New Capabilities

Bravura Security Fabric 12.7 and Connector Pack 4.6 | Summer 2024

Discover new capabilities in this update from Bravura Security to strengthen your infrastructure and elevate user satisfaction. For a detailed exploration of all the new features and their advantages, refer to the release notes and full documentation available on the Bravura Security Fabric and Connector Pack release pages. 

Connector Pack 4.6

We've updated our Connectors Ecosystem to better serve your needs. Connectors are now designated as either "Verified" or "Non-Verified" by Bravura Security which identifies whether a connector is tested with each release.  

Verified Connectors have been regression tested as part of our software development lifecycle and are made available in each release of the connector pack. These connectors satisfy specific criteria: we have access to their documentation, environments for regression testing, and the most recent software versions. When a connector meets all these conditions, we designate it as Verified by Bravura Security.  

Non-verified Connectors cannot be regression tested as part of our software development lifecycle and are made available through alternative distribution instead of with each release of the connector pack.  

Due to limitations such as the lack of accessible documentation or regression testing environments the support we can offer for non-verified connectors is more limited. Validating these connectors needs to be carried out within the customer's own environment, and there may be delays in supporting the latest features and innovations. It is important to note that being non-verified does not reflect a connector's quality. Many non-verified connectors are high quality and use stable enterprise APIs.  

Over time, the verification status of connectors may change; some may shift from verified to unverified, for instance, if third-party providers limit access to their documentation or software development kits (SDKs). Conversely, connectors may transition from non-verified to verified if they start offering affordable cloud-based testing environments that can be utilized. Connectors may no longer be suitable for use because the APIs they rely on have been phased out by third parties, or the software has reached the end of its life and is no longer maintained by its provider. We will provide updates on connector status changes during each release cycle.  

For more detailed information, please visit our documentation. 

Bravura Security Fabric

Introducing Bravura Pass Plus 

Redefine password management and instant breach protection for your organization with the new Bravura Pass Plus. The advanced password management solution tailored for IAM professionals introduces an empowering user and administrator password management experience that amplifies security and reduces the time it takes to resecure all organizational passwords to minutes. 

Bravura Pass Plus revolutionizes the way users gain entry by offering a system that eliminates the necessity for passwords and smoothly becomes a part of their everyday routine. Instead of having to recall intricate passwords, it automates the issuance of credentials that adhere to set policies and are sent straight to secure user vaults, ready for immediate login. This method not only makes signing in easier but also enhances security for the user by avoiding account blockages and lessening the dependency on unsecured shortcuts, thereby guaranteeing steady workflow and access when needed. 

For administrators, Bravura Pass Plus is a game-changer. One-click resecuring automates password lifecycle management to not only adhere to the stringent policies expected in enterprise environments but also adapts in real-time to emerging threats, allowing for immediate, organization-wide re-securing in the event of a breach. This proactive approach eliminates the traditional risks associated with manual password resets, vastly expedites time to recovery, reduces the attack surface, and maintains operational resilience. 

The sophisticated Password Health Dashboard means administrators can monitor the security of all passwords, including service accounts, across the organization. Robust analytics empower administrators to preemptively address password vulnerabilities to reinforce the organization's security posture and maintain analytics-driven compliance. 

Deep integration capabilities mean Bravura Pass Plus seamlessly meshes with third-party identity providers, ensuring a unified IAM strategy. By minimizing password-related help desk tickets, the solution also translates into significant cost savings, empowering IAM teams to allocate their resources towards strategic security initiatives that drive the organization forward. 

REST API Expansion 

Being able to easily target the applications critical to your organization's operations is of paramount importance. Once you have integrated the first 50 applications, we want to ensure you have the tools to easily integrate the next 500 to expand the reach of identity automation into the systems and applications within your organization. For this reason, we have prioritized adding REST APIs that allow you to create, update, and remove target systems and to run discovery.  

In keeping up our strategy of ensuring that fine-grained access controls exist on all end points; you can specify what target systems can be managed by which group of administrators and allow delegation to line of business owners. For example, let's say you have a line of business that manages a large set of database servers with consistent configurations. When these servers are created or removed, they can be added to the Bravura Security Fabric instance by DevOps automation.  

New DMZ and Disconnected Persistent Discovery Support 

You can now enjoy uninterrupted real-time monitoring of identity states on Active Directory and other LDAPs within your DMZs and other isolated network segments, all without the hassle of complex inbound proxy setups. This means you get immediate insights into the activities and changes within your secure environments, enhancing your security posture and operational awareness. 

Leverage our WebSocket-based Connector Proxy to track user, group, and membership changes as they happen, using trusted network practices. This capability is crucial for laying a robust foundation for your password and identity automation strategies, ensuring that security and convenience go hand in hand. 

As soon as you create an account, it's ready to be integrated into your password and identity management workflows with Bravura Pass Plus and Bravura Privilege. You gain the ability to enforce policy compliance instantly and make informed decisions about the identity lifecycle—such as identifying and removing unauthorized accounts—right from the outset. 

Enhanced Self-Service Password Management for Functional and Service Accounts 

Responding to valuable customer feedback, we've refined the user interface of the Bravura Pass self-service password reset feature, particularly for custodians of large volumes of service and functional accounts. The selection process for synchronized password updates has been clarified, ensuring a more intuitive and time-saving experience. With these user-centric enhancements, Bravura Pass simplifies your password management process, making it quicker and more efficient. 

New Role Designer App 

For organizations to achieve scalable identity automation, it's essential to have a robust system for provisioning and deprovisioning access based on roles and affiliations. Bravura Security now offers a sophisticated role designer that enables you to clearly define business and application roles. This tool allows you to specify the exact entitlement combinations required for various user scenarios. For customers already familiar with our existing Group app, this new Roles app empowers IAM administrators to efficiently manage access levels by delegating certain decisions to the individuals who understand the users' needs best—business owners and application administrators. This delegation streamlines the process and ensures that access is granted appropriately. 

Stakeholders can create, modify, and remove roles with ease. Ownership of these roles can be delegated to additional stakeholders. For instance, Entra ID (Azure AD) application owners can now manage the creation of privileged, user, and application roles necessary for controlling access within the organization. This level of delegation is crucial to prevent Identity Administrators from becoming a bottleneck, thereby unlocking the full potential of automation and realizing significant cost savings for your organization. 

ReCAPTCHA V3 Authentication Support 

Newly added components for ReCAPTCHA V3 support improves attack resilience by utilizing advanced machine learning algorithms to silently evaluate user interactions for signs of automated bot activity, thereby offering robust protection without disrupting the user experience with traditional CAPTCHA challenges. This integration allows for a frictionless login process for legitimate users while providing website owners with actionable insights on traffic and security threats.

End of Support Notice for Version 12.2  

Support for version 12.2 and its associated Service Level Agreement has been concluded. Ongoing support will continue to be provided on a best-effort basis, although development support may no longer be available. It is important to regularly review the support end dates for your software to ensure you remain eligible for full assistance and updates. Check your version here.  

  Start Your Upgrade Today! Contact your Account Manager to get started or learn more about upgrades and support for older releases.