CAEP Hub

• We made additional improvements to relationship handling within CAEP Hub Triggers

CAEP Hub

• Enhanced relationship handling in CAEP Hub Triggers to properly process parent/child relationships

Administration

• Added additional capabilities into the SGNL Support Panel

Improvements and Bug Fixes

• Fixed CSV template examples for improved clarity
• Resolved issues with condition deletion and type handling in Snippet Builder
• Improved handling of location-based snippets
• Fixed device ID handling in Policy Lens

Policy

• Added Device ID field support to Policy Lens and Snippet Builder to simplify creation and introspection of Policies using Devices

Protected Systems

• Enhanced Access Policy evaluation with improved logging

Improvements and Bug Fixes

• Improved action testing functionality with better handling of non-JSON response bodies

CAEP Hub

• Added testing capabilities for CAEP Hub Actions to validate and test configuration

Policy

• Enhanced snippet builder interface with sorted attributes and entity selectors for improved usability

Systems of Record

• Released support for the MySQL System of Record, enabling connectivity to SQL databases

CAEP Hub

• Enhanced dashboard metrics for action and rule usage
• Improved relationship validation during snippet creation for more reliable rule development

Protected Systems

• Added principal ID validation in the Policy Lens to simplify debugging

Systems of Record

• Enhanced CrowdStrike integration with improved filtering capabilities for REST objects

CAEP Hub

• Added per-rule metrics in the CAEP Hub for more granular monitoring and analysis

Policy

• Expanded relationship attribute selection options for more flexible policy creation in the simplified snippet builder

Protected Systems

• Enhanced Policy Lens interface with a new option to explicitly indicate no Asset ID value

Improvements and Bug Fixes

• Fixed an issue where relationship attributes were being incorrectly filtered in selections

Protected Systems

• Added support for filtering Assets that can be returned by the Search and Access API on the Protected System Request Config

Administration

• Enhanced Access Evaluation logging with duration metrics for better performance monitoring

Improvements and Bug Fixes

• Fixed CSV template handling to properly use externalId instead of the Display Name attribute
• Resolved an issue where Path relationships would sometimes not be shown when creating a CAEP Hub Trigger

CAEP Hub

• Added support for managing AWS IAM group memberships through SGNL Actions

Systems of Record

• Added support for CrowdStrike Endpoint Protection entities including Devices, Endpoint Incidents, and Detections

Improvements and Bug Fixes

• We fixed an issue in SGNL Reports that prevented reports loading if access to Policies was restricted

CAEP Hub

• Enhanced filtering capabilities for CAEP rules and rule snippets to improve search and organization
• Updated CAEP Action interface for improved usability and clarity
• Added support for GCP Workforce Identity Actions

Protected Systems

• Improved Access API decision logs for better auditing and troubleshooting

CAEP Hub

• Enhanced CAEP Hub Insights with a default 24-hour view period for better monitoring
• Combined CAEP Hub Action and Policy cards into a unified view on the dashboard to simplify visibility at a glance

CAEP Hub

• We’ve extended support for Action Parameters beyond string types, to DateTime, Integer, and more sorts of values
• New Retry Logic has been added for Actions in order to define how many times per execution they need to be retried, and whether to re-run or stop on failure
• Creating Shared Signals Framework integrations with Okta are now easier, with address pre-population by default

Improvements and Bug Fixes

• We’ve improved the clarity of decisions in SGNL Policy Lens
• We now resolve User IDs to Display Name’s in the Logs in the SGNL Console
• CAEP Hub now has improved support for Labels

Systems of Record

• We added the option to import new configuration from System of Record Templates
• We’ve added Advanced Filters for Service Now, to filter only members of specific groups, and their related nodes to SGNL

Administration

• User Display Name is now available in SGNL Audit Logs

Improvements and Bug Fixes

• We fixed a bug where a SGNL Client ID was showing in Data Lens

Systems of Record

• We’ve improved the validation of configuration for Entra ID Advanced Filters

Policy

• Policy Administrators are now able to Approve Policy Versions and have an audit trail with prior approvals

