Status:
Under Consideration
Submitted on
22-06-22
11:48 AM
Submitted by
ssokal
on
22-06-22
11:48 AM
Parent Ticket - AWD-42901
Add the ability for AFT to communicate with S3 using the native EC2 profile rather than specific keys configured in the aftservice.properties file. Ticket AWDPS-1656 has a code version available to do so by using a flag in the properties file named s3aftadapter.useDefaultProvider. This removes the need to have a system user in AWS specifically for AFT. This was originally identified as part of the SS&C Cloud Security Review.
A review needs to take place to determine whether the communication protocol has been in the design up to now. The fact that this has had to be developed by PS states it hasn’t been. Description on the Dev ticket AWDPS-1656 :-
We have an issue that occurs every time AWS make a change to their certificate chain for secure connectivity to S3. We currently use the S3 AFT Adapter provided by base product and its approach assumes the AFT is installed on client site and is connecting remotely to S3, therefore requires all the AWS Certificate chain for S3 connectivity to be loaded into the Java Trust store.
This means any time there is a change to the certificate chain we get connectivity issues, most commonly AWS make intermittent changes deep in the chain, which then manifest as intermittent connectivity issues to S3.
We have had this on several occasions, once with Vitaity and very recently with LV and these result in Level 2 incidents that are challenging to diagnose and resolve.
However we are deployed into AWS and the EC2 instance has a default provider chain on the machine that enables access to S3 using IAM config as AWS level, so we should just be able to utilise the machine level access privileges to talk to S3 and this will remove the fragility/risk that comes about when loading certificate chains into the Java Trust store.
Moving to the EC2 level authentication also removes installation, upgrade and certificate maintenance complexity.
See the following link as an outline of how the AWS Java SDK can leverage the default certificate chain.
https://docs.aws.amazon.com/sdk-for-java/v1/developer-guide/java-dg-roles.html
Steps to Recreate- Try to use AFT with S3 using the native EC2 profile fails
Component - AWD|File Transfer (AFT) Affects Version - AFT 6.0
... View more
Many times when calling a service, the wsdl used to configure the client call and the eventual endpoint for the call are different. In these cases, we should be able to override the endpoint. In Blue Prism, the endpoint in the wsdl used in configuring the SOAP Web Service is what is used and there is no way to change it. We would like an option to Override the endpoint on a SOAP Web Service.
... View more
Status:
Under Consideration
Submitted on
17-06-22
03:54 AM
Submitted by
CarrieMinton
on
17-06-22
03:54 AM
No Customer Care of JIRA ticket has been opened. The ask by Morgan Stanley is to have SS&C update Communications to use a 3 rd party certificate instead of the self-signed certificate. The Morgan Stanley CISO team believes this is a security risk and should be remediated by SS&C with either a short-term solution if we can't provide a long-term solution this year. The short-term solution could be to rotate the certificate in the SS&C Hosted environment by November 2022.
Risk - Self-signed certificates introduce a risk of server impersonation attack.
Remediation - Vendor must ensure that the certificate used for authentication is not self-signed and is actually signed by a Trusted third party Certificate Authority.
Risk- Not rotating the certificates introduces the risk of certificate keys becoming “stale” and increases the likelihood that they will be compromised or increasing the period for which compromised credentials are valid.
... View more
Chorus Customer Care Ticket: CS0011514 Need the ability to sort or put in alphabetical order variables, inputs or outputs in a configuration role.
... View more
Currently, till version 3.2 of bp capture, only window and UIA mode are supported. this idea is for inclusion of browser mode as well which will ease development for web based application.
... View more
We have noticed that the LAM templates provided in the Blue Prism Portal in the documentation area feature quite different roles than are preconfigured in the Blue Prism software itself. This doesn't make any sense at all. When creating a LAM for an organization and planning it with the template, you will afterwards have to adjust all the technical roles in Blue Prism itself so they fit the LAM template. It is not just that the access rights of the roles differ between the template and the software - there are completely different roles! This means a lot of extra work and just doesn't make sense. Please consider aligning the template with the reality in the software in the future. Template Reality in the software
... View more
In Doc split, there is an option to assign a newly created work item to a user. However, if the new work item is associated with a process that runs an automated service as the first step, the new item will not assign to the selected user because the SYSTEM id gets the assignment in order to run the service. Somehow Doc Split needs to handle this, as right now it gives the false impression this will work. The purpose for running the service is to create a relationship between the newly created item and the case object where doc split was activated, because there is no option to attach the newly created work item to that case. If that option were available, then the need to run the service (in this instance) would not be needed, and then the assign feature would work.
... View more
Take away the restriction of having to choose the version of a sub process that is invoked. Add an option for "latest deployed version" Will reduce the need to redeploy process models when a new sub process has been deployed.
... View more
Status:
Under Consideration
Submitted on
13-06-22
10:36 AM
Submitted by
smsjames
on
13-06-22
10:36 AM
Add a new function that provides a date difference option You should be able to choose whether to do a minute/hour/day/month/year function. This is such a common requirement when building processes and the current approaches being taken by consultants require a ridiculous number of workarounds.
