1. Update List - Visual-Guard 2024.6

The Visual Guard 2024.6 release introduces a wide range of enhancements focused on performance, security, usability, and modernization. These updates strengthen the platform’s reliability while improving administrative efficiency and integration with the latest technologies.


Web Console

👥 User Search – Inactive User Enhancement

The user search interface has been improved with a more intuitive date picker control for filtering inactive users. This enhancement ensures smoother interaction, more accurate date selection, and an overall better user experience when managing inactive accounts.

🛡️ Repository Configuration – Write Access Validation

A new write access validation step has been added when saving repository configurations. This feature checks user permissions in advance, preventing runtime errors caused by missing access rights. If saving fails due to insufficient permissions, the system now provides clear feedback, helping administrators quickly identify and resolve configuration issues.

📁 Repository Configuration – Validation Messages

The license and folder permission validation messages have been refined to provide more accurate and informative feedback when configuring existing repositories. These improvements ensure administrators receive clearer guidance during setup, reducing confusion and improving overall configuration reliability.


Identity Server

🏷️ UI Label Update

The label “Configure Web User Interface” has been renamed to “Configure Identity Server” to provide clearer and more consistent terminology. This change helps administrators quickly identify the correct configuration section and aligns with Visual Guard’s current architecture and naming standards.

🎨Active Menu Item Highlighting

The Identity Server menu now visually highlights the active section, ensuring consistency with the Web Console interface. This enhancement improves navigation clarity, allowing administrators to easily identify which configuration area they are currently working in.

🛡️ Repository Configuration – Write Access Validation

A pre-save validation has been introduced to check write permissions for configuration files and directories before saving. This enhancement improves system robustness and provides clear user feedback if insufficient permissions are detected, preventing save failures and streamlining repository setup.


WinConsole

📂 Configuration Export

After a configuration file is exported, the containing folder now opens automatically, allowing administrators to quickly access and verify the exported file. This small but effective enhancement improves workflow efficiency and user convenience during configuration management.

👥 Users – Selection Improvements

The user management interface now includes direct navigation links for selected users, enabling administrators to quickly access user details and perform actions without extra steps. This enhancement streamlines administrative workflows and enhances overall usability.

📘 Help Documentation Update

The Help menu has been updated to open the latest online documentation directly at docs.visual-guard.com. This ensures users always have access to up-to-date guides, tutorials, and reference materials for smoother onboarding and troubleshooting.

🛡️ Settings – Security Audit for Identity Server and Workflow Impersonation

A new security audit mechanism has been introduced to validate user permissions for Identity Server and Workflow impersonation. The audit:

  • Verifies role-based access rights
  • Logs insufficient privileges for better traceability
  • Displays warnings or recommendations when required rights are missing

This enhancement strengthens administrative security and ensures proper authorization before impersonation actions are performed.


Engine and Core Components

🧩 Trace Formatting

Trace logs have been enhanced to include detailed class and method names, providing clearer diagnostic information for developers and administrators. This improvement simplifies troubleshooting and helps in pinpointing issues more efficiently during debugging and support analysis.

🪪 Authentication Logging – Request ID

A unique Request ID has been added to authentication logs, enabling better correlation across components and simplifying debugging in distributed environments. This improvement enhances traceability and makes it easier to follow authentication flows end-to-end.

⏱️ Craft Connection Timer Logging

Trace logs for connection timing have been improved by including operation names alongside elapsed times. This enhancement increases trace readability and helps administrators and developers quickly identify performance bottlenecks during connection-related operations.

🧰 IdentityServerClient – IdentityModel Reference Removal

The outdated IdentityModel 5.1 dependency has been removed from the VGIdentityServerClient assembly, simplifying deployment and reducing potential security risks. This cleanup ensures a leaner, more secure build and improves overall compatibility with modern libraries.

📦 NuGet Package Updates

Core NuGet dependencies have been updated to their latest secure versions to enhance stability, performance, and security. Updated packages include:

  • System.Configuration.ConfigurationManager
  • System.Data.SqlClient
  • System.Drawing.Common
  • System.Security.Permissions
  • System.Security.Principal.Windows

These updates ensure improved compatibility with modern .NET environments and mitigate potential vulnerabilities.


Bug Fixes

⚙️Engine – Profile Role Handling

Issues related to profile attribute synchronization during deployment have been resolved. The update ensures that profile attributes are correctly validated and migrated between repositories, maintaining consistency and reliability in role and profile management across environments.

⏳ OTP Expiration Message

User feedback has been improved for expired OTP validations, providing a clearer and more informative message when an OTP is used after its expiration time. This enhancement helps users understand the reason for failed authentication and improves the overall MFA experience.

