BeyondInsight and Password Safe 26.2.2 release notes

❗
Important
This maintenance release supersedes all other previous 26.2.x releases. To see prior release versions, see Release notes page.

🆕 New features

This is a maintenance release. There are no new features.

✨ Enhancements

This is a maintenance release. There are no enhancements.

🛠️ Issues resolved

Product Area	Issue Description	Issue Resolution
API	In environments with a large number of sessions, an unfiltered request to the public API GET Sessions endpoint may never finish and keeps database CPU usage high. This slows the web console and session launches, especially when the API user belongs to the built-in Administrators group.	Requests to retrieve sessions through the public API now complete in a reasonable time on large session datasets, and no longer cause sustained high database CPU usage.
API	In environments with many Smart Rules, managed account API requests take several minutes to respond, even though BeyondInsight saves the change right away. Integrations with short timeouts report a failure, and a retry reports that the account already exists.	Managed account API requests now return promptly. Response time no longer depends on the total number of Smart Rules in the environment, and Smart Rule behavior is unchanged.
Smart Rules	Asset Smart Rules with User Account Attribute criteria slow the web console and keep database load high while they process. These Smart Rules often time out and fail to finish, and the problem grows with the number of assets.	The User Account Attribute criteria now evaluates only the assets selected by the Smart Rule's preceding criteria, reducing processing time and database load. Smart Rule results are unchanged. For best performance, place the User Account Attribute criteria after other criteria that narrow the asset list.
Endpoint Privilege Management	When BeyondInsight receives a high volume of Endpoint Privilege Management events, new assets take days to appear in the console or never appear. Events from existing assets block information from newly reporting assets.	Newly reporting Endpoint Privilege Management assets are now prioritized, and events are no longer skipped, so new assets appear in the BeyondInsight console reliably and in a timely manner.
SCIM API	Creating an Active Directory user through the SCIM API fails with an internal server error when the request includes a password. This happens if the BeyondInsight password policy minimum length differs from the earlier 14-character default.	BeyondInsight password complexity checks are no longer applied to Active Directory users created through the SCIM API, because their passwords are managed in Active Directory. These users are now created successfully.