Changes

''Main Article: '' [[Multi-Factor Authentication|Multi-Factor Authentication]]

Multi-factor authentication (MFA) is enabled for all systems by default. If you have already turned on MFA in your SmartSimple Cloud system and have assigned roles to a single-use verification code sent by email, this enhancement will NOT change your existing settings. If you do not have MFA set up, we will be enabling single-use verification code by email for all users. This will be indicated by an 'Everyone' role in the setting called Roles with Verification Code via SMS and Email.

Time-based One-Time Password (TOTP) settings will NOT be affected. You will have the ability to adjust which roles are assigned.

Added the ability to search references in a report. This feature will check to see if the report has been referenced via a URL or used in syntax. To see this feature, go to Menu Icon > Reports > Edit a report > Click the Search Reference icon button in the top action bar. <!-- 109038 - Search reference for Reports-->

<!-- 127215 - Group Email Recipients-->

Added ability to control the edit permission of the address type dropdown on an address record through a new standard field. To use this feature, go to Global Settings > Users or Organizations tab > Address Types > Edit an address type > Click the Standard Field tab in the left-hand navigation > Edit an address standard field > Permissions & Availability tab. This controls which users or organizations with multiple addresses can change the address type dropdown in the address book. <!-- 135051 - Where is the Address Book Template configuration?-->

<!-- 137877 - Option in autoloader to send email to the initiator-->

Added the ability to search for a field when mapping fields to columns. To see this feature, go to Menu Icon > Autoloaders > Edit an autoloader > File Layout tab. When a field dropdown is selected, there is now a search box to find the field you are looking for. <!-- 136377 - Autoloader field mapping improvements-->

Added additional check for invitations to warn users if they attempt to send out a duplicate invitation. <!-- 143738 - No duplication check on Invitations-->

<!-- 132313 - New file uploader GUI to replace YUI-->

Updated the hashtag library so that role-based permissions may be set so that users can access the library directly from the main menu. To set this up, go to Menu Icon > Global Settings > Security tab > System Feature Summary > Menu tab > Add desired roles to Hashtag Library – Menu Access. Roles added to this setting will see a link to the hashtag library under the Tools section of the main menu. <!-- 137932 - Move the Hashtag Library-->

Added ability to batch assign roles to multiple users and assign categories to multiple organizations. To see this feature, go to Menu Icon > People or Organizations > Select the desired users/organizations > Click the Batch Update button > Select the Roles or Categories option from the left-hand menu > Select the desired roles/categories to assign. <!-- 142287 - Add ability to batch update organization categories and user roles-->

Added additional checks to the System Performance Summary to flag any SmartFields that have been configured to reference fields that have SmartFields syntax with the list syntax. <!-- 132760 - Flag SmartFields configuration in the performance audit-->

Added the ability to create notes on items in the System Security Summary. To see this feature, go to Menu Icon > Global Settings > System tab > System Security Summary > Click the Add Notes icon button located to the right of each line item. In addition, another tab was added to the System Security Summary called Global Administrators which lists all the Global Administrators in the system. <!-- 138108 - Notes in System Summary--><!-- 139980 - Easily see all users flagged as global admins-->

Updated the size of logos in the headers of external pages to have a maximum height of 56px with no extra left-hand side padding.

Updated the look of the API page for better visual contrast. Additionally, API response codes were changed to reflect industry standards. An HTTP 429 response code will be shown when the API call limit is reached. <!-- 137469 - update look of API Page--><!-- 145883 - York API - 429 response code not received after 1000/hour limit-->

Added additional checks to mitigate security risks from recent pentests. <!-- 145648 - Pen Test findings & Mitigation Assistance Request--><!-- 145662 - Netcraft pentest vulnerabilities 2023-02-03--><!-- 145030 - Global Settings - Import & Export Wizard - Security and general issues-->

<!-- 139780 - Deprecate the Menu icon Header font setting-->