SoR

Improvements and Bug Fixes

Improved the experience modifying the schema for CAEP and RISC messages as Event Streams

1.102

Thu, 31 Oct 2024 12:00:01 +0800

Protected Systems

Provider Hooks now periodically refresh signing information from provided JWKS URLs

Improvements and Bug Fixes

Fixed a bug where you were required to update Authorization Code Flow details if changing configuration on the settings page

1.101

Thu, 24 Oct 2024 12:00:01 +0800

Systems of Record

Additional Logs have been added for Event Streams, simplifying auditing, investigation, and debugging
The AWS System of Record can now handle multiple AWS Accounts with a single System of Record instance

CAEP Hub

CAEP Hub Metrics and Insights are now available on the dashboard

Improvements and Bug Fixes

We’ve added an optimization to merge claims of the same name for Entra ID Provider Hooks

1.100

Thu, 17 Oct 2024 12:00:01 +0800

Protected Systems

Provider Hooks can now validate Entra ID tokens, enabling SGNL as a trusted Custom Claims Provider for Entra ID sign-in

Improvements and Bug Fixes

A bug affecting System of Record metrics for some customers has now been fixed

1.99

Thu, 10 Oct 2024 12:00:01 +0800

Protected Systems

We’ve improved the usability of the Google Cloud Platform Protected System in the Protected System Catalog, as well as improving our documentation for GCP

Systems of Record

ServiceNow has been enabled to support OAuth2 Authorization Code Flow, enabling the elimination of username and password for connectivity
We’ve improved how we filter Group Members sourced for Entra Id in order to improve synchronization performance
Crowdstrike as an SoR is now available from the System of Record Catalog
Major improvements to the way that Account Entitlements are synchronized into SGNL from Sailpoint IdentityNow have been made available to all Sailpoint customers

Improvements and Bug Fixes

DeviceID as a query parameter on the access service is now better supported across the SGNL product
Relationships across Systems of Record are now displayed more clearly in Relationships
Some Actions are now pre-populated with well-known values, we’ll continue to roll enhancements out across action targets over the coming weeks

1.98

Thu, 03 Oct 2024 12:00:01 +0800

CAEP Hub

Event Streams are now generally available, enabling SGNL to receive any Security Event Token (SET) for use in Actions, Policies, and Broadcasting
Templates for standards-based CAEP and RISC are available from the SGNL SoR Catalog, enabling you to add event transmitters directly into SGNL
Event Streams have been enabled to use one of Authentication (via a SGNL Auth Token), Token Signing Validation, or both

1.97

Thu, 26 Sep 2024 12:00:01 +0800

Administration

New Logs for Transformed requests and responses are now available

Improvements and Bug Fixes

We fixed an issue where templates exported from the console sometimes would not re-import list attributes

1.96

Thu, 19 Sep 2024 12:00:01 +0800

CAEP Hub

We’ve improved some of the look and feel of CAEP Hub Insights and Logs
We now provide better reporting on in-progress actions

1.95

Thu, 05 Sep 2024 12:00:01 +0800

Protected Systems

You can now choose different methods to augment tokens with Okta OIDC Transforms

Improvements and Bug Fixes

We fixed an issue with the OAuth2 Authorization Code Flow that would sometimes impact our ability to refresh an access token

1.94

Wed, 28 Aug 2024 12:00:01 +0800

CAEP Hub

New actions have been added for Salesforce
New actions have been added for Entra ID

Protected Systems

Okta OIDC Transforms are now available, enabling a Token Hook to talk directly to SGNL and have claims added based on the returned Search API Assets

Improvements and Bug Fixes

We fixed an issue with the configuration experience for Splunk Log Streams that would cause transmission of events to fail

1.93

Wed, 21 Aug 2024 12:00:01 +0800

Improvements and Bug Fixes

We improved the OAuth2 Authorization Code UI to make it more user friendly
We’ve fixed an issue where the CAEP Hub Insights metrics would sometimes show incorrect values

1.92

Wed, 14 Aug 2024 12:00:01 +0800

CAEP Hub

CAEP Hub Insights is now available, enabling visibility into the CAEP Hub Workflow
We’ve added a new action for Salesforce to revoke user sessions
We’ve added a new action for Slack to revoke user sessions
We’ve added a new action for Snowflake to revoke user sessions

Improvements and Bug Fixes

We fixed a bug in the OAuth2 Authorization Code Flow configuration, where attempting to patch the configuration would sometimes result in an error

1.91

Thu, 08 Aug 2024 12:00:01 +0800

Improvements and Bug Fixes

We’ve made some general improvements this week to better support some new functionality that’s just around the corner

