PlainID Platform - January 2025 Release

DATE: January 5, 2025

AUTHOR: PlainID Product Team

The January 2025 release of the Platform includes new features, product enhancements, and bug fixes.

Access File Authorizer

The PlainID Access File Authorizer supports bulk Authorization calculations and generates access files with PBAC-based Authorizations for a population of subjects. These access files are ideal for offline integrations, legacy systems, admin-time provisioning use cases, and reporting needs like Policy Audits.

JSON Filtering Authorizer

This Authorizer enables JSON data masking based on PDP calculations. It dynamically filters data at the API gateway level, ensuring only authorized JSON data is returned, making it ideal for data services unable to use query modification or filtering.

Google BigQuery Authorizer

The Google BigQuery Authorizer now supports passing headers to the PDP request, enabling alternative authentication with Authorization Header JWTs and supporting additional use cases, such as passing external request IDs.

Power BI Authorizer

The Power BI Authorizer now allows control over which Policies are discoverable and manageable based on Workspaces or Datasets, supporting separation of duties and managing multiple Policy Orchestration Points (POPs) within the same Environment using the same service user.

Management APIs

Two new sets of Management APIs have been released:

Identity Templates: Enable CRUD operations for Identity Templates, which support CI/CD integration, automate identity-related tasks, and streamline object migration between Environments, reducing manual effort.

API Mappers: Allow users to manage API Mappers as code, providing clear visibility into Mappers and their Attribute-Action mappings. Users can store mapper data in code repositories, manage changes, and track updates via version control, integrating seamlessly with CI/CD for consistent operations.

Calculated Attributes

The new Calculation Functions for Identity Template Attributes enable powerful customization by allowing users to define Attribute values dynamically. This feature significantly enhances flexibility in how Attributes are assigned, empowering users to create more complex and tailored Policy logic to meet diverse business requirements.

API Mappers Regex Support

PlainID now supports Regular Expressions (Regex) in API Matchers and Mappers, enabling API pattern matching and extracting Attributes and Actions from the API request URI based on Regex patterns.

Identity Templates Matching Support

Identity Templates now support flexible matching methods, including Wildcard and Regex matching, in addition to exact matching, enabling more flexible selection of Identity Templates for PDP evaluations.

POP Details Represented in Policy as Code: Structured Rego Policies now include POP details, streamlining CRUD Policy operations.
Customizable Identity Attribute Names: Identity Attribute names can now be customized during the Discovery Process, aligning with organizational requirements.

Policy Simulator

The Policy Simulator introduces a new Policy List report, allowing users to investigate Identity or Asset details and access or restrictive Policies. This feature enhances scenario analysis and supports efficient Policy certification.

JWKS URL Deprecation in the PAA

The JWKS configuration at the PAA level has been removed, and JWKS settings are now exclusively managed at the Scope level, in line with the two-phase deprecation process announced in our January 2024 Release Notes.

Policy Authorization Agent (PAA)

This release includes security enhancements for the PAA.

For upgrade instructions, refer to the Admin Portal at https://docs.plainid.io

See our Technical Release Notes for more feature details.

We're happy to hear about your experiences with these new features and look forward to hearing more about what you want to see in the Platform.
For more information, visit the PlainID Documentation Portal.