... View more
Status:
Under Consideration
Submitted on
13-06-22
10:34 AM
Submitted by
smsjames
on
13-06-22
10:34 AM
Provide the capability to turn on debugging when building process models so that the values being created in non AWD LOB fields can be shown. It is incredible difficult to track the fields that are being created/used in complex presentation and automation services. This should be a process level option that can be turned on and off as models are built.
... View more
Status:
Under Consideration
Submitted on
13-06-22
10:28 AM
Submitted by
smsjames
on
13-06-22
10:28 AM
Allow the process map to display the following additional activity TASK types.
Send
Business Rule
Script
They should all be linked like a Service Task to a "Automation Service". This allows for a cleaner and more descriptive process map, where the key purpose of the task can be clearly identified....
... View more
I would like the possibility to set a creation time as parameter when adding to a queue. This is due to possibility to prioritize of items in the queue based on real creation date, rather than time of reading the incoming item behind the process. This way, a process can run once a day and still work first in, first out, even if the input list is not ordered by creation date.
... View more
Status:
Reviewed
Submitted on
08-06-22
01:28 PM
Submitted by
Tejaskumar_Darji
on
08-06-22
01:28 PM
Hello Team, I've feedback for BPU and PDF guides. There are many courses on BPU that just shows slides of the PDF guide (e.g. BPC courses) A course should be video material with dynamic components, voice-overs, graphics, and charts to explain the tool and concept easily. Just having PDF guides broken into chapters and having it as a course does not sound to me like a good idea. If it is just a PDF/Slideshow for a user to read then he/she can simply read the PDF guide outside of BPU. We have many interactive video courses as well e.g Decipher Training, Blue Prism Foundation Training, etc. on BPU which are great. My point here is we should have a clear delineation between video courses and PDF guides and it should not be mixed up on BPU. All SCORM video courses should be on BPU. All the PDF guides are on a separate portal.
... View more
Status:
Under Consideration
Submitted on
06-06-22
07:28 PM
Submitted by
lmkudrick
on
06-06-22
07:28 PM
Client has several automated service models that have been deployed that are tied to Communications letters. They cannot delete the letters in Communications because it is tied to an automated service model. The automated service model is no longer being used but they cannot “undeploy” it or delete the automated service model which would allow them to delete the Communication letters.
Clients need the ability to “undeploy” or delete an automated service model.
Similar to a process model clients need the ability to ‘undeploy’ or delete and Automated Service Model. The obsolete service model prevents the client from deleting letters that are no longer needed in the Communications tool.
The client no longer needs the letters and are not able to clean them up. If the service model is not being used, we do not need to keep it on the system. An end user could select the letter even though they are no longer valid and send an incorrect letter. It also slows down productivity by having to look through letters that are no longer needed.
(CS0010287)
... View more
Hi Team, I think we should be having the community version of the product as it will increase the interest of the new developers/students and also good to test the latest/existing features before directly moving for Upgrade. This feature is provided by most of the RPA tools and Blue Prism should also think about it.
... View more
I'm currently working in BP 7.0. Although there is the option to save filtered views in the Control tab, the list of saved filters just piles up under Session Management on the left-hand side. There is no way to organize this list. I propose making a way to organize this list to the user's specifications. A drag and drop method would work, or even a basic sort on A-Z would be great. If an A-Z sort was implemented, then I could rename my filters to display in the order I want because they would automatically change order to show alphabetically. Right now the order is simply 'oldest to newest' and you can't rearrange the list of saved filters. This makes it difficult to find filters when you have a decent number saved that you have to skim through.
... View more
In the CSV export generated from the control room for the queue content, we don't get any column that tells the state of the item and whether the item is in the Pending / Exception / Completed state. Of course, there are some workarounds to segregate items as per the state but the blue prism should be having a specific column for this in the CSV export. Also, this will give businesses a better clarity on queue content to understand Pending / Exception / Completed items and eliminate manual efforts in data manipulation.
... View more
Status:
Not Planned
Submitted on
01-06-22
08:06 AM
Submitted by
Tejaskumar_Darji
on
01-06-22
08:06 AM
We should have an option to adjust logging for the process in the import window itself. So when the user imports the process it asks to keep the logging same or change it to Disable/Errors only etc. before finishing the Import. So let's say a user gave me a process with 100% logging and I can change logging for my machine to 0% logging by selecting the option during the import window itself and as result, I'll import the process into my machine with this new log setting.
... View more
In BPv6.10 we have setup a multi-team-environment and access to certain folders is restricted; Sometimes users are getting an error message when trying to run a process in Control Room: "Failed to create session on [...] Cannot create session as user does not have execute permission on one or more of the processes dependencies". It would be very helpful to include in this error message which dependencies the user does not have permission for so that it can be fixed quickly.
... View more