1.90

Thu, 01 Aug 2024 12:00:01 +0800

CAEP Hub

CAEP Hub is now Generally Available, including more actions, better configurability, and more options to take action on activities that happen within your organization
We’ve improved validation of actions during configuration to provide more granular feedback on misconfigurations
We’ve added a path from Protected Systems to CAEP Hub, so you can more quickly get in and create new Rules or Triggers from the Protected System pages

1.89

Thu, 25 Jul 2024 12:00:01 +0800

Policy

You can now archive policies and snippets – simply head on over to the Settings page for the object you want to archive, scroll to the bottom and hit archive. If you need to unarchive a policy or snippet, simply select the filter on the details page to show Archived Policies or Snippets

Systems of Record

We now allow Path Relationships to be created across as many entities as needed, no longer limiting this to 2 entity relationships

1.88

Thu, 18 Jul 2024 12:00:01 +0800

Policy

We’ve rolled out a new capability called Access Reporting – here you can ask, and report on 2 important questions “Who can access this Asset (or set of Assets)” and “What can this principal access?”. We’re always looking for feedback so please reach out with questions and comments

Protected Systems

Protected Systems and Actions now support the OAuth2 Authorization Code Flow

1.87

Thu, 11 Jul 2024 12:00:01 +0800

Administration

Added support for multiple Log Streams per Client

Improvements and Bug Fixes

Fixed an issue where some Policy Lens requests would log access decisions in the Access logs

1.86

Wed, 03 Jul 2024 12:00:01 +0800

Protected Systems

Added support for precedence configuration in Transforms, enabling you to specify the resulting output of two values that may otherwise conflict in downstream systems

1.85

Thu, 27 Jun 2024 12:00:01 +0800

Protected Systems

We’ve made significant improvements to Transforms on Protected Systems – you’re now able to select multiple attributes and add them to the configuration for a response to calling systems like Okta

Administration

Added support for streaming SGNL Logs to Splunk

Improvements and Fixes

We fixed an issue where deleting an attribute from an entity caused an error when referenced in a snippet

1.84

Thu, 20 Jun 2024 12:00:01 +0800

Improvements and Bug Fixes

We’ve improved the accuracy of our IP Address to City evaluations during access requests

1.83

Thu, 13 Jun 2024 12:00:01 +0800

CAEP Hub

The current date and time can be evaluated as part of Triggers

Improvements and Bug Fixes

We improved the Okta Search API Transform on Protected System to de-duplicate matching claims and paths
The policy builder has been improved to flag when an update to a snippet is available

1.82

Thu, 06 Jun 2024 12:00:01 +0800

Systems of Record

We’ve extended our searching and filtering capabilities to Systems of Record
We’ve added minor improvements to the Active Directory System of Record

1.81

Thu, 30 May 2024 12:00:01 +0800

Protected Systems

We’ve simplified the selection of attributes for Transforms, just to those in the Assets that you have configured for the Protected System
The Okta Search Transform has been improved to deliver an optimized response to the Okta Inline Hook

CAEP Hub

The AWS Session Revoke action is now available

1.80

Thu, 23 May 2024 12:00:01 +0800

Policy Management

Unindexed attributes can now be used in the simplified snippet builder

CAEP Hub

New event logs for Rules, Actions, and Triggers have now been added to enhance visibility of CAEP Hub, as well as to diagnose and debug issues
Actions that have a missing or empty parameter will now continue to run, but will log an error in the CAEP Hub event log

Improvements and Bug Fixes

We’ve temporarily disabled the creation of path relationships containing more than 2 entity relationships

1.79

Thu, 16 May 2024 12:00:01 +0800

Systems of Record

Active Directory as an SoR is now available
Generic LDAP as an SoR is now available

1.78

Thu, 09 May 2024 12:00:01 +0800

CAEP Hub

Failing actions will now exponentially backoff their retries, until the downstream system successfully accepts the action

Improvements and Bug Fixes

Fixed an issue where Data Lens was not showing false values in the attribute viewer
Fixed an issue where Transforms couldn’t be modified after they were created
Improved the look and feel of simplified snippet builder and the CAEP Hub trigger builder

1.77

Thu, 02 May 2024 12:00:01 +0800

Policy Management

Policies can now be more easily sorted and filtered

Protected Systems

NameID is now included as a default option in Okta Search Transforms

Improvements and Bug Fixes

Improved the OpenID Connect setup experience
Improved Data Lens filtering
Where Systems of Record fail to ingest data consistently, we’ll know exponentially backoff retry attempts

1.76

Thu, 25 Apr 2024 12:00:01 +0800

Systems of Record

Bamboo HR is now available as a System of Record
Google Workspace is now available as a System of Record
Relationship attributes now have improved support for filtering

CAEP Hub

Actions for a given integration can now be viewed and reviewed in the Protected System’s Actions tab
Additional parameters for actions are now added dynamically when saving a Rule

