Release notes

Available from 23 July 2024

 

New features

 

Enhancing the INX+Moodle integration for your workforce’s learning experience

INX+Moodle has been upgraded to Moodle version 4.2.2, which introduces a range of new security improvements and fixes.

 

 

By upgrading, you will also benefit from the new features, enhancements and fixes introduced from Moodle version 3.11 onwards.

Join the waitlist for the INX IGNITION JULY 2024 upgrade now by speaking to your Account Manager.

How does our integration work?

Streamline your training and course management with our INX InTuition and INX+Moodle integration, which provides you with:

• A central hub that defines roles and their compliances, competencies and procedures (CCPs) requirements for both site and operational roles.
• Linked courses with the corresponding CCPs within INX InTuition, with clear distinctions between online and offline refresher course types.
• Course placeholders and procedure courses that are generated within INX+Moodle and aligned with online courses and procedure libraries, simplifying the course creation process.
• Automatic creation of a procedure library within INX+Moodle to link to the latest versions of INX InTuition.
• Automatic enrolment of users in INX+Moodle courses aligned with their role requirements from INX InTuition. This includes a development plan, covering the course and procedures they need to complete online.
• Enrolment and reminder emails to trainees so users are informed of upcoming training courses to be completed.
• Updates to user course progress achievements in INX InTuition.
• Records of competencies and compliance statuses based on courses completed and procedures reviewed.
• Added security improvements and fixes based on upgrading from older versions of Moodle.

In INX IGNITION JULY 2024, we have upgraded INX+Moodle to version 4.2.2 to provide you with a range of new security improvements and fixes. You can find more information on the Moodle website here.

What will this do?

• Access to the latest security benefits in the2.2 release of INX+Moodle.
• Provides your organisation a central repository of our entire workforce’s compliance, competences and procedural records from INX InTuition.
• Ensures all training completed in INX+Moodle 4.2.2 promptly appears in INX InTuition.

What do you need to know?

• You need to have purchased INX InTuition.
• If you have INX InTuition, you will need to upgrade to version 5.17.

What’s excluded?

• Integration of INX InTuition or INX+Moodle with other enhancements or products.

 

Introducing our new security and user management solution, INX Identity

We are proud to introduce our new security and user management solution, INX Identity, designed to centralise how you manage user identities and authentication across your INX Core applications.

 

 

 

INX Identity is now available for our INX Core products, which include:

• INX InControl and INX InControl Mobile
• INX InFlight
• INX InForm
• INX InHealth
• INX InTuition
• INX+Moodle
• INX+Process

A modern and seamless log-in navigation experience with INX Cloud

We have built INX Identity on the foundations of our cutting-edge, cloud-native platform, INX Cloud, to provide your workforce with a modern and seamless log-in and navigation experience.

Your INX Core solutions can be accessed through a scalable and reliable multi-tenanted platform – hosted by industry-leading cloud services provider, Amazon Web Services (AWS) – while ensuring robust data isolation and security between each environment.

 

 

Access the next evolution of user security

With INX Identity, you will unlock the following new features:

• Provide simple single sign-on setup and ongoing support for INX Core, INX InControl Mobile and INX+Moodle using a single connection
• Multifactor authentication can be enforced when using usernames and password log-in credentials
• for username-password log-ins.
• A new, cohesive log-in experience with added security and modern authentication standards:
  • Suspicious IP throttling
  • Bot and brute force detection of unauthorised access
  • Breach password protection
• Supports a range of identity providers, including AzureAD and Okta, through OpenID Connect
• Provide a multi-tenanted log-in experience for contractors
• Send or cancel invites to SSO or username and password users, and view their status, last log-in or connection
• View user authentication profiles including email, sign-up date, multifactor authentication enrolment, last IP address and last log-in date
• Access to our cutting-edge INX Cloud application hosted by Amazon Web Services, featuring:
  • New landing page
  • Enhanced navigation experience by using our chevron menu within INX Core products back to INX Cloud
  • Improved log-in and out experience without relying on incognito or using different browsers. A dedicated log-out link is available and visible within the ‘Logged in as’ section.
  • User invitation management – active and pending invitations, URL invites, access management
  • Centralised user management – search, authentication profile management and role assignment

Both INX Identity and INX Cloud are SOC 2 Type II compliant, demonstrating our commitment to implementing and maintaining the best security practices and controls to protect your data.

What will this do?

With INX Identity enabled, you can:

• Access INX Cloud, built on scalable and reliable industry-leading technology with AWS.
• Protect your organisation from unauthorised access with enhanced security features such as single sign-on, multifactor authentication, brute force and bot detection, suspicious IP throttling and breached password protection.
• Centralise how your system administrators can onboard multiple users and manage user invitations.
• Allow users to reset passwords from within the log-in window of INX Cloud, where they will receive an email link to enter their new password.
• Experience seamless navigation back to INX Cloud using our new chevron menu within our INX Core products.
• Simplify how users can log in or out of your INX Core applications.

What’s excluded?

