Purplemet Cloud 1.20.0 New Features

Updates and new features

Purplemet Cloud 1.20.0 is now available! This new version features several updates and enhancements compared to the previous version, as described hereafter.

Single Sign-On

The Single Sign-On authentication feature is now available to all our customers. As a reminder, an organization's administrators now have the option of changing their user authentication mode to Single Sign-On, where authentication, and even management, of user accounts is left to the customer's SSO identity provider.

Notifications

Users now have access to a new Notifications menu on the right-hand side of the top navigation bar, to be informed of new releases and features delivered to the Purplemet platform, as well as planned platform maintenance operations.

API token expiration

It is now possible to specify an expiration date for a Purplemet platform API access token. The token will be automatically deactivated on the day defined by the Expiration Date option, at midnight GMT. By default, API tokens do not have an expiration date.

API token display

Depending on their security policy, our customers may require that the token is no longer accessible once it has been created. Purplemet has implemented a new feature for them, enabling them to switch their subscription to this mode. When the token is created, a confirmation page will be displayed, reminding the user that the token will no longer be accessible, and giving them the option of copying it to save it locally.

This feature is delivered as part of the Purplemet Labs program, and you can request its activation at any time by sending an e-mail to our support.

Domains feature access

Users with an OPERATOR or READER profile and full access to subscription assets now have access to the Domains feature to view all subscription domains and the web applications associated with each. Access to this information is read-only.

Ignored CVEs

The number of CVEs vulnerabilities for a technology in the Web Application Technologies section no longer takes into account vulnerabilities ignored by users. The number of ignored vulnerabilities for a technology remains available at the tooltip level of the CVEs column.

New navigation layout

The Documentation and API menus are now available in a menu to the right of the top navigation menu, also providing access to the Purplemet blog, as well as the release note associated with the latest deployed version. The position of the Users and Tags menus has also been swapped, and the Tokens menu has been renamed API Tokens.

API updates

• Token - New expiresOn property is available in Token schema to set the token expiration date.
• Notification - New Notification endpoint to get the Purplemet platform notifications.