Improvements and Bug Fixes

Improved the Okta Transform to use the same taxonomy as Okta’s documentation for SAML Inline Hooks

1.75

Thu, 18 Apr 2024 12:00:01 +0800

Systems of Record

Workday is now available in the SGNL Catalog as a System of Record

Policy Management

We’ve released an early access capability to better support searching, filtering, and sorting of Policy Snippets – we’d love your feedback as we look to roll out these new capabilities to more of SGNL

Protected Systems

SGNL can now take care of transforming requests from Okta Asset Search Requests without needing any extra components, you can enable this within the Protected System configuration
We’ve added a wealth of new Protected Systems and Actions that can be used in the SGNL CAEP Hub

Improvements and Bug Fixes

Fixed an issue where some SoR Bearer tokens were larger than the size we previously allowed

1.74

Thu, 11 Apr 2024 12:00:01 +0800

Systems of Record

Attributes can now be normalized to Lower Case, Upper Case, or by Removing Spaces for attributes being imported from Systems of Record

Protected Systems

SGNL can now take care of transforming requests from Sailpoint Access Requests without needing any extra components, you can enable this within the Protected System configuration

Improvements and Bug Fixes

Fixed an issue where some Snippets were not being correctly shown in the simplified Snippet Builder

1.73

Thu, 04 Apr 2024 12:00:01 +0800

Improvements and Bug Fixes

We’ve added more resilience to Data Lens to still show nodes even if expected fields or values are not found

1.72

Thu, 28 Mar 2024 12:00:01 +0800

Policy Management

An early access version of the simple Snippet Builder has been made available to all SGNL Clients, there are major changes planned for this builder, however this should help to further ease the creation of Snippets for SGNL Users in the interim
We’ve improved the look and feel of Policies and Snippets in Policy Lens, enabling simplified debugging and better visual clarity of features
We’ve added more validation in Policies and Snippets to better guide the creation experience

CAEP Hub

We’ve added optional parameters to Actions in CAEP Hub, enabling further customization of how you interact with systems in your enterprise, though SGNL

Improvements and Bug Fixes

We’ve improved sorting and filters in the product, with more to come in the future
We’ve addressed some bugs that resulted from incorrect configuration not being properly validated

1.71

Thu, 21 Mar 2024 12:00:01 +0800

Systems of Record

You’ll now be notified if your System of Record Catalogs have a newer version than you’re currently using, with the option to update on the fly
You can now directly export Systems of Record you’ve created manually into YAML format, so they can be reused as templates

1.70

Thu, 14 Mar 2024 12:00:01 +0800

Systems of Record

Relationships between objects can now have Display Names and Descriptions, enabling more flexibility in naming, as well as enabling the ability to modify Display Names without impact to Policies or Snippets
We’ve added GitHub as a System of Record, allowing GitHub Users, Teams, Repositories, and Organizations to flow into SGNL to be used as context in Policies

Data Lens

We’ve improved Data Lens so you can more easily understand the various systems that have contributed the objects in the graph

Bug Fixes

We fixed a bug that would sometimes cause an incorrect count of the types of entities in a System of Record

1.69

Thu, 07 Mar 2024 12:00:01 +0800

CAEP Hub

Rules can now be toggled in CAEP Hub
It’s now easier than ever to add attributes as parameters inside of actions

Policy Lens

Improved clarity and understandability of Policy Lens debugging when working with Deny policies

1.68

Thu, 29 Feb 2024 12:00:01 +0800

CAEP Hub

We’re thrilled to make the SGNL CAEP Hub available, enabling CAEP Event sending and receiving, as well as the transceiving and transform of CAEP events into proprietary events
You can now fire CAEP events or Custom Actions via changes in the SGNL Graph
Improved searching for entities in drop-down selectors in CAEP Hub and across the product

Bug Fixes

We’ve made some overall improvements that will streamline upcoming feature launches

1.67

Thu, 22 Feb 2024 12:00:01 +0800

Administration

Permission Sets for Users and Teams is now available, with scoping to specific resource with labels – you’re now able to more finely delegate access to SGNL across the users in your enterprise

Bug Fixes

We’ve made some overall improvements that will streamline upcoming feature launches

1.66

Thu, 15 Feb 2024 12:00:01 +0800

Systems of Record

Duo is now available as a System of Record

Bug Fixes

We’ve made some overall improvements that will streamline upcoming feature launches

1.65

Thu, 08 Feb 2024 12:00:01 +0800

Data Lens

All SGNL Users can now use Data Lens to gain a deep understanding into the Nodes and Relationships in the SGNL Graph

Bug Fixes

Fixed an issue that sometimes caused Entra ID SSO to fail
Fixed an issue that sometimes lead to incorrect metrics being shown on the dashboard for access denials

