🎉 OneTrust 6.27 Released!

We are excited to announce the following enhancements in the OneTrust Developer Portal as part of OneTrust 6.27.

👍

For more information about the release and our product updates in the OneTrust application, refer to the OneTrust Release Notes page. Learn more about environment maintenance on the Current and Historic Maintenance page, and subscribe to proactive environment notifications on our System Status and Scheduled Maintenance page.

❗️

API Keys created in the Integrations module prior to OneTrust 6.14 (known as Legacy API Keys) will reach end of support on January 31, 2022. Any customers leveraging these Legacy API Keys to authenticate OneTrust APIs or any integration workflows will be affected.

Customers should update any applications or webhooks leveraging these Legacy API Keys with one of the OAuth 2.0 methods OneTrust offers to prevent any interruption of service. If you are not making use of Legacy API Keys, no changes are required. For additional details, see End of Support for Legacy API Keys.

General

  • Exclude List of User Group Members: Updated API to include the excludedAttributes=members query parameter. This new parameter allows you to exclude the list of user group members from the response when retrieving details on a specific user group.
  • Optional User ID in Request Body: Updated the Modify User API to make the id attribute optional within the request body. This change eliminates the need to add the user ID twice when making this call given that the id is required in the path.
  • Optional userType Attribute: Updated the Add User API to make the userType attribute optional within the request body. When not specified in the request body, users are automatically assigned as Internal. This change improves the Admin experience by eliminating the need to use extension attributes within their identity provider (IdP).
  • Response Code Update: Updated the Add, Remove or Replace Users in a Group API response code to 204 (No Content) in accordance with SCIM API standards.

Privacy Rights (DSAR)

  • Improved Failure Notices: Updated the API to indicate the cause of request creation failure in the exceptionDecscription parameter, if the initial asynchronous request creation call fails.