Secure Active Directory queries using gMSAs instead of password-secured service accounts Since 7.1 the only option for querying active directory domains that require authentication other than the account running BP Server is to provide the details of a service account in the Active Directory Domains configuration section in Sign-on settings Our security policy requires that password-secured accounts have passwords that expire daily.  This is unmanageable in 7.1 as it would require us to update the stored passwords in Blue Prism immediately after the passwords have changed Ideally, we would be able to secure the Active Directory queries with a gMSA Also, add an option to create gMSA user. Currently when we try to add AD user it only list/search the AD accounts, it is not searching the Managed Service account (MSA/gMSA).  -- Get-ADSServiceAccount This will help to run the runtime as gMSA account. ... View more

With resource pools, it is not possible to execute all tasks of a scheduler on the same resource. Example: We have 3 resources in a resource pool (VM1, VM2, VM3). When I create a scheduler, I always have 3 tasks (I am sure this is the case for many customers): - Windows login - process - Windows logout If I now run a scheduler on the resource pool, the following happens: The login process logs into VM1. The actual process is trying to run on VM2. The logout process tries to log out on VM3. We want all tasks from a scheduler to run on the same resource in the resource pool. This is important because of security reasons. We have set it up in such a way that each process has its own Windows user, which has limited access rights to directories etc. ... View more

As we find it in the studio, a filter in the control room is very important and urgent to be implemented. We lost a lot of time for any intervention in the control room il there is a lot of bots implemented. It's very surprising that such functionality isn't present yet ... View more

There are no data visualization tools to help process all the values in the table. In our tables, we normally have hundreds of rows of data and it is tedious to look through all of it without a general idea of the data we have. Hence, we would like to suggest a starting point which is to introduce simple charts and graphs into Interact.  ... View more

The "Mark Exception" action automatically creates a tag if the Exception Reason is not empty. The automatically generated tag has the format: "Exception: {Exception Reason}". The exception reason often contains case-specific data. E.g., "product 523462 could not be found.". Blue Prism then creates a tag from this exception reason, causing our BPATag table to grow indefinitely. ... View more

There is no option to view all the values ​​of an item in the Queue Contents view. Currently you can only see the item key. To be able to analyse the contents of an item, I must start a process and call "Get Next Item". It would be helpful to place a button next to or in the Item Key column that allows you to see the content of the respective item. A list view would be good too, so that you have an overview of all items with the associated item values. Viewing the item's values ​​should be restricted by access rights, as items may contain information that should not be accessible to everyone. ... View more

Currently when installing Decipher Licensing service for v2.1 there are two parts to improve: 1) Hide the password value (or make it visible on demand) when entering RabbitMQ user's password during installation. 2) Extend the characters limitations for the RabbitMQ password and RabbitMQ user values. Currently RabbitMQ and Decipher Licensing do not let though user name with other characters than alphas (issues as in automation most of user names contains alphanumeric values and some special chars as "_", "-", etc.), and the password field can not access special characters at all (only alphanumeric) which is reducing the security layer of whole solution. NOTE: It may be a limitation on RabbitMQ side but as a  business partner, you should be interested in getting this fixed if so. ... View more

Good morning, guys, I hope you're all right. So... Recently I've been talking to some colleagues and we discussed how Golive is done today from automationin productions, we exchanged some ideas and arrived in CICD, So we had the idea why the blueprism doesn't have a native, configurable CICD? This would certainly help in the day-to-day operation and would give more robustness to the tool ... View more