1.64

Thu, 01 Feb 2024 12:00:01 +0800

Policies

Users can now see all labels assigned to their policies in the Policy Assignment view without needing to filter based on a specific label

Logging

We have added the ability to filter logs by Request IDs, enabling users to narrow down to the exact log of interest

Bug Fixes

We have fixed an issue in the SGNL Console where attempting to add a new Custom Protected System would sometimes not work

1.63

Thu, 25 Jan 2024 12:00:01 +0800

Protected Systems

Policy Snippets assigned to Protected Systems are now better categorized by their scope

1.62

Thu, 18 Jan 2024 12:00:01 +0800

Policies

Users can now compare different Policy Versions in the SGNL Console. Go to Policies->Version History page and click on Compare Versions

1.61

Thu, 11 Jan 2024 12:00:01 +0800

Systems of Record

Users can now ingest ServiceNow ITSM entities, including Incidents, Change Requests, Change Tasks, Problems and CMDB Business Apps, into the SGNL graph

Data Lens

Users can now toggle the visibility of entities and their relationships in Data Lens by clicking on the entity name in the legend

1.60

Thu, 04 Jan 2024 12:00:01 +0800

Protected Systems

You can now easily view all the details of policies assigned to your protected system from the Protected Systems page in the SGNL Console

Bug Fixes

Fixed an issue with regex filter processing in Data Lens
Fixed an issue where CreatedBy and ModifiedBy data were not being shown for entities

1.59

Thu, 21 Dec 2023 12:00:01 +0800

Data Lens

Introducing a new capability in SGNL called Data Lens, providing the ability to investigate the SGNL Graph and gain visibility into the nodes, relationships, and the properties of the business context that has been synchronized into SGNL

Logs

You can now gain direct access to Policy Lens from the SGNL Logs, enabling the review of a given log-line to understand the policies and snippets that went into making a specific access decision
Log entries are now searchable with keywords

Protected Systems

You can now easily view and update the Policy and Snippet Versions that are assigned to Protected Systems, directly from your list of Protected Systems, enabling an easy way to identify old and out of date policies that are assigned to your systems

Bug Fixes

Fixed a bug where both additional logs were being generated when making a request to the Access Service Search API
Fixed a bug where Users were being incorrectly sorted in the SGNL Admin panel

1.58

Thu, 14 Dec 2023 12:00:01 +0800

Systems of Record

Users can now ingest Sailpoint IdentityNow entities, including Account, Entitlement, AccountEntitlement, and Identity, into the SGNL graph
In the SGNL Console, child entities are now grouped under their respective parent entities
Path relationships have been enhanced with more detail to help differentiate between similarly named paths

Policies

Hovering over a snippet in the Policy Version history will now display the version of the snippet in use

Bug Fixes

Fixed an issue where the “Create New Version” button on the Snippets page was duplicated for invalid snippets

1.57

Fri, 08 Dec 2023 12:00:01 +0800

Administration

SGNL administrators can now upload a custom icon for their Protected Systems. Icons must be in SVG format and not exceed 50KB.

Policies

Introducing a new feature to validate Policies. Access this by clicking “Validate Policies” under Policies.

Bug Fixes

Fixed an issue where a misconfigured Protected System could cause the Asset Search API to return a 500 Internal Server Error

1.56

Thu, 30 Nov 2023 12:00:01 +0800

Administration

SGNL administrators can now upload a custom icon for their tenant. Icons must be in SVG format and not exceed 50KB.

Policies

Introducing a new feature to validate Policy Snippets. Access this by clicking “Check Snippets Validity” under Snippets.

Systems of Record

Enhanced Visualizer now includes a Node Highlighter for better exploration of the SGNL graph schema.

1.55

Thu, 16 Nov 2023 13:00:01 +0800

Policies

We’ve made efficiency improvements for policy evaluation

Logging

We’ve improved logging performance for improved usability and speed

Bug Fixes

We’ve fixed an issue where relationships were not being efficiently pruned across Parent-Child relationships

1.54

Thu, 09 Nov 2023 13:00:01 +0800

Systems of Record

Support has been added for the creation of Parent relationships between two entities. Once a child entity is created, SGNL implicitly creates a Parent relationship in the SGNL graph between the parent and child entities. To utilize the implicitly created Parent relationship in a Path relationship or in Snippets for policy evaluation, a Parent relationship must be explicitly created through the SGNL console, or defined in the SoR template
The Visualizer has been updated to display parent relationships between parent and child entities

Protected Systems

The default policy configuration for Protected Systems has been changed to “Deny”
Policies assigned to protected systems can now be filtered by assigned labels

Logging

Ingestion and access logs are now displayed in separate tabs within the SGNL Console

Bug Fixes

An issue has been fixed in the SGNL console where the selection of authentication methods during configuration was not functioning for some SoRs

