Version 1.28.0 – Improved authentication, compact mode, and number separators

In this version, we have expanded the capabilities of the authorization module: we added support for simultaneous use of multiple authentication services, updated the system behavior algorithm when entering credentials to make it more secure, and introduced password complexity policies and attempt limits. We also implemented a new authentication widget that supports this functionality.

Additionally, we improved the readability and accessibility of information by:

  • Adding a compact view mode for forms, which displays more information on the page and reduces the need to scroll down.
  • Adding digit group separators for numeric values, with customizable formats for each language.
  • Updating the employee profile view on the self-service portal.

An important enhancement for platform service users in this version is the ability to use the VIP flag for the Requester record in reports.

The update also includes various system improvements and fixes aimed at enhancing security and refining overall system logic.

New Functionality

Digit Group Separators in Fields, Simple Tags, and Activity Feed

In this version of the platform, we optimized the display of large integer and decimal numbers for improved readability. We implemented multiple options for digit and decimal separators, which are also taken into account by the system when configuring condition builders and displaying values in the activity feed.

Separator display is enabled via the new system property simple.number.enable_grouping_separator. You can configure different display formats for each interface language. By default: Russian uses 1 000,25, and English uses 1,000.25. You can also configure a space as the digit separator in language settings, resulting in numeric values displayed as 1 000,25 or 1 000.25.

Additionally, the Simple tag string now includes the enableGroupingSeparator attribute, which allows enabling or disabling the display of digit separators added within text fields inside Simple tags. This attribute’s value takes precedence over the system property.

Digit separators are not applied to certain column types, including sys_id columns.

Read more Other Properties

Compact View Mode for Records

We have added an option to display all fields compactly on a single page. You can switch to Compact view mode via the Settings menu. In this mode, all form field headers and spacing are reduced, allowing more information to be displayed on the page than usual.

Read more Forms

Authentication via Third-Party SSO Providers

In this version, we added support for simultaneous use of multiple authentication providers. Users can now choose their preferred authentication method: either basic authentication or a connected third-party provider. To enable this, the system now includes:

  • The SSO Providers (sso_provider) table, which allows creating provider records for system authentication and configuring their display on the authentication widget form.
  • An updated authentication widget, which displays buttons for convenient user authentication. The number and appearance of buttons can be customized.

Read more SSO Providers

Password Policy Configuration

Authentication settings in this version have become more flexible: you can now configure the maximum number of consecutive authentication attempts allowed within a specified time period, as well as the lockout duration after exceeding the allowed number of attempts.

Read more Password Reset Settings

New SimpleSystem Server API Class

In platform version 1.28.0, we continued enhancing system security by introducing the new SimpleSystem server API class. When using this class, the system verifies whether the current user has the admin role.

Read more SimpleSystem

Full update release notes with fixes

Good day.

How can I find details about this enhancement?
The SimpleSystem class has long existed in the platform.

Good afternoon!

It’s truly strange to see mentions of the new class SimpleSystem. Will there be any comment from the developers?

Also, this is unclear:

Does this mean, for example, that only an admin can now execute ss.getUserID()?

By the way, the documentation says nothing about any special significance of the admin role for this class.