🪪 Repository License Validation

A new validation check now detects and alerts users when configuring expired or unlicensed SQL repositories. The system displays a clear error message, helping administrators quickly identify and resolve licensing issues before proceeding with configuration.

🚫 Passwordless Accounts Without MFA License

A new restriction has been implemented to ensure repositories without an MFA license cannot create passwordless user accounts. This enforcement maintains security compliance and ensures passwordless authentication is only available in properly licensed environments.

🌐 AD Domain Connectivity

Error handling for Active Directory domain connectivity has been improved. When the domain is unavailable, the system now displays “Domain Down” instead of the misleading “Invalid Username” message. This enhancement provides clearer diagnostics and helps administrators quickly identify connectivity issues.

☁️ Azure AD User Login

Login handling has been improved for new repositories that do not yet have Entra (Azure AD) domains configured. The system now gracefully manages these cases, preventing login errors and ensuring a smoother initial setup experience.


General Enhancements

🔐 MFA Service – Success Message Update

The confirmation message displayed after a successful Multi-Factor Authentication (MFA) process has been revised for improved clarity and user experience. This update ensures users receive a clear, concise acknowledgment of successful authentication, enhancing overall usability and consistency across the MFA workflow.

🔐MFA Template Variables

Three new template variables have been added to enhance MFA email and HTML templates, offering greater flexibility and compatibility:

  • {%VGMFALINK%} – Inserts the authentication link
  • {%VGMFALINKHTML%} – Inserts an HTML-formatted authentication link
  • {%VGMFAOTP%} – Inserts the one-time password (OTP)

These enhancements improve email rendering across major clients like Outlook and include updated documentation within the WinConsole for easier implementation.

⚙️Menu Options for Global Policy Editing

New quick-access menu options have been added to allow administrators to edit Global Policies and MFA Policies directly from the Repository and Application menus. This enhancement streamlines policy management, reducing navigation steps and improving overall administrative efficiency.

🔒Azure ARM Update – 2024.6

The Azure Resource Manager (ARM) deployment templates and related components have been fully updated for Visual Guard 2024.6. This includes refreshed application packages and configuration files, ensuring smooth deployment within the latest Azure environments. Compatibility with current Azure services has been verified, and end-to-end SaaS trial deployments have been successfully validated for stability and performance.

🧾 Enhanced Logging and Diagnostics

This release delivers improved logging, error handling, and diagnostic clarity across all Visual Guard components. These enhancements make it easier for administrators and developers to trace issues, analyze behavior, and maintain system stability, ensuring faster troubleshooting and more transparent system monitoring.

🗄️ Repository Configuration Enhancements

Repository configuration workflows have been enhanced for both SQL Server and Oracle backends, offering a more reliable and user-friendly setup experience. These improvements streamline configuration steps, strengthen validation, and ensure smoother integration across diverse database environments.

🔒 Reinforced Security and Compliance

Security has been strengthened across the platform through enhanced validation mechanisms, permission checks, and dependency updates. These improvements ensure greater protection against misconfigurations and vulnerabilities, maintaining Visual Guard’s commitment to robust, compliant, and secure operations.


Visual Guard 2024.6 introduces significant upgrades focused on logging, authentication, and MFA enhancements, alongside a wide range of usability and stability improvements across the Web Console, WinConsole, and Identity Server.

This release also strengthens security compliance through updated dependencies, improved audit mechanisms, and enhanced validation checks for key repository and identity operations—ensuring a more secure, efficient, and reliable Visual Guard experience

2. Update List - Visual-Guard 2024.5

The Visual Guard 2024.5 release brings several enhancements, fixes, and improvements to performance, security, and user experience. Below is the summary of key updates included in this version for both VGWinconsole and VGWebconsole


👤Workflow & Identity Server User Assignment

Visual Guard now introduces the ability to designate a Master Admin as the impersonated user for Workflow or Identity Server operations.
Users can now be assigned through:

  • A new button on the User Details page (WinConsole/WebConsole): Set as Workflow User.
  • A dedicated section in Settings to input and validate the impersonated user.

Additionally, deleting an impersonated user is now restricted unless the user has been reassigned, ensuring consistent workflow integrity and user mapping.

🔐Trigger MFA Validation Programmatically

This enhancement allows developers to trigger Multi-Factor Authentication (MFA) validation programmatically within Visual Guard. This feature enables greater flexibility in integrating MFA checks into custom workflows, scripts, or automated processes, strengthening security while allowing controlled authentication handling.

🔷Entra Domain Icon Update

Entra domains are now visually distinct within the domain selection interface, making it easier for administrators to identify and differentiate Entra domains from other domain types at a glance.

