Published Release Notes

Enabling security policies now requires current password

As part of Pega’s initiative to protect against malicious attacks, the change password dialog has been enhanced.  When Security Policies have been enabled for your system, new users or those with expired passwords will now be prompted for both their existing password as well as their desired new password.

For more details, review the Designer Studio > System > Settings > Security Policies landing page.

User Interface

Issues for cross-browser support for Designer Studio have been addressed. Improvements were made in run-time performance for data pages with grids, and a number of cosmetic changes and fixes were made.

• Improved loading of Javascript files during saving Harness rules.
• Login Performance improvements
• A cursor pointer issue was addressed in Case Manager.
• In reports, data in columns will now right-align.
• Improved section validation functionality
• Harnesses with screen layouts will now save when there is a refresh condition on a panel.
• Outline View tree has been improved.
• Improvements to Repeat Grids using Data Pages as a source.
• Formatted text cells can be put into a grid to display the value of a property retrieved from a Report Definition join.
• Designer Studio changes to support IE9 and IE10.
• Improved designer studio layout
• Designer Studio changes to support quirks mode in IE8 and IE9.
• Improvements to SmartLabels in Data Pages
• Tab groups will take parameters for pre-activities in a defer load setup.
• Sections support nested dynamic layouts.

Support for the JSON Web Token Bearer grant type for accessing external APIs

You can now access external APIs by using the new OAuth 2.0 JSON Web Token (JWT) Bearer grant type, in an OAuth 2.0 authentication profile. To use the JWT Bearer grant type as a client assertion, source the JWT from an active SSO session, a token profile, or a property reference. You can use JWTs that you obtain during an OpenID Connect SSO in connectors, to achieve user impersonation flows, such as the On-Behalf-Of (OBO) flow. The OAuth 2.0 type authentication profile now also supports authentication of client applications by using Private Key JWTs.

Instances of the OAuth 2.0 provider are now deprecated. As a best practice, use the new, unified authentication profile configuration instead.

For more information, see Configuring an OAuth 2.0 authentication profile.

Upgrade impact

After an upgrade to Pega Platform 8.4 and later, Authentication Profiles can take advantage of the new JWT based OAuth 2.0 grant type and client authentication features. To take advantage of this and other new security features, you must update any existing Authentication Profiles formats must to use those in Pega Platform 8.4 and later.

What steps are required to update the application to be compatible with this change?

Since these features are available only for profiles created in Pega Platform 8.4 and later, clients must open and then save existing 'Authentication Profile' instances to ensure that the configuration is compatible with the latest authentication formats.

Sign and encrypt signatures and content with additional algorithms

You can now authenticate using JSON Web Token (JWT) token profiles to symmetrically and asymmetrically encrypt both signatures and content. All algorithms in the Nimbus JWT library are supported, including nested tokens. Custom key identifier headers (kid) are also supported. Use token profiles to securely propagate identities and transfer data between systems.

For more information, see Creating a processing JSON Web token profile.

For more information, see Creating a generation JSON Web token profile.

Anypicker control is now available

The new Anypicker control displays a drop-down list of values that you can group into expandable categories for faster browsing. To save time and improve search accuracy, the Anypicker control filters the available values based on the characters that the user enters.

For more information, see Adding an Anypicker control.

Referencing Rule tool in Dev Studio

The Referencing Rule tool now runs in Dev Studio without the need for Adobe Flash Player. This enhancement integrates the Referencing Rule tool into your work environment, which improves productivity by reducing context switching.

For more information, see Finding rules by dependency.

PDF/UA support

PDF documents that you generate in Pega Platform™ are now in PDF/UA format. This enhancement improves accessibility for users who rely on assistive technology, such as screen readers.

For more information, see Setting PDF file versions.

Upgrade impact

With an upgrade to Pega Platform 8.4 and later, the underlying PD4ML library in Pega Platform changes from v3.10 to v4.x. Following an upgrade, most standard HTML-CSS conversions to PDF work seamlessly; however, if you use the following custom coding in their application to convert HTML to PDF, you may find that PDF generation works differently than expected or no longer works:

• Application layer Java in activities that directly link to the underlying PD4ML library
• A Rule Utility Function
• PD4ML tags in HTML fragments

For example, the following PD4ML proprietary CSS keywords are no longer supported in v4.x:

• pd4ml-page-break-border-top
• pd4ml-page-break-border-bottom

What steps are required to update the application to be compatible with this change?

After you upgrade to Pega Platform 8.4 and later and find your PDF generation works differently than expected or no longer works, you should consult the latest documentation available at pd[4]ml support site. You may also consider using the Compact CSS instead of the application skin for PDF generation; for details, see Creating PDF files by using a compact style sheet.

Custom activities protection

Additional activities in table layouts

Table layouts now provide you with the option to run activities either before or after updates to a table. This gives you greater flexibility when you design user interfaces.

For more information, see Configuring table activities.

Support for Thai calendar

Pega Platform™ now supports the Thai solar calendar. The update improves readability for users who rely on this date format, and enhances their experience and engagement.

For more information, see Configuring the Thai calendar.