• Ongoing support of old SSO configurations when INX Identity is enabled. Old SSO configurations will need to migrate over to INX Identity SSO as part of the implementation.
• Access to INX Software applications not purchased by your organisation.
• SSO support for SSRS reports. Access is required through your UMT user credentials.

Considerations

When upgrading to INX IGNITION JULY 2024, adding INX Identity is optional if your organisation has an existing SSO solution. You can either purchase the product version upgrade with INX Identity enabled or the version upgrade only.

 

Improvements

 

Validating Username and LookupName fields to reduce duplicate profiles

We have applied a validation method to the Username and LookupName fields within the User Management pages to identify and rectify duplicate security records.

New ChangedBy field added to audit reports in INX InTuition

We have implemented an audit report in INX InTuition to indicate when records are changed within Advanced Competencies. Our reports will now include a ChangedBy field that will identify the user who changed the record, providing you transparency on record changes.

Security updates to our INX InTuition training API

We are delighted to share that we have applied security updates to our training API. These updates include patches and enhancements to address potential security vulnerabilities and improve the overall stability and reliability of our API, removing the security threats caused by some packages we use in the application.

Synk is a leading security platform that helps us to proactively identify and remediate security vulnerabilities in our codebase and dependencies. By regularly integrating Synk into our system, we ensure our training API remains secure and robust, providing you with a safe and reliable platform for all your training needs.

We are committed to continuously enhancing the security and performance of our products, and these Synk updates are part of our ongoing efforts to deliver the best possible experience for our users.

INX Core application navigation and user experience improvements

We have made a series of improvements to your user and navigation experience within our INX Core products.

With our INX IGNITION JULY 2024 upgrade, you will find:

• Our new, ­printer-friendly product logos
• Consistent descriptive text in our browser tabs so you can easily identify the product you are in and what it does
• If you have INX Identity enabled, you can navigate back to INX Cloud using our new chevron menu from within our INX Core products.

 

Fixes

 

Navigation improvements while using Manage Favourites

When users navigate to Manage Favourites and view list of people within a Favourites List in INX InTuition, selecting an anchor tag link incorrectly directed users to the relevant Person Profile page in a different product.

We have applied so users will be directed to the relevant Person Profile page and remain within INX InTuition when navigating to Manage Favourites and selecting an anchor tag.

Download attachments when navigating to the Attachments tab

When navigating to the Attachments tab within a Person Profile, users were able to select the Download Bulk Attachments button on the page when no attachments were available. This would result in a 500 error. The button will now only be displayed when attachments are available to download.

Performance improvements on the Workflow Requests page

There have been reported latency issues on the Workflow Requests page in INX InTution. The latency has been improved by implementing four indices on the Workflow Request and Workflow Request Stage database tables. This fix has delivered noticable page performance improvements.

New file extension validation so .exe files are not permitted for upload

We have enhanced security within INX InTuition, where users were reporting that they were able to upload .exe files into the documents table.

To mitigate this potential security risk, we have implemented a file extension validation. When users attempt to upload files, INX InTuition will validate the file extension and .exe files will not be permitted to be upload.

This strengthens our security measures within INX InTuition, safeguarding against potential threats posed by unauthorised file uploads.

Update name or location of a Procedure to reflect in Moodle

When users successful updated the name or location of a Procedure within the Procedures folder in INX InTuition, the corresponding change was not reflected in the Moodle interface.

We have introduced a warning message to notify users about this limitation as a workaround to direct code changes not being feasible in Moodle.

When updating the name or location of a Procedure, users will now see the following warning message:

Warning! Any changes to Procedure Name or Folder Location will not be reflected in Moodle. Please make these changes via Moodle to ensure data integrity.

The warning aims to ensure data consistency and integrity between INX InTuition and INX+Moodle by prompting users to replicate these changes in Moodle when necessary.

Profiles with empty Network or Moodle usernames excluded from sync process

An error would occur during the sync process between Moodle and INX InTuition if any profiles contained an empty Network or Moodle username field. Profiles with an empty Network and Moodle username field will now be excluded from the sync process, and profiles will only be synced when they contain a value in either of those fields.

Validation and removal of unsupported characters when syncing course or procedure names from INX InTuition to Moodle

An error was reported when syncing a User (during the scheduled task ‘Synchronise users task’) and Course (during the scheduled task ‘Synchronise external database enrolments task’) from INX InTuition to Moodle.

This was caused by invalid characters or null values within the Name or MoodleUsername fields. The MoodleUsername field is automatically genrerated using the First Name and Last Name fields.

When a course or procedure is created or updated within INX InTuition, a validation of the fields will occur automatically to remove any unsupported characters. We have also implemented a warning message for users when they attempt to save with an empty field:

Warning! Please enter at least one alphanumeric character in Course Name. It cannot be left empty.

Improved user synchronisation performance between INX InTuition and Moodle

Users reported experiencing slowdowns and issues particularly when syncing a large number of users.

We have developed a robust solution that significantly improves the user sync process. We have introduced a precalculated table to store the list of users to be synced with Moodle. This approach ensures the user sync operations run efficiently, even when dealing with a substantial volume of user data.

Users can now expect faster and more reliable synchronisation between INX InTuition and Moodle.