🧹Version Logging in Trace

Both WebConsole and IdentityServer now log the application version (e.g., 2024.5.513) in VGTrace. This enhancement improves support and troubleshooting by allowing teams to quickly identify the exact application version involved in any logged activity or issue.

🔒Azure ARM Update for 2024.5

The Azure ARM templates have been updated to support seamless trial SaaS deployments using Visual Guard 2024.5. This enhancement simplifies cloud setup and deployment, ensuring faster and more reliable provisioning of Visual Guard environments in Azure.

🔒Azure Environments – Security Runtime References

All development, testing, and production applications have been audited and updated to ensure proper references to VGSecurityRuntime. This update strengthens consistency and reliability across Azure environments, improving security and runtime stability during deployment and execution.

⚙️Angular Sample Application Update

The Angular sample application has been updated to the latest stable version, along with all related dependencies and Visual Guard integration. This ensures compatibility with modern Angular frameworks, improved performance, and a smoother development experience for developers using the sample as a reference.


Engine & Platform

🧩.NET 8 Compatibility

Visual Guard has been updated for full compatibility with .NET 8. As part of this enhancement, the deprecated BinaryFormatter has been removed and replaced with modern, secure serializers such as System.Text.Json and XmlSerializer. This update improves application security, performance, and long-term framework support.

👤User Migration Performance

Performance has been significantly optimized for large repositories—for example, those containing up to 600,000 users—during the user migration process. This enhancement greatly reduces migration time and improves stability when handling large-scale data transfers.

📦NuGet Packaging

The Visual Guard 2024.5 engine components have been published to NuGet with verified signing and versioning. This enhancement simplifies deployment and integration for developers, ensuring secure, traceable, and easily maintainable package management within .NET projects.

🛡️Secure Repository Configurations

When adding existing repositories via the Console, Visual Guard now encrypts stored credentials in the configuration files. This enhancement strengthens security by protecting sensitive connection information and ensuring safer repository management practices.

🔍Trace Improvements

New tracing methods have been added to capture class and method names in log files, providing deeper insights during debugging and issue analysis. This enhancement improves traceability and makes troubleshooting more efficient for developers and support teams.

📦NuGet Vulnerability Mitigation

Over 35 NuGet packages have been updated to their latest stable versions to address known security vulnerabilities and remove warnings. Examples include updates to System.Text.Json, Oracle.ManagedDataAccess.Core, Microsoft.Data.SqlClient, Newtonsoft.Json, and Serilog. These updates strengthen Visual Guard’s security, improve compatibility, and ensure a safer runtime environment.

🧰JSON Configuration Isolation

Visual Guard settings are now stored in secure, isolated JSON configuration files that are not accessible via URL. This enhancement improves security by preventing unauthorized access to sensitive configuration data and ensuring safer application deployment practices.


WinConsole & WebConsole

🔷UI Enhancements in Entra Domain and Edit User Views

Icons, tooltips, and labels have been updated for improved clarity and consistency across the Entra Domain and Edit User views. These visual refinements enhance usability and provide a more intuitive experience for administrators managing users and domain settings.

👤Impersonated User Selection Mechanism

Visual Guard now offers two methods to assign an impersonated user: directly from the User Details page or through the Settings/Repository section. This flexibility simplifies configuration and allows administrators to manage impersonation assignments more efficiently based on their preferred workflow.


Bug Fixes

👤Prevent Deletion of Impersonated User

The system now prevents the deletion of users who are set as impersonated for workflow or identity operations. This safeguard ensures process continuity and prevents configuration errors that could disrupt automated workflows or identity server functions.

🛡️Role Update Protection for Impersonated Users

Role modifications are now blocked for users assigned as impersonated. This restriction ensures that workflow and identity operations remain stable and prevents unintended permission changes that could affect critical impersonation configurations.


3. Update List - Visual-Guard 2024.3

The Visual Guard 2024.3 release brings several enhancements, fixes, and improvements to performance, security, and user experience. Below is the summary of key updates included in this version.

MFA Validate Operation (for business actions)

A process in Visual Guard where Multi-Factor Authentication (MFA) is required to authorize specific business actions. This ensures that critical operations are executed only after verifying the user’s identity through multiple authentication methods, enhancing security for sensitive tasks within applications.

Purpose of MFA Validation:

  • This process is designed to strengthen the security around critical business functions, especially those that involve sensitive or high-impact operations, by requiring users to authenticate using multiple methods. For example, it might involve entering a password and then confirming via a one-time code sent to a mobile device.
  • Visual Guard’s MFA validation can be applied to specific actions, adding an additional layer of security when a user performs tasks like approving transactions, accessing confidential data, or executing administrative commands.

