Published Release Notes

Add subspaces within spaces

You can now create subspaces within spaces. By adding a subspace, you can collaborate on a subtopic that is related to the topic of the parent space. For example, you can create an Annual Day subspace within the Events space.

For more information, see Creating a subspace.

All search data is encrypted

All search data in Pega Cloud deployments is now encrypted, both at rest and in transit. The encryption of search data makes search compliant with regulatory requirements.

For more information about search, see Full-text search.

Improve clipboard performance for Service REST

Improve clipboard performance in Service REST processing by using the new Lightweight clipboard mode option. This mode does not support all clipboard features.

For a list of supported and unsupported features, see Service REST form - Completing the Service tab.

Authentication service for basic credentials

A new type of authentication service is available for authenticating operators by using basic credentials (user ID and password). The default Pega Platform™ login is now an instance of this type of authentication service. All basic credentials authentication services include mobile authentication with the OAuth 2.0 protocol and Proof Key for Code Exchange (PKCE). You no longer have to create a custom authentication service to support mobile applications.

For more information, see Configuring a basic authentication service.

Unauthenticated sessions transition seamlessly to authenticated

A new authentication service type allows a guest user to use an application without logging in, and to be prompted to authenticate later in the session. This enhancement supports scenarios such as online shopping portals where a user can browse for items and load a shopping cart as a guest but be prompted for credentials at checkout.

For more information, see Configuring an anonymous authentication service.

Create single sign-on authentication services from App Studio

You can create and enable single sign-on (SSO) authentication services from a new landing page in App Studio. From this new landing page you can also configure new SAML and OpenID Connect authentication services to provision users. For more information, see Creating a SAML SSO authentication service and Creating an OIDC SSO authentication service.

Protect against insecure deserialization

Deserialization is the process of rebuilding a data stream into a Java object. The Open Web Application Security Project (OWASP) has identified insecure deserialization as one of the top 10 security vulnerabilities for web applications. Pega Platform™ protects against this vulnerability by using filters that prevent deserialization of suspect data streams. You can configure these filters from the Deserialization Blacklist landing page.

For more information, see Configuring the deserialization filter.

Support for large binary data item storage in Pega Client for Windows

Pega Client for Windows can now store and synchronize large binary data items and their corresponding actions from the action queue. As a result, offline-enabled application users can view, attach, and delete data files from within a case view, whether the Windows-based device is online or offline. To use this feature, enable offline case attachment support, which allows offline-enabled applications to synchronize case attachments between Pega Platform™ and the device.

For more information, see Attach content support in offline mode and Enabling offline case attachments support.

Visualize application layers for case processes and sections

In App Studio, you can now easily visualize the application layers for case processes and sections, including work areas and views. When you click the Discover gadget for a case process or section, you are shown a visual representation of the application layers. You can open a layer in Dev Studio to see the rulesets and other attributes of an application.

For more information, see Discover gadget.

Date range configuration added to DateTime control

The DateTime (calendar) control now includes an option to specify a custom date range. The users will be able to quickly select valid start and end days of a period by choosing dates in an interactive calendar in an overlay.

For more information, see Configuring the basic settings for a DateTime control - date range