Hello, My context is I'm working with application servers where there might be several clients connected to one database each, or environments big enough that might requires we add application servers to them (so as to not run into the 100 runtimes limit by AS). each environment has its own encryption scheme, and when we set up new servers we'd like to know if the encryption scheme we add in bpserver is the correct one. we have only one encryption scheme by environment, I want to be sure we have the right one, the one already in use for this environment. if I add (incorrectly) another encryption scheme, there will be no error in the client (I won't have the "unresolved key" message), the only way to know I've done something wrong is to get error when launching processes that needs authentication. I would like to get some kind of messages from within bpserver.exe when I set up the encryption scheme, like "the encryption scheme you entered is not the one currently configured on the database", or maybe at least a number of current encryption scheme available on the database. if I add my encryption scheme and I get this number to change, I'll know there's a mistake. I hope I'm clear enough :) (this idea is from ticket #197378) regards, F. Tardy ... View more

Please add subscription for support articles with email notification on changes to be able to follow/watch. The world is changing fast. Support articles need to be created early and modified often. Currently there seems to be no chance to get notified automatically on changes in support articles like "IMPORTANT NOTIFICATION - Security Vulnerabilities - SS&C Blue Prism Enterprise" at Support Center | Blue Prism Portal and "What are the known issues in Blue Prism Version 6.10 releases?" at Support Center | Blue Prism Portal. ... View more

Finding that using the Class Verification and Data Verification sections of Decipher could be improved by adding another button similar to the 'Submit' button to 'Submit and Next' where the next item in the 'Load Batch' filter is retrieved. ... View more

If you're using Blue Prism Hub you must have come across this error. Rather than having a static message for any error "Something went wrong" is definitely a bad idea. All the apps have their logs Hub should have the ability to read the log and display the actual error on screen so the user can understand the issue. Right now troubleshooting the Hub, Interact, BPD, and Auth Server is a cumbersome task. ... View more

Idea: To allow custom port selection between web-client's and RabbtiMQ communication in deployment. Or at least allow pre-selected specific ports such as 5671. Reason: The default use of 5672 port for RabbitMQ and Decipher's web-client is treated as vulnerable and insecure from cleartext authentication mechanism. Detailed explanation: Current setup of Decipher v2.1 is not supporting 5671 TCP port as secure communication channel between Decipher server and Rabbit MQ server components. The use of 5671 port is part of increased security feature to solve vulnerability (as per guidance and reported BP support of this source Vulnerability in RabbitMQ : disable cleartext authentication mechanisms in the amqp configuration - Stack Overflow) . Unfortunately, v2.1, web client supports only 5672 port from RabbitMQ and no other ports are supported. ... View more

When viewing a locked process or object, nearly every function is unavailable.  Zoom cannot be manipulated, text search cannot be used.  Opening action stages does not show given inputs and outputs in the lower pane. Find dependencies is not accessible.  It also hinders mentoring- the developer has an issue and comes to you for help, you can't open the code and look at it coherently because some of the data you need is missing.  This makes joint troubleshooting very difficult, if not impossible.    Request that only modification type actions be prevented when in a view only version of the process/object. Perhaps just remove the "ok" button from opened windows and disable save functionality, but allow everything else (including save as) to be accessible. ... View more

Adding new environment variable is possible by importing a new release but if we want to update the values of environment variable then we have to do it manually. Right now it can't be done by importing the release. Please ignore if its already handled in new version of BP. ... View more

Currently, when setting an LOB value in a process design create web service, a configuration is required to set the value to the max character length of the LOB field. If this is not done, and the value is longer than the max length defined for that LOB field, the service will fail. The design tool should be enhanced to automatically truncate the value to whatever the max length is for the LOB field, so this design configuration is not always required.    ... View more

Enhancement request to have the ability for the system to tell you if the user being disabled is an owner of a case like it does with work in the worklist.  Product Management provided the following feedback as to enhancements in the works:   We have User Admin requirements in play right now and this use case has not been addressed yet. User Admin is undergoing enhancements to support the ability to DEACTIVATE a user ... which is different than just disabling their status. Today, disabled is both a temporary and a permanent availability status. When you intentionally disable somebody ... it is because you want to take away permissions (security, privileges, configurations for various teams - like a case team). We check today to handle assigned work. We don't check on any memberships anywhere else. This is a good use case. ... View more