Benefits of using this feature:

  • Enhanced Security: Protects sensitive business operations by requiring additional authentication layers, reducing unauthorized access risks.
  • Compliance Support: Helps meet regulatory and compliance standards by safeguarding critical actions with strong identity verification.
  • User Accountability: Creates a clear audit trail by linking actions to authenticated users, improving traceability for critical operations.
  • Risk Mitigation: Minimizes the potential impact of compromised credentials by requiring multifactor checks before high-risk actions.
  • Operational Flexibility: Allows for selective application of MFA to specific actions, balancing security needs with user convenience.

Performance improvement for private connections

The latest VisualGuard release significantly improves the performance of private connections to the VisualGuard repository.

What is a private connection?The VisualGuard Identity Server enables your application to securely connect to the Identity Server, which in turn accesses the database repository to retrieve user security data. This architecture enhances security by isolating your application from direct database access. We refer to this secure connection as a private connection.

You can configure a private connection between your application and the VisualGuard Identity Server using secure protocols such as HTTPS, HTTP, and gRPC. This optimization directly impacts the secure communication pipeline between your application and the VisualGuard Identity Server. By employing industry-standard protocols such as HTTPS, HTTP, and gRPC, you can establish a highly secure and efficient data transfer channel. This refined architecture safeguards sensitive user security data while accelerating response times and overall system performance.

Benefits of using a private connection:

  • Enhanced Data Security: A private connection isolates data from public networks, reducing the risk of interception and unauthorized access, essential for handling sensitive information securely.
  • Controlled Access: Only authorized systems and users within the private network can access the Visual Guard Identity Server, enhancing control over who can interact with identity management resources.
  • Improved Performance: Private connections can offer lower latency and more stable bandwidth, resulting in faster, more reliable authentication processes, especially for high-transaction environments.
  • Compliance Support: Many regulatory frameworks require secure, private data channels, so using a private connection can help meet compliance standards more easily.
  • Reduced Exposure to Threats: By limiting access to private network users, the potential for attacks from external threats is significantly minimized.

WinConsole

Hide the file repository

A new enhancement has been introduced in the Create Repository section, allowing users to hide the File Repository option. This improvement helps streamline the interface and ensures that only relevant repository types are visible based on user configuration or project requirements.

Addition of VGEntra Settings for Create and Edit

Visual Guard now includes VGEntra settings in both the Create and Edit options. This enhancement allows administrators to configure and modify Entra-related parameters directly during repository creation or editing, improving flexibility and simplifying configuration management.


WebConsole

Hide the file repository

A new enhancement has been introduced in the Create Repository section, allowing users to hide the File Repository option. This improvement helps streamline the interface and ensures that only relevant repository types are visible based on user configuration or project requirements.

Improved Login Page Loading Speed

The login process in Visual Guard has been optimized to deliver faster page loading times. This enhancement improves the overall user experience by reducing wait times and ensuring quicker access to the application.

Renaming VGServer to VGIdentityServer

As part of this update, VGServer has been renamed to VGIdentityServer to better reflect its role in managing authentication and identity services within Visual Guard. This change brings clearer terminology and aligns with Visual Guard’s evolving identity management architecture.


Compatibility with Microsoft .NET Hosting Package 8.x

Visual Guard version 2020.3.2302.10 is now fully compatible with Microsoft .NET Hosting Package 8.x. This update ensures better integration with the latest .NET framework, providing improved performance, enhanced security, and long-term platform support for hosted environments.

User Interface Fix on Enrollment Page

A UI issue on the Enrollment page has been resolved. The top header and bottom trim were previously misaligned, affecting the page layout and appearance. This update ensures consistent alignment and a cleaner, more polished user interface.

Connect to Repository via Private Connection

A new option has been added to the Repository Connection feature, allowing users to connect using a Private Connection. This enhancement improves security and flexibility by enabling administrators to establish protected connections for accessing repositories in controlled environments.

4. Update List - Visual-Guard 2024.2

The Visual Guard 2024.2 release brings several enhancements, fixes, and improvements to performance, security, and user experience. Below is the summary of key updates included in this version.

Winconsole

Azure Entra

In the new version of Visual Guard, we are introducing Azure Entra as an advanced feature to enhance identity and access management. Azure Entra is Microsoft’s unified identity and access platform, designed to protect identities and ensure secure access to resources.

Benefits of Azure Entra Integration:

  • Enhanced Security: Leveraging Azure Entra’s robust security features ensures that only authenticated and authorized users can access sensitive applications.
  • Improved User Experience: The integration of SSO and seamless MFA provides a frictionless experience for users while maintaining high security standards.
  • Scalability and Flexibility: Organizations can scale identity management effortlessly, catering to both on-premises and cloud-based applications.
  • Advanced Access Control: With conditional access, organizations can tailor security policies based on real-time risk assessments.