1.53

Fri, 03 Nov 2023 13:00:01 +0800

Systems of Record

SGNL Administrators can now add Systems of Record that support SCIM and synchronize Users, Groups, and Group Member objects as entities into the SGNL graph
SCIM Systems of Record can be extended with entities and attributes relevant to custom SCIM implementations

SGNL Console

We’ve made improvements to our Systems of Records Relationships page, improving the overall experience of managing relationships

Bug Fixes

Fixed an issue in the synchronization of objects connected via parent-child relationships
Fixed an issue in Catalogs where an erroneous template prevented the catalog from loading in the SGNL Console
Fixed an issue where some Systems of Record could not be modified in the SGNL Console

1.52

Thu, 26 Oct 2023 13:00:01 +0800

Bug Fixes

Fixed a bug where the search API returned blank results on the initial page
Fixed a bug preventing the establishment of parent-child relationships between an entity and its children
Addressed a problem in the Okta adapter where externally managed groups (APP_GROUP) weren’t being imported

1.51

Thu, 19 Oct 2023 13:00:01 +0800

Administration

Introducing Labels in SGNL! Administrators can now seamlessly create, manage, and assign labels to Systems of Records, Policies, Snippets, and Protected Systems, making organization and filtering even easier

Bug Fixes

Fixed a bug preventing the initiation of ingestion on consecutive CSV uploads

1.50

Mon, 16 Oct 2023 13:00:01 +0800

Access Service

The Search API can now answer ‘Who has access to this Asset?’, along with attributes about the principals returned

Bug Fixes

Resolved an issue with the default level of access given to the ‘Reader’ role

1.49

Thu, 05 Oct 2023 13:00:01 +0800

Systems of Record

Added support for ingestion of duration attributes in ISO 8601 format

Bug Fixes

Fixed an issue where the Search API was returning the unique attribute values as the asset ID, instead of the configured identifier
Fixed an issue where DateTime Fields in Jira were not being ingested properly

1.48

Fri, 29 Sep 2023 13:00:01 +0800

Systems of Record

Users can now ingest Azure Active Directory Device entities into the SGNL graph
Users will now be able to view the Systems of Record (SoR) sync status on the Systems of Record page

Bug Fixes

Resolved an issue where ingestion of a CSV for an entity with complex attributes was failing
Resolved an issue where Jira child entities were not being ingested properly into the SGNL graph

1.47

Thu, 21 Sep 2023 13:00:01 +0800

Bug Fixes

We have addressed several bugs and implemented minor improvements to enhance your SGNL experience

1.46

Thu, 21 Sep 2023 12:00:01 +0800

Systems of Record

Users can now add PagerDuty as a System of Record and synchronize Users, Teams, Incidents, Services, Schedules, and OnCall objects as entities into the SGNL graph
Users can now ingest Salesforce Groups into the SGNL graph
Users can now ingest Jira Workspace and Assets into the SGNL graph

Policy Lens

We have made debugging policies easier in Policy Lens - users can now compare policies assigned to a Protected System

Protected Systems

We have added support for AWS API Gateway and Auth0 as Protected Systems

Bug Fixes

We have addressed several bugs and implemented minor improvements to enhance your SGNL experience

1.45

Thu, 07 Sep 2023 12:00:01 +0800

Bug Fixes

Fixed an issue where SGNL was attempting to ingest data from Systems of Record with no configured adapters
We have addressed several other bugs and implemented minor improvements to enhance your SGNL experience

1.44

Fri, 01 Sep 2023 12:00:01 +0800

Systems of Record

We are excited to announce support for custom adapters. Users will now be able to create custom adapters for their Systems of Record from the SGNL Console and use those adapters to ingest data into the SGNL graph. SGNL already supports adapters for most well-known Systems of Record, such as Salesforce, ServiceNow, Azure Active Directory, Jira, Okta, and more.
We have added support for PagerDuty as a System of Record. Users will be able to ingest Users, Teams, Incidents, Services, and Schedules from their PagerDuty instance as entities into the SGNL graph and craft policies based on them.

Bug Fixes

We have addressed several bugs and implemented minor improvements to enhance your SGNL experience

1.43

Fri, 25 Aug 2023 12:00:01 +0800

Systems of Record

Added support for ingestion of Azure Active Directory Applications as entities into the SGNL graph

Policies

Policy version history has been updated to display the policy version author name and date of creation

Policy Lens

Users can now specify time as a query parameter in a Policy Lens request

Bug Fixes

Improvements and fixes for the SGNL Access Service and policy compilation
Minor fixes in the Snippet Builder

1.42

Thu, 17 Aug 2023 12:00:01 +0800

Access Service

We are thrilled to announce support for Configurable Decision Reasons. SGNL Administrators and System Owners can now specify a user-friendly reason for an access decision. Systems calling the Access API will receive these reasons along with the decision in the response.

