Release 5.6

February 2020

Smart Credential Provisioning Improvements

• IntelliTrust now supports the ability to automatically provision a Smart Credential for new users when they are added to IntelliTrust. This is supported for users added through the Administrator Portal, Active Directory Sync, or Bulk Import.

• The User Portal Registration settings have been enhanced to allow users to add a Smart Credential authenticator to their account. Previously only Administrators could provision a Smart Credential for a user.

IdentityGuard Migration Support for User Creation

The IdentityGuard User Migration has been enhanced to create users if they do not exist in IntelliTrust. The following IntelliTrust user attributes will be populated from Entrust IdentityGuard's user and contact information attributes:

• User ID
• First Name
• Last Name
• Mobile Number
• Phone Number
• Email
• Groups
• User Alias

Entrust IdentityGuard Mobile App - Custom Logo Support

The Entrust IdentityGuard Mobile App (Android, iOS) will now display the logo from your IntelliTrust account.

Note: The IntelliTrust logo will only be displayed when registering a new Entrust Soft Token. Existing Entrust Soft Tokens will continue to display the existing logo.

IntelliTrust ForgeRock Integration

A new application template has been added for a native IntelliTrust ForgeRock integration. Use this application template to quickly configure ForgeRock for IntelliTrust authentication.

Password Change Support for RADIUS Applications

When authenticating to a RADIUS application using your password, the end user will now be prompted to change their existing password if it has expired or has been set to require change.

RADIUS Response Attributes

A RADIUS application can be configured so that the RADIUS response returned to the VPN server includes additional attributes, including information such as the user's group membership.

Identity Proofing

IntelliTrust now provides APIs that can be used to validate the identity of a person using a government-issued identity document, such as a driver's license or a passport.

Active Directory Sync Fixes

In prior versions of IntelliTrust, Super Administrator user accounts could be disabled or deleted by the Directory Desynchronization Policy. This has been fixed so that Super Administrator accounts will not be deleted or have their state changed regardless of the Directory Desynchronization Policy.

Swedish and Danish Locales

The IntelliTrust User Portal now has support for the Swedish and Danish languages.

Office 365 Support for Multi-Domain Federation

The Office 365 SAML application has been enhanced to support federating with multiple domains.

This option is also available in the Generic SAML Application template.