Key Aspects of Azure Entra Integration:

  • Seamless Integration with Visual Guard: Azure Entra allows for streamlined user authentication by integrating with Visual Guard, enhancing the way applications authenticate and authorize users.
  • Multi-Factor Authentication (MFA): Azure Entra brings enhanced Visual Guard MFA capabilities, adding an extra layer of security with identity verification methods like TOTP, and OTP.
  • Conditional Access: It supports advanced access controls based on user risk, device state, and session context, providing administrators with better control over access policies.
  • Single Sign-On (SSO): Users can now access multiple applications within the Visual Guard ecosystem with a single set of credentials, simplifying the user experience and reducing password fatigue.
  • Compliance and Governance: With Azure Entra, Visual Guard can better support compliance with security regulations through detailed auditing and reporting tools.

Improved Handling of AD User Duplication

In this update, Visual Guard enhances the way Active Directory (AD) users are duplicated. When duplicating an AD user, the system now correctly displays the domain format as Domain.com\user instead of domain\user. This improvement ensures better alignment with domain naming conventions and provides a more consistent experience across environments such as Domain Names, Site Builder, Hosting, and other integrated systems.

Exception Handling for MFA Deployment Without License

A new validation has been introduced when deploying MFA configurations. If you attempt to deploy MFA settings from a source repository to a target repository that does not have an MFA license, Visual Guard will now display an exception message. This update helps prevent configuration conflicts and ensures that MFA deployment is only performed on properly licensed repositories.

Enhanced Control in MFA Deployment by Parameter

Visual Guard now introduces clearer behavior when deploying by parameter from a source to a target repository. Fix for Local User Search in WebConsole. This update gives administrators more flexibility and control, allowing them to choose the appropriate deployment method depending on licensing and configuration needs.

  1. MFA → Deploy MFA Configuration: This option now deploys the MFA configuration based on the target repository’s MFA license rights, ensuring deployment only where the license is valid.
  2. Repository → Deploy All Modules with Configuration: This option deploys all MFA parameters (VGMFA) regardless of the target repository’s MFA license rights.

Editing any domain and adding duplicate domain.

A correction has been made to address an issue where editing any existing domain resulted in the creation of a duplicate domain entry. With this update, Visual Guard now properly updates the selected domain without generating duplicates, ensuring cleaner and more accurate domain management.


Webconsole

SQL Server Version Upgrade

Visual Guard has upgraded its database compatibility from SQL Server 2008 to SQL Server 2012. This update enhances performance, security, and stability, ensuring better support for modern database features and improved overall efficiency in repository management.

Alignment Fix for Entra Domain (French Version)

An interface alignment issue in the Entra Domain section has been resolved. In the French language version, the TextBox alignment was previously misaligned, affecting visual consistency. This update ensures proper alignment across all language versions for a smoother and more professional user experience.

Fix for Local User Search

An issue has been resolved in the WebConsole where the Username was not appearing in the search results while adding a local user. With this update, the search function now correctly displays usernames, ensuring a smoother and more accurate user management experience.


5. Update List - Visual-Guard 2024.1

In the digital age, where data breaches and cyber threats are increasingly common, securing sensitive information has never been more crucial. Visual Guard 2024.1 introduces a suite of robust Multi-Factor Authentication (MFA) features, marking a significant leap in securing applications and sensitive data. This release has the major feature of introducing TOTP (Time-Based One-Time Password).

TOTP is a widely used method for implementing multifactor authentication (MFA). It provides an additional layer of security by requiring users to provide a time-sensitive, temporary code in addition to their usual password.


Major Features in Visual Guard

TOTP of windows Authenticator

TOTP is a widely used method for implementing multifactor authentication (MFA). It provides an additional layer of security by requiring users to provide a time-sensitive, temporary code in addition to their usual password.


VG WinConsole

Impersonate User

With minimal effort, Master Administrators can manage user impersonation for both Identity Server and workflow, streamlining administration tasks. This feature allows to set a user account which will be used for internal administrative activities behind the scene while operating identity server and workflow


VG WebConsole

WebConsole uses .Net 8, you can download the hosting bundle from the ASP.NET Core Runtime 8.0.7 section from the official Microsoft website. (https://dotnet.microsoft.com/en-us/download/dotnet/8.0)

  • Permissions required for a SQL user to connect to a VG database table
  • New permissions required for a published folder

VG IdentityServer

IdentityServer uses .Net 8,you can download the hosting bundle from the ASP.NET Core Runtime 8.0.7 section from the official Microsoft website. (https://dotnet.microsoft.com/en-us/download/dotnet/8.0)

  • Permissions required for a SQL user to connect to a VG database table
  • New permissions required for a published folder

6. Update List - Visual-Guard 2024.0

In the digital age, where data breaches and cyber threats are increasingly common, securing sensitive information has never been more crucial. Visual Guard 2024.0 introduces a suite of robust Multi-Factor Authentication (MFA) features, marking a significant leap in securing applications and sensitive data.


