MyFileGateway interaction when PEM/PCM is installed
This affects businesses who use "MyFileGateway" to allow their external customers to upload files. Have a customer need for MyFleGateway, when integrated with PEM/PCM to pull file transfer upload success/failure and/or routing information from PCM...
User challenge questions and challenge-response system needs to be modified
01. Answer to each challenge question must have at least three (3) characters. Application which implements challenge and response mechanism must enforce the minimum length of the response as 3 characters. STRIDE Threat Type(s) : Spoofing, Technic...
Information systems are not to allow users to compose challenge questions.
Challenge questions must be chosen from an EY-approved list. Information systems are not to allow users to compose challenge questions. During a challenge interaction, the challenge questions are to be selected at random by the information system ...
The user’s current password must be validated while changing challenge questions and response phrases.
The user’s current password must be validated while changing challenge questions and response phrases. Authentication is required for changing a user's challenge and response phrases.
When trying to send a file to the customer, it shows in PCM that the file was successful. See screenshot #1. When you View Activity, it shows that the file/s were sent to AS2. See screenshot #2. However, the AS2 connection is not working. When tes...
User would like the ability to see the status updating with the appropriate status once a file has been reprocessed. Example when a file has been reprocessed user would like to see the different stages the file is flowing though (Processed, Timed ...
The Partner Community Manager CM_CoreProcess has hard coded typing maps which limits our ability to extend functionality of the framework
The latest version of PCM comes with the typing map list in CM_CoreProcess hard coded. This means adding, removing and updating the typing list requires modification of a built in process. Not only will this BP be overwritten in future losing all ...
In PEM CM you can add a SEAS server for the authentication in the application.yml file using the properties: seas:
auth-profile:
host:
port: However, only one SEAS server can be specified. There is no way to add an alternate SEAS server for h...
PEM application should have a user interface option for data deletion for all the components
In order to conduct penetration testing and identify vulnerabilities, it is sometimes necessary to create specific resources to assess how these vulnerabilities could be exploited. However, it is crucial to emphasize that the data or files generat...
Some of REST APIs for IBM products have token authentication implemented. I.e., call a sign in API to get a token, and then use the token in a HTTP Header for all other API calls.
Example Products:
IBM Sterling Secure Proxy: https://www.ibm.com/su...