Systems of Record

Users can now add Jira as a System of Record and synchronize Jira Users, Issues, and Groups into the SGNL graph

Bug Fixes

Added better validation of query field names in policy snippets
Fixed an issue that prevented catalog tag updates
Fixed an issue with sticky navigation in the UI

1.41

Thu, 10 Aug 2023 12:00:01 +0800

Policies

The SetTimezone operator in time-based condition snippets has been renamed to ToTimezone

Bug Fixes

Fixed an issue where we allowed a catalog to be created using an authentication method not supported by the git repository resulting in a non-functional catalog entry in the UI

1.40

Thu, 03 Aug 2023 12:00:01 +0800

Policies

We are excited to announce support for time-based policy snippets. With this release, users can define Date, Time and Duration based conditional snippets against which access requests can be evaluated. For example, users can define policies that allow access to an asset during specific times of the day, or for some duration. If you would like to learn more about this feature and start using it, please reach out to us at support@sgnl.ai

Systems of Record

The graph displayed in the Visualizer now includes relationships between entities belonging to different Systems of Record

Bug Fixes

Fixed an issue where path relationships were not being created properly during ingestion
Fixed an issue where a relationship update would not take effect until the next scheduled synchronization with the SoR

1.39

Wed, 26 Jul 2023 12:00:01 +0800

Systems of Record

We are thrilled to announce the redesign of SGNL Systems of Record (SoR)! This update brings a range of powerful features and enhancements to streamline SoR creation and management.

1.38

Fri, 21 Jul 2023 12:00:01 +0800

UI

We have made improvements to our Admin landing page and navigation which should improve the overall experience of using SGNL
We have added Teams to SGNL, enabling Administrators to group together similar sets of users for simplified administration and management

1.37

Thu, 13 Jul 2023 12:00:01 +0800

Bug Fixes

Improvements and fixes for the SGNL Access Service

1.36

Thu, 06 Jul 2023 12:00:01 +0800

Policies

We are excited to announce the addition of a simplified Snippet Builder. With this release, users can now create complex policy snippets with easy to use form fields. The simplified Snippet Builder is available for early-access preview. If you would like to learn more about this feature and start using it, please reach out to us at support@sgnl.ai.

UI

Fixed an issue where a displayed error message persisted on screen until tab refresh

1.35

Fri, 30 Jun 2023 12:00:01 +0800

Authentication

We’ve extended the active timeout for a console user

1.34

Thu, 22 Jun 2023 12:00:01 +0800

What’s new

We have a new set out of box Protected System integrations - learn more at https://help.sgnl.ai/articles/protected-systems/

1.33

Sat, 17 Jun 2023 12:00:01 +0800

Bug Fixes

Fixed an issue where testing SSO configuration in the console was returning a HTTP 500 Internal Service Error

1.32

Fri, 09 Jun 2023 12:00:01 +0800

What’s new

We’ve made some architectural enhancements that will improve the overall experience of using SGNL

1.31

Fri, 02 Jun 2023 12:00:01 +0800

Bug Fixes

Fixed an issue where some Azure AD group memberships were not being successfully evaluated during access evaluations, leading to access deny decisions

1.30

Fri, 02 Jun 2023 12:00:00 +0800

Bug Fixes

Fixed an issue where Salesforce entities were not matching against the access service in some situations
Fixed an issue where the jurisdiction ID was not showing up in the Admin -> Environment page

1.29

Thu, 18 May 2023 16:30:00 +0800

Bug Fixes

Fixed an issue where identifiers were not persisting during Policy Snippet creation
Fixed an issue where attributes may have been duplicated in the creation experience

1.28

Thu, 11 May 2023 16:30:00 +0800

Systems of Record

Datasources are now called Systems of Record, to better reflect their importance in policy decision making
SGNL now supports OAuth2 when integrating with Okta as a System of Record

Protected Systems

Integrations are now called Protected Systems, to better reflect the array of systems that can use SGNL for policy decisions

Policy Lens

Users can now specify IP address as a query parameter in a Policy Lens request

Bug Fixes

Fixed an issue where ingestion sync settings for a datasource were not being applied to its entities
Fixed an issue where some access checks were returning a 500 Internal Server Error for valid access requests

1.27

Thu, 04 May 2023 15:03:00 +0800

Access Service

It is now possible to resolve IP Addresses sent in Access Requests to Cities, Postal/Zip Codes, States/Regions, and Countries

Policies

Policy Snippets can now include conditions to evaluate whether a given principal is making a request from a specific location

