Account Manager

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

DigiCert enforced two-factor authentication (2FA) for all accounts starting November 1, 2023. Previously, when using Single Sign-On (SSO) with OpenID Connect (OIDC), you were required to provide a one-time passcode (OTP) to DigiCert, even if you had already provided one to your Identity Provider (IDP).With this release, DigiCert has updated its behavior based on the SSO protocol:

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

We introduced a View RIV evidence permission. This permission is only included in the new RIV Access Officer user role. This user role enables users to review RIV evidence and download identity documents.

We made changes to the following user roles:

CA Services

Device Trust Manager

Added the View app health permission to System admin and Read-only user roles

Trust Lifecycle Manager

Added the View profile permission to the User and Certificate Manager role.

We resolved an issue where some Device Trust Manager user roles were not displaying correctly in Account Manager. These roles are now visible and functioning as expected.

We updated the following Trust Lifecycle Manager user roles:

We have updated the get_user API to enhance its functionality:

We resolved an issue that prevented End users from being deleted in Account Manager. End users can now be deleted successfully, provided the user performing the action has the necessary permissions.

We fixed an issue where users retained roles for features that their account was no longer licensed to use. With this fix, user roles associated with unlicensed features are now automatically removed.

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

We have introduced a new user role for CA services called Hosted OCSP, this role enables users to manage all functions to support a hosted OCSP environment.

Two new permissions are now available for IoT Trust Manager:

These permissions are not assigned to any default IoT Trust Manager roles but can be selected when creating a custom role, giving administrators greater flexibility in defining access for specific tasks.

The DigiCert® Account Manager audit logs now capture the client IP address for each event. To view this information, add the optional Client IP column to your audit logs for enhanced tracking and security insights.

We have resolved an issue that caused an error message: User does not have access to {0} role. This error occurred when editing an End User’s roles. User role edits now function as expected without errors.

On the Users page in Account Manager, removing all status filters now correctly displays users in all statuses. Previously, only Active and Pending users were shown by default, excluding Locked and Deleted users. This issue has been resolved, so all user statuses appear as expected when no filter is applied.

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

Users who sign in using SSO via OIDC can no longer edit their first name, last name, email address, or OIDC SSO username from Account Manager. These details are now solely managed in your Identity Provider (IDP). This change ensures consistency between the IDP and Digicert ONE.

In alignment with the SAML specification, signing a SAML response is optional. DigiCert ONE previously required both the SAML assertion and response to be signed for enhanced security. To improve compatibility with Identity Providers (IDPs) that do not support signing both the assertion and response, the mandatory check for a signed SAML response has been removed. This update ensures broader IDP compatibility while maintaining robust security through the signed assertion.

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

We have introduced a new user type called End user. The Access scope column on the user list page now shows whether a user has account access, system access, or end user access. End users have limited visibility within an account and can only view resources assigned to them. Additionally, End users can only be associated with a single account.

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

We identified an issue affecting users with a different default language than their account. These users were repeatedly shown a language confirmation prompt when they updated their user details. This issue has been fixed, and the language confirmation no longer appears when editing their user details.

We fixed an issue where the flag representing the country code was not displaying correctly when creating a user. The flag image now appears as expected.

We identified an issue where the DigiCert logo was not displaying as the favicon in browser tabs. This has been fixed, and the DigiCert logo now correctly appears as the favicon.

We created a new permission called View CA Hierarchy. This permission allows users to view CA hierarchies in their accounts. This permission has been added to the following CA Manager user roles:

Existing users with these user role will automatically inherit this new permission.

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

We added the following permissions to the CA Operations, system user role:

Existing users with this user role will automatically inherit the new permissions.

We added the following permissions to the Document Trust Manager user roles:

Existing users with these user roles will automatically inherit the new permissions.

We added the View release permissions to the following Software Trust Manager user roles:

Existing users with these user roles will automatically inherit the new permissions.

We addressed a customer complaint regarding the path to a flag image in the update user details workflow. Although the image was verified to be safe, we have now replaced the country flag component, and the image is now hosted on a secure CDN.

As part of ongoing improvements to Account Manager and the DigiCert ONE platform, we have made minor improvements and bug fixes to limit errors, improve usability, and security.

We are released a new feature that allows your Identity Provider (IdP) to supply custom attributes to DigiCert ONE. This enhancement enables DigiCert ONE to assign user roles more efficiently when creating users via Single Sign-On (SSO), streamlining user management within your account. These attributes can be viewed on the user details page, provided that the attributes are present for the user.

We have added two new permissions for Trust Lifecycle Manager. These permissions are now available for selection when creating custom roles and have been added to the following existing user roles:

Users who already have these roles will automatically inherit the new permissions.

Ongoing efforts to improve usability and security of DigiCert One Account Manager. Our goal is to improve user experience while also improving the security of the platform.

We have also updated and added some new and existing permissions and roles for the CA service users.

Ongoing efforts to fix bugs. Our goal is to improve the reliability of the platform.

Ongoing efforts to improve usability and security of DigiCert One Account Manager. Our goal is to improve user experience while also improving the security of the platform.

Ongoing efforts to fix bugs. Our goal is to improve the reliability of the platform.

Ongoing efforts to improve usability and security of DigiCert One Account Manager. Our goal is to improve user experience while also improving the security of the platform.

Ongoing efforts to fix bugs. Our goal is to improve the reliability of the platform.

We introduced a new 'Account Manager' user role, for users responsible for handling account settings and user management tasks.

We implemented the capability for multiple accounts to share the same name, facilitating seamless integration across all DigiCert Systems.

We fixed minor bugs to improve the stability and performance of Account Manager.

Ongoing efforts to improve usability and security of DigiCert One Account Manager. Our goal is to improve user experience while also improving the security of the platform.

Ongoing efforts to fix bugs. Our goal is to improve the reliability of the platform.

On going efforts to fix bugs and improve usability of DigiCert One Account Manager. Our goal is to improve user experience while also improving the reliability of the platform.

Minor bug fixes

Added a new feature flag to enable Service Now for Trust Lifecycle Manager users at the account level.

Released a new permission for CA Manager that allows users to recertify CA.

We fixed an issue where users saw a blank page when clicking an enrollment link while setting up their accounts.

We fixed an issue where users with specific licensing configurations were unable to view or make edits to their user details on their profile page.

We are removing the third-party basic authentication tool and replacing it with an internal tool. This transition will be seamless, requiring no action from users.