Improvements and Bug Fixes

• We improved the clarity of a warning in Stream Configuration on Protected Systems

Systems of Record

• You can now filter just members of specific Groups for Entra ID using advancedFilters

CAEP Hub

• When configuring Supported Events in the CAEP Hub, you no longer need to first have a stream created

Administration

• We now enable additional logging (e.g. Access Decisions, Ingestion Logs, Transform Logs, etc) to be returned in the SGNL Console

Improvements and Bug Fixes

• We fixed a bug that made it difficult to compare number values in the simplified Snippet Builder

Policy

• Region and Country Name are now available directly in SGNL Policy

Administration

• SGNL Logs can now be streamed directly to S3 Buckets from SGNL Admin

Improvements and Bug Fixes

• We fixed a bug that made it difficult to compare number values in the simplified snippet builder

Improvements and Bug Fixes

• We’ve added a new capability to more gracefully handle access denials as part of our Effective Permissions API, look for updates and improvements in the SGNL Console over the coming weeks
• We’ve fixed a bug that didn’t allow an empty body to be passed as part of a delete operation in CAEP Hub

Improvements and Bug Fixes

• Enabled additional filter characters in Data Lens

Systems of Record

• We’ve added RoleAssignment, RoleRequest, and GroupRequest entities to the Entra ID SoR

Improvements and Bug Fixes

• Improved the experience modifying the schema for CAEP and RISC messages as Event Streams

Protected Systems

• Provider Hooks now periodically refresh signing information from provided JWKS URLs

Improvements and Bug Fixes

• Fixed a bug where you were required to update Authorization Code Flow details if changing configuration on the settings page

Systems of Record

• Additional Logs have been added for Event Streams, simplifying auditing, investigation, and debugging
• The AWS System of Record can now handle multiple AWS Accounts with a single System of Record instance

CAEP Hub

• CAEP Hub Metrics and Insights are now available on the dashboard

Improvements and Bug Fixes

• We’ve added an optimization to merge claims of the same name for Entra ID Provider Hooks

Protected Systems

• Provider Hooks can now validate Entra ID tokens, enabling SGNL as a trusted Custom Claims Provider for Entra ID sign-in

Improvements and Bug Fixes

• A bug affecting System of Record metrics for some customers has now been fixed

Protected Systems

• We’ve improved the usability of the Google Cloud Platform Protected System in the Protected System Catalog, as well as improving our documentation for GCP

Systems of Record

• ServiceNow has been enabled to support OAuth2 Authorization Code Flow, enabling the elimination of username and password for connectivity
• We’ve improved how we filter Group Members sourced for Entra Id in order to improve synchronization performance
• Crowdstrike as an SoR is now available from the System of Record Catalog
• Major improvements to the way that Account Entitlements are synchronized into SGNL from Sailpoint IdentityNow have been made available to all Sailpoint customers

Improvements and Bug Fixes

• DeviceID as a query parameter on the access service is now better supported across the SGNL product
• Relationships across Systems of Record are now displayed more clearly in Relationships
• Some Actions are now pre-populated with well-known values, we’ll continue to roll enhancements out across action targets over the coming weeks

CAEP Hub

• Event Streams are now generally available, enabling SGNL to receive any Security Event Token (SET) for use in Actions, Policies, and Broadcasting
• Templates for standards-based CAEP and RISC are available from the SGNL SoR Catalog, enabling you to add event transmitters directly into SGNL
• Event Streams have been enabled to use one of Authentication (via a SGNL Auth Token), Token Signing Validation, or both

Administration

• New Logs for Transformed requests and responses are now available

Improvements and Bug Fixes

• We fixed an issue where templates exported from the console sometimes would not re-import list attributes

CAEP Hub

• We’ve improved some of the look and feel of CAEP Hub Insights and Logs
• We now provide better reporting on in-progress actions

Protected Systems

• You can now choose different methods to augment tokens with Okta OIDC Transforms

Improvements and Bug Fixes

• We fixed an issue with the OAuth2 Authorization Code Flow that would sometimes impact our ability to refresh an access token