Bug Fixes

Fixed an issue with ingestion of entities from datasources

1.26

Thu, 27 Apr 2023 15:00:00 +0800

Access Service

Support for validation of the page token sent by the user to the SGNL Search API
Similar to the Access API, the Policy Lens API now accepts principal IP address and principal device ID as parameters

1.25

Thu, 20 Apr 2023 15:00:00 +0800

Policies

A preview of the applied Policy Version can now be reviewed when investigating with Policy Lens
Previews of Policy Versions can now be reviewed in the version history of a Policy

Bug Fixes

Fixed an issue with ingestion of Okta entities where only the first page was being ingested

1.24

Thu, 13 Apr 2023 06:03:00 +0800

Policies

Access Analyzer is now called Policy Lens, providing deep understanding of the policies applied to integrations and enabling granular debugging
Policy Lens now provides visibility into individual snippets that were evaluated as part of the policies that were evaluated, enabling deep understanding of policy components

1.23

Thu, 06 Apr 2023 06:03:00 +0800

Policies

Support for validation of lists of objects in Snippets

1.22

Thu, 30 Mar 2023 06:04:00 +0800

Access Service

Support for the SGNL Search API [Learn More]

Bug Fixes

Fixed an issue with ingestion of ServiceNow entities across multiple pages

1.21

Thu, 30 Mar 2023 06:03:00 +0800

Data Sources

Support for Jira as a Data Source [Learn More]

Bug Fixes

Fixed an issue with ingestion of ServiceNow entities across multiple pages

1.20

Thu, 23 Mar 2023 06:03:00 +0800

Administration

Added support for deletion of more entity types in SGNL, including SGNL User entities and Relationships

1.19

Thu, 16 Mar 2023 06:03:00 +0800

Bug Fixes

Fixed an issue where an error was not properly returned when a PATCH was attempted against an invalid path

1.18

Fri, 10 Mar 2023 06:03:00 +0800

Policies

Enabled Snippets to be created and managed in the SGNL UI

Bug Fixes

Fixed an issue where the service would sometimes return 500 errors if the request to the service was badly formed

1.15

Fri, 03 Mar 2023 06:03:00 +0800

Bug Fixes

Fixed an issue where the same request to the Access Service multiple times may be treated differently

1.14

Tue, 28 Feb 2023 06:03:00 +0800

Bug Fixes

Improved validation in Policy Snippet Versions
Fixed an issue with metrics

1.13

Tue, 28 Feb 2023 06:02:00 +0800

Data Sources

Custom Relationships can now be named by a SGNL Administrator

Bug Fixes

Improvements to SGNL Metrics for Data Sources and Policy Evaluation

1.12

Mon, 27 Feb 2023 06:02:00 +0800

Data Sources

Optimized ingestion for large data sets from all Data Sources
Azure AD onPremisesSecurityIdentifier can now be used as an identifier in Integration Request Config

Access Service

API Documentation for the Access Service has been improved [Learn More]

1.11

Fri, 24 Feb 2023 06:02:00 +0800

Bug Fixes

Snippet creation would sometimes return a 500 error if the request was malformed, it will now provide guidance based on validation parameters

1.10

Wed, 22 Feb 2023 06:02:00 +0800

Access Service

Added EvaluationDuration to Access Service response, to inform evaluation time for a set of access queries

Administration

New look-and-feel for the SGNL Console sign-in page
Added more types of error logs
Improved the experience for creating Policies and Snippets

Policies

Enabled Policies to be copied into a new version from the latest

1.9

Thu, 16 Feb 2023 06:02:00 +0800

Data Sources

Improved Event Logs for Azure AD Group synchronization
Improved Curity User synchronization

1.8

Wed, 15 Feb 2023 06:02:00 +0800

Bug Fixes

A number of fixes to improve Azure AD synchronization performance

1.7

Mon, 13 Feb 2023 06:02:00 +0800

Data Sources

Added support for filtering Curity Users

1.6

Mon, 13 Feb 2023 06:01:00 +0800

Bug Fixes

Minor bug fixes to improve SGNL configuration

1.5

Fri, 10 Feb 2023 06:01:00 +0800

Administration

Enabled Just-In-Time creation of users when signing-in via OpenId Connect

Data Sources

Improved error messages in SGNL Event Logs when Data Source synchronization was not successful
Added support for filtering the Azure AD entities (Users and Groups) that flow into the SGNL Graph
Improved configuration experience for Okta and Azure API Management

Policies

Policy Snippets are now validated to ensure they can be evaluated prior to a new version being created

1.4

Sun, 05 Feb 2023 06:01:00 +0800

Bug Fixes

Fixed an issue where the ingestion of large payloads from Data Sources could cause synchronization to fail

1.3

Fri, 03 Feb 2023 06:01:00 +0800

Administration

Enabled Just-In-Time creation of users when signing-in via OpenId Connect

Data Sources

Specified a mandatory set of attributes for configuring any Data Source in SGNL
Sensitive data is now obfuscated after inactivity

