Published Release Notes

Support for the JSON Web Token Bearer grant type for accessing external APIs

You can now access external APIs by using the new OAuth 2.0 JSON Web Token (JWT) Bearer grant type, in an OAuth 2.0 authentication profile. To use the JWT Bearer grant type as a client assertion, source the JWT from an active SSO session, a token profile, or a property reference. You can use JWTs that you obtain during an OpenID Connect SSO in connectors, to achieve user impersonation flows, such as the On-Behalf-Of (OBO) flow. The OAuth 2.0 type authentication profile now also supports authentication of client applications by using Private Key JWTs.

Instances of the OAuth 2.0 provider are now deprecated. As a best practice, use the new, unified authentication profile configuration instead.

For more information, see Configuring an OAuth 2.0 authentication profile.

Upgrade impact

After an upgrade to Pega Platform 8.4 and later, Authentication Profiles can take advantage of the new JWT based OAuth 2.0 grant type and client authentication features. To take advantage of this and other new security features, you must update any existing Authentication Profiles formats must to use those in Pega Platform 8.4 and later.

What steps are required to update the application to be compatible with this change?

Since these features are available only for profiles created in Pega Platform 8.4 and later, clients must open and then save existing 'Authentication Profile' instances to ensure that the configuration is compatible with the latest authentication formats.

Email supports Microsoft Graph

Email integration with Microsoft Office 365 now supports Microsoft Graph. By using Microsoft Graph, you can process inbound email more securely and avoid using less secure protocols, such as IMAP and POP3.

For more information, see Creating an email account.

Email listener enhancements for faster email processing

Enhanced email listeners now process more emails in less time. To increase throughput, you can configure email listeners to process several emails simultaneously, instead of one at a time.

For more information, see Creating an email listener.

Specify the scope for rolling back rules and data to a restore point

Create restore points to save the state of all rules and data in your system at a significant point in time, for example, before you import an application. Roll back to that restore point to return the system to that state. Now, you can filter which rule and data instances are returned to their previous state:

• System: Roll back every rule and data instance that has a history record.
• User: Roll back rule and data instances modified by a specific user. If any rule was changed by more than one user, you will see an error message and must use the system rollback.
• Application: Roll back rule and data instances in a specific application.

For more information, see Using restore points to enable error recovery.

Support for data page aggregation

You can now aggregate data from multiple sources for faster and easier implementations. With this feature, you can load data pages more easily without using an activity or data transform. 

For more information, see Creating a data page. 

Connect to Amazon SageMaker models in Prediction Studio

Make the most of your custom Amazon SageMaker models in Pega Platform™ by connecting to the models in Prediction Studio. You can then run the Amazon SageMaker models as part of your decision strategies.

For more information, see Enrich your decisioning strategies with H2O and Amazon SageMaker predictive models (8.4).

Import H2O models to Prediction Studio

Make the most of your custom H2O models in Pega Platform™ by importing them to Prediction Studio. You can then include the H2O models in your decision strategies.

For more information, see Enrich your decision strategies with H2O and Amazon SageMaker predictive models (8.4).

Support for auditing adaptive model decisions

Pega Platform™ now stores all adaptive model scoring data so that you can identify the source of each decision, such as the exact model version that was used for scoring. With this feature, you can ensure that your application is auditable, transparent, and in compliance with regulatory requirements related to using adaptive models.

For more information, see Configuring the Adaptive Decision Manager service.

Create predictions in Prediction Studio

Predict customer behavior and business events by creating predictions. To create a prediction, you answer a series of questions about what you want to predict. For example, you can create a prediction to determine the likelihood of customer churn.

For more information, see Create predictions in just a few clicks (8.4).

Sign and encrypt signatures and content with additional algorithms

You can now authenticate using JSON Web Token (JWT) token profiles to symmetrically and asymmetrically encrypt both signatures and content. All algorithms in the Nimbus JWT library are supported, including nested tokens. Custom key identifier headers (kid) are also supported. Use token profiles to securely propagate identities and transfer data between systems.

For more information, see Creating a processing JSON Web token profile.

For more information, see Creating a generation JSON Web token profile.