Major Features of Visual Guard:

  • MFAPolicy at 2 Tiers: Introducing a two-tiered approach to MFA policies, Visual Guard 2024.0 allows for the implementation of both GlobalPolicy and ApplicationPolicy. This dual-layered policy framework ensures a flexible yet secure environment, catering to the broad security requirements at the organizational level while allowing for application-specific MFA configurations.
  • MFA Deployment to Other VGRepository: Expanding the reach of MFA, Visual Guard 2024.0 enables the deployment of MFA settings across different VGRepositories. This feature ensures that MFA protections are uniformly applied, enhancing security across all platforms and applications managed within the Visual Guard ecosystem.
  • Enrollment of the User with VGIdentityServer: A streamlined user enrollment process with the VGIdentityServer simplifies the integration of MFA, ensuring that users are quickly and securely onboarded with multi-factor authentication protocols.
  • Comprehensive MFA Integration: Visual Guard 2024.0 intricately weaves MFA into all its functions, providing detailed insights into how multi-factor authentication works seamlessly within the Visual Guard framework to protect sensitive data and applications.
  • Duplicate Role: Visual guard allows you to duplicate a Shared Role & Application role within your system that mirrors an existing role, duplicating all similar permissions and responsibilities. This feature is exclusively available in VG 2024 and later versions.

Introducing VGMagicLink

A standout feature of Visual Guard 2024.0 is the introduction of VGMagicLink, a revolutionary technology that enhances the MFA experience. VGMagicLink allows for real-time authentication, enabling users to gain access to secured applications immediately after validating a unique link. This technology offers an alternative to traditional OTP and email link methods, providing a seamless and efficient way to ensure security without compromising on user convenience.

VGMagicLink exemplifies Visual Guard’s commitment to innovation in security, offering users a quick and secure authentication method that aligns with the modern need for immediate and reliable access to applications.

Visual Guard’s Login Flow with Magic Links


VGSecurityRuntime

MFA Integration in the Authentication flow

This update ensures that during authentication, users are required to provide multiple forms of verification, adding an extra layer of defense against unauthorized access, and fortifying the overall security posture of the system.


MFA Deployment – Repository and Application Level

This feature allows to import MFA policy and its configuration from the source repository to the target repository. This is helpful when an administrator want to copy the policy and configuration from Dev or QA repository to the Production repository.


MFA Enrollment Flow

The MFA enrollment flow involves users registering one or more secondary authentication methods, such as a phone number for SMS or email ID for link, which are then required in addition to the primary password for enhanced security during login.


MFA Integration in Angular Apps

This update enables Angular applications to implement MFA, providing a secure, interactive user verification experience without compromising the app’s performance or user interface.


MFA Policy – Global and Application Level

This feature allows for the precise tailoring of MFA requirements, ensuring that security measures align perfectly with specific organizational policies and application-specific needs.


Password Policy Flow Change for MFA

This change harmonizes password regulations with MFA requirements, enhancing overall security while streamlining the user’s authentication journey.


.Net 8 Support

VG 2024 will support .Net 8.0


VG WinConsole

Added Support for Multi Factor Authentication.

This new feature enhances security by requiring users to provide additional verification beyond their credentials, ensuring a robust defense against unauthorized access.   


Add/Edit Identity Server Configuration  

Several configuration changes have been made to the IdentityServer and new properties have been added to the WinConsole settings. This allows for more flexible configuration of the VGIdentityServer. ex. Authentication Preferences, Grpc Private service references, Auto restart options etc.


Add/Edit Global MFA Policy

With this feature, you can now easily add or edit Global MFA policy at an organizational level by specifying certain parameters for multi factor authentication.


Add/Edit Application MFA Policy

With this feature, you can now easily add or edit MFA policy at an application level by specifying certain parameters for multi factor authentication.


Deployment of MFA (Global MFA Policy and MFA Configuration)

It will allow you to deploy Global MFA Policy and MFA Configuration from source repository to target repository. 


Add Existing Repository via VGIdentity Server

This feature allows you to easily connect and incorporate your data and resources into VGIdentity Server, enhancing user access control, authentication, and security.


MFA license key

The MFA (Multi-Factor Authentication) License Key is a unique code generated to activate the MFA feature within the product. It’s tailored according to the specific features associated with each key, ensuring a customized security setup.