Bug Fixes

Fixed an issue with metrics for Data Sources showing incorrect values
Fixed an issue where Azure API Management errors were not correctly interpreted

1.2

Wed, 01 Feb 2023 06:01:00 +0800

Administration

Improved the accuracy of metrics on the SGNL dashboard and across data sources/policies
Enabled a new PATCH method for SGNL’s config APIs, simplifying the modification of configuration in SGNL

Data Sources

Simplified Okta configuration, eliminating the need to prepend the token type during configuration
Enabled new ways to create relationships between Salesforce Users and other objects in the SGNL Graph

Policies

Reduced the number of fields necessary to create Policy Snippets

1.1

Fri, 27 Jan 2023 06:01:00 +0800

Administration

OpenId Connect SSO is now available for SGNL Production Clients [Learn More]

Data Sources

Azure API Management is now available as a Data Source, supporting Users, Groups, and Products to synchronize into SGNL [Learn More]
Curity is now available as a Data Source, supporting Users to synchronize into SGNL [Learn More]
ServiceNow Groups have been added as a target for synchronization into SGNL
Improved Data Source synchronization robustness and implemented several bug fixes
Updating Data Sources now support PATCH operations

Integrations

Integration request configuration has been improved to allow more flexibility in the required fields to evaluate access for an integration

Policies

Access Analyzer (soon to be Policy Lens) has launched, enabling granular troubleshooting of assigned Policies [Learn More]
Simulated Policies on integrations now accurately record matched log entries in Logging [Learn More]
Longer policy names are now supported

Logs and Metrics

Logging layout, fields, and filtering capabilities have been improved to enable better discovery of log entries
Metrics for Data Sources (e.g. entity count), Integrations (e.g. access checks), and Policies (e.g. evaluations) have been created and are now visible on the dashboard and in their respective pages

Access Service

Improved Access Service robustness and implemented several bug fixes

1.0

Mon, 19 Dec 2022 06:00:00 -0800

Administration

An administrative user is automatically provisioned during client onboarding, based on the parameters specified
Users can change user roles directly from the SGNL Console
Users can be managed via the SGNL APIs to Create, Update, and Delete Users, as well as to perform management tasks such as password and role maintenance
Two new roles exist within SGNL:
- Admin: Grants full access to the SGNL Platform
- Reader: Allows read access to non-administrative portions of the SGNL Console and APIs

Data Sources

Create connections to 4 key data sources via the SGNL Console and API, including:
- Azure Active Directory (Users and Groups)
- Okta (Users and Groups)
- Salesforce (Users and Customer Accounts)
- ServiceNow (Users, Customer Accounts, and Cases)
Customize the Display Name and Attributes of entities synchronizing to the Graph
Create join rules between entities from different systems of record to build a complete graph picture
Support for granular control of the synchronization interval of data sources and individual entities

Integrations

Integrations can now be created via the SGNL Console and API to represent applications and services that are protected by SGNL, with support for descriptive Display Names, Descriptions, and unique Integration Identifiers
Default Policy Decisions are now available on a per-integration basis, to configure the default behavior if no policies apply to a given request
Multiple Identifiers mappings now exist for Principals and Assets to link data in Access Requests to entities in the SGNL Graph
Multiple access tokens can now be generated for a given integration, each with unique display names and identifiers, enabling multiple tokens to be issued per integration
Versions of Policy can now be linked to an Integration in an Enforced mode, to impact the access decisions SGNL makes for a given integration
Version of Policy can now be linked to an integration in a Simulated mode, to audit and log the impact of the changes that will occur to access decisions from SGNL if a given policy is enforced on the integration

Policies

Policy Snippets can now be created via the Snippets API to scope Principals, Assets, Actions, and Conditions
Individual Policy Snippet Versions are now immutable, with new versions of a Policy Snippet able to be created for use in Policy Versions
Policy Snippets and Policy Snippet Versions now store metadata to understand when they were created
Policies can now be created from the SGNL Console and API and specified to either Allow or Deny access, based on a match on the policy criteria
Individual Policy Versions are now immutable, with each new version able to be used independently for Integrations in Simulated or Enforced mode
Policies and Policy Versions now contain creation metadata to audit management activities

Logs

SGNL now logs Access Decisions and Ingestion events in the SGNL logs
Logs can now be filtered by time range and type

Access Service

The Access Service now accepts Principal Identifiers, Asset Identifiers, and Actions as part of access requests
Enforced and Simulated policies are now evaluated as part of requests to the Access Service
The Access Service will now determine an Access Decision, based on assigned and matched policies on the integration, or a default decision if only Simulated policies are assigned, or if no Policies match the request