PASK version 2.0.0 has been enhanced with a number of significant changes and improvements that significantly improve its functionality. Below are the most important of these.

Changing the authorization server to Keycloak

Since version 2.0.0, user account management is handled by the Keycloak module. This change allows users to access the following features:

• Identity Provider (IdP) integration: Enables authentication via external identity providers such as Google, Active Directory (AD) or Entra ID.
• Multi-Factor Authentication (MFA): Enhances the security of PASK by adding multi-factor authentication (MFA) capabilities.
• Automatic provisioning of permissions: allows you to automate the granting of permissions in the PASK system using the Keycloak connector or an existing AD connector.
• Flexible permission management: allows you to model roles and permissions in the PASK system according to individual user needs.
• Permission transparency: logged-in users can view information about their permissions, which increases transparency and makes access management easier.

Keycloak – administration panel

New dashboard look and features

In version 2.0.0, the dashboard has been visually refreshed, and each user can now individually configure their dashboard. Several new widgets have also been introduced:

• My profile: basic information about the logged in user.
• My Orders: easy access to active orders placed by the logged-in user.
• Automated processes: quick view of the status and last run date of individual PASK processes.

PASK User Dashboard

Providing REST API

The latest update also enables integration with other systems and applications via REST API. Supported queries include:

• Downloading the Identity List
• Retrieving identity details
• Downloading accesses of the selected person
• Downloading a list of resources
• Retrieving resource details
• Retrieving the list of roles in a given resource
• Placing an order

Detailed API specifications can be found in our technical documentation.

Other improvements

The new version also introduces a number of smaller but equally important improvements:

• Ability to comment on realization tasks: users can now add comments to completion tasks, similar to comments on approval tasks.
• Marking expiring roles: The system notifies you when business roles are about to expire, which helps you manage permissions.
• Alternate Resource View: Allows you to change the display of resource information in a drop-down list.
• Business Role Verification: Informs you about potential business role conflicts when placing orders.
• Improved my tasks view with additional data and improved table formatting.
• View historical versions of acceptance/realization form definitions.