Duplicate Role

Visual guard allows you to duplicate a shared role and application role within your system that mirrors an existing role, duplicating all similar permissions and responsibilities.


Miscellaneous Settings

With minimal effort, Master Administrators can manage user impersonation for both Identity Server and workflow, streamlining administration tasks.


VG WebConsole

MFA Login Integration

This update ensures a fortified entry mechanism, balancing strict security measures with a smooth user authentication flow.


MFA Policy – Global and Application Level

Administrators can now define multi-factor authentication policies to secure the entire organization (Global) and customize them for specific applications, ensuring flexible yet robust security measures.


Passwordless Authentication

This feature gives the access to your account using alternate methods, such as secured link or one-time codes (OTP), enhancing both security and user experience.


Password Policy with MFA

This feature allows users to set and manage strong password requirements while incorporating multi-factor authentication for an added layer of protection.


Getting Started

This feature provides a user-friendly onboarding experience, guiding new users through the essential steps of setting up Visual Guard.


Duplicate Role

Visual guard allows you to duplicate a shared role and application role within your system that mirrors an existing role, duplicating all similar permissions and responsibilities.


VG IdentityServer

Visual Guard’s Identity Server receives significant updates in 2024, focusing on user experience, customization, and security enhancements. These updates streamline the configuration process, enhance user interface customization, and integrate advanced security features like Multi-Factor Authentication (MFA).


Configure Repository Wizard

This wizard will help you to configure the repository(storage) with IdentityServer when VGIdentityServer is started very first time.


Configure Local Settings

This wizard will allow you to configure the local settings for Identity server.


Configure Identity Server Options

This feature will allow you to configure the identity server options.  ex. Authentication Preferences, Grpc Private service references, Auto restart options etc.


Customize UserInterface 

You can customize the VGIdentityServer user interface by adding pre-defined Visual Guard variables for website text. For example:

  • [ApplicationId] – Gets the application Id.
  • [ApplicationName] – Gets the application Name
  • [ApplicationDescription]- Gets the application Description)

MFA Enrollment Process for users

  • Send Verification & Validation for Email Address and Mobile Number
  • Register EmailAddress, MobileNumber. 

This will ensure that users can confidently access their accounts with an added layer of protection against unauthorized access.


Integration of MFA for Existing Authentication Modes

Enhance security by seamlessly integrating Multi-Factor Authentication (MFA) into your existing authentication methods. Users now have an added layer of verification for increased account protection and data security.


Select MFA Preferences (ex. OTP Authentication, Link Authentication) and Authentication.

This feature allows individuals to select their preferred MFA method, enhancing their login experience and security.


Support for Clustering Environment.

This feature will allow to setup the clustering environment/load balancing environment via configuration.


Implementation of Remember Me on Login Form.

Users can now choose to have their login credentials remembered, streamlining future login processes and providing a smoother user experience.


Implementation of Default Authentication Mode & Default Domain Name on Login form

Users can now pre-select their preferred authentication method and domain for a more efficient and personalized login experience.


Changes in VGIdentityServer-Private Mode (performance improvements)

These enhancements optimize the application’s responsiveness and speed.


API Level

Implementation of MFA Enrollment Web-API Functions

  • Send Verification & Validation for EmailAddress and Mobile Number 
  • Register Email Address, Mobile Number

This allows for easy, programmable MFA credential management, significantly bolstering application security.


Integration of MFA in Existing Authentication Methods of API

This integration ensures a robust, user-friendly authentication process without compromising the existing API structure and flow.


Integration of MFA in Existing Authentication Methods of API for PowerBuilder

This feature seamlessly incorporates an additional verification layer into PowerBuilder applications, ensuring secure user access without altering the established API workflows.


Integration of Passwordless Authentication in API for PowerBuilder and Other Authentication Modes

This innovative approach enhances security and user experience by eliminating the need for traditional passwords, instead utilizing secure, user-friendly authentication methods such as biometrics or verification codes.


Postman Changes for all Methods

These changes are designed to simplify the integration and testing of various authentication methods, including MFA and Passwordless authentication, directly within the Postman environment.


7. Update List - Visual-Guard 2020.X

Update list of Visual-Guard

New Features

VG Angular

We have upgraded our framework to Angular version 15. This upgrade enhances performance and security.


API Documentation

We have published new API documentations on Postman. These documentations will aid developers in understanding how to use our APIs more efficiently.


MFA Azure Front Door

We added a “no-store” cache control header to the response of MFA Azure Front Door. This will help to ensure that sensitive data is not stored in the browser’s cache.

WinConsole Repository Connection

The WinConsole can now connect to the VGIdentityServer. This will allow better integration between these two components.

