IBIS ClearCase

User Management Roles & Permissions: Admin users can assign roles to users with different permission sets. There are three default roles: Administrator, User + InSights, and User. Each role has its own defined permissions. Admins can also create custom roles and adjust the permission sets for each custom role. Role visibility: Users can see their assigned role in Account Details. It also replaces the email address in the bottom-left account panel and its expanded menu. Permission updates: Permission changes made by an admin now take effect in real time, without the user having to sign out. If a change affects the screen a user is on, a dialog explains what was removed, narrowed, or granted. Screens adjust their available actions on the spot, or return the user to the case list if access is lost. Changes made while the app was closed are applied when the app resumes, and users whose session is invalidated are logged out. Subscriptions: The "Subscriptions" section within User Management allows Admin users to manage email subscriptions (e.g. InSights notifications). Admins can add ClearCase users or external email addresses as recipients. SSO Enhancements The attached document, ClearCase SSO Setup Guide V2.0, outlines updates to SSO since the last release. These updates include: Identity provider selection: When enabling SSO, admins now choose their identity provider (Microsoft Entra ID or Okta) first, and the form shows only the fields that provider requires. Okta support: Test Connection and the SSO login redirect now work against an agency's Okta domain. Okta-specific errors appear in plain language, and MFA enforced by Okta is respected. Role mapping layout: The SSO role mapping section now groups roles under "Default Roles" (Administrator, User + InSights, User) and "Custom Roles." Custom roles appear automatically once created, and the Custom Roles section is hidden when none exist. Mapping custom roles to groups: Admins can map a custom role to an Entra ID group when creating it, and the mapped group is shown on the role. Each role can map to only one group, and each group to only one role. Conflicts show a specific error naming the role and group involved. User Management for SSO agencies: The user list, member counts, Roles tab, and Members tab are visible but read-only, with a note that membership is managed through the organization's identity provider. Admins can still create custom roles, and the Subscription tab is unchanged. System Settings The "InSights Dashboard Agency Visibility" and "InSights Notifications" sections have been removed from System Settings. This is now handled in User Management. Case Address Users can now optionally add an address to a case. The address is shown in Case Details, InSights reports, the Full Report, and the Analysis Summary. In Case Details, the coordinates are now labeled "Location." Mapbox Migration Maps now use Mapbox instead of Google Maps. This is a provider change only. The screens, pins, overlays, and controls (zoom, satellite, fullscreen) work as before. Fixes Fixed login failures for accounts whose stored email contains uppercase letters.