WebConsole Attendance Monitoring

Modifications have been made to the calendar control for tracking attendance hours. This will help to improve time tracking accuracy.


Web Console Role Deletion

 The “Delete Role” option has been moved to the bottom menu in the WebConsole for better ergonomics.


Web Console: Loading Icon

A loading icon has been added to the workflow data monitor in the WebConsole to indicate when data is being loaded.


WebConsole: Workflow Settings Improvement

The last execution time of VGWorkFlowServer has been added to the WebConsole settings. This will allow users to see when the workflow server was last run.


IdentityServer Configuration

Several configuration changes have been made to the IdentityServer and new properties have been added to the WinConsole settings. This allows for more flexible configuration of the IdentityServer.


Angular Documentation

The Angular integration documentation has been updated for Oriolis VG 2019.2. This update will provide more recent information on Angular integration.


VG SAAS UI Update

The UI of VG TRIAL SAAS has been updated to include left-hand margins, clickable titles that open in new windows, a separator below the ProgressBar, and CSS changes on button click. This improves the overall user experience.


VG Runtime

The system has been upgraded to version 4.6. This upgrade brings security and performance improvements.


Password Policy Comment

 A comment has been added for the Auto-Unclock feature in the password policy. This gives users a better understanding of this feature.

Bug Fixes

WebConsole | Monitoring | Graph

The graph display for a 15-month range has been fixed. The graph no longer reverts to only two bars.


Documentation

 Fixed the bug where the eazydocs_get_option() function was not found. This solved an issue with the documentation site’s theme.


Oracle Migration

Fixed migration errors from 2019.2 to 2020.3 in oracle repositories. Users will no longer see error messages when logging in.


VGSecurityRuntime VGUser Creation

Fixed an issue that prevented creating a second VGUser in a new SQL repository without a license. The incorrect error message will no longer appear.


Authentication Modes

Fixed differences in authentication mode selection when adding a new repository in WinConsole and WebConsole. The options will now be consistent between the two.


VG Security Runtime

  • Password Less Authentication Module
  • MFA Visual-Guard for Visual-Guard User

VG WinConsole

  • Add the license MFA

VG WebConsole

  • Improve EventViewer Export to Excel
  • Delete application
  • Add support of Smtp Office 365

VG Identity Server

  • LoadBalancing support
    • The IdentityServer can support the multi-instance
  • Config External Account
  • Support GRPC V1
  • Support GRPC V2

Bugs

  • Improve maintenance operation
  • Fix a bug to connect by IdentityServer
  • Separate Authentication from the Workflow Server

VG Security Runtime

  • Improve create permission for PowerServer
  • Improve VGTrace for the SubIdentities
  • Add VGGroup and advanced functionality in PermissionMatrix
  • Add new VGDistributedTransient entity for the load balancing

VG WinConsole

  • Improve with VGGroup and Advanced options to generate Permission Matrix
  • Add permission Matrix on App , Role, User
  • Create PowerServer permission
  • Reload all components PBTarget
  • Search User use contains by default
  • Add export to Excel on VGGroup and VGRole
  • Improve UI Identity Server
  • Add progress bar when we deploy a repository
  • Add a progress bar when we import the deploy file on the repository
  • Identity Client Entity add the CORS

VG Webconsole

  • Migration to .Net Core 3.1
    • The WebConsole is less time the response, better performance
  • Rename an VGApplication
    • Now, you can rename the application from the VGWebConsole
  • Create Permission for PowerServer
  • Export to excel added on events logs
  • Improve the View permissions with the name
  • Generate Permission Matrix
  • User search use contains by default
  • Generate file configuration
  • See the VGLicense
  • Select the language for WindowsSSO User
  • PowerServer Add relationship between DataWindows / Tables
  • Add Actions of the permission selected
  • Improve the monitoring to make easy selection

Bugs

  • Add Waiting cursor on the monitoring graph

VG Identity Server

  • Create new API
    • ChangePassword()
    • ForcePassword()
    • WriteLog()
    • GetCurrentPermissions()
    • GetCurrentRoles()
    • SetProfileAttribute()
    • GetProfileAttribute()
    • GetAllRoles()
    • Grant and Revoke Role
  • Connect to the VGRepository by SqlServer Load the database list

VG Security Runtime

  • Support of .NET Core
    • We support .net by the new assembly Novalys.VisualGuard.Security.Core
  • Generate Permission Matrix
  • Identity Server Client Connection (HTTPS Mode)
  • Connection between VGSecurityRuntime to VGIdentityServer
  • Integration to PowerServer 2021
  • Identity Server entity
  • Identity Client entity multiple configuration

VG WinConsole


VG WebConsole


VG Identity Server