Take a look at the new features!
AI
NEXIS 4.2 introduces significant enhancements in the area of explainable artificial intelligence. The new functions enable improved analysis of identity and entitlement data as well as more efficient management of compliance processes.
Detecting anomalies
- Identification of inconsistencies and anomalies in identity data
- Ensuring a clean database for maximum compliance
- Visual highlighting of inconsistencies for faster analysis
Visualization of critical discrepancies
- Highlighting of system entitlements and master data anomalies
- Support for well-founded decisions through targeted highlighting of relevant anomalies
- Efficient correction options through intuitive user guidance in the recertification process
Intelligent assistance with NICO (Nexis Intelligent Copilot)
- Support for recertifications by providing context-based, AI-supported recommendations
- Detection of potential risks through data-driven analysis
- Improving security in the management of identity and access rights
- Dashboard-based integration for a central overview and control
NEXIS 4 as SaaS – Flexible Cloud Offering for Simplified Deployment
With NEXIS 4.2, a Software-as-a-Service (SaaS) version is now available in addition to the existing on-premises, cloud, Kubernetes and Docker-based deployment options. Companies can therefore operate NEXIS 4 entirely as a managed service and benefit from simplified deployment, automated updates and reduced maintenance costs.
Fast deployment without infrastructure costs
- NEXIS 4 can be used as a fully managed SaaS offering, freeing up internal IT resources.
- It is provided in a secure, scalable cloud environment without the need for an in-house infrastructure.
Automatic updates and maintenance
- All necessary security patches, upgrades and maintenance are carried out automatically without customers having to intervene.
- New functions and improvements are available immediately.
High scalability and flexibility
- The SaaS solution adapts dynamically to the company’s requirements and enables simple scaling according to demand.
- Both small and large organizations can benefit from a high-performance and reliable environment.
With the introduction of NEXIS 4 as SaaS, companies receive a powerful, secure and maintenance-free solution that ensures rapid implementation and smooth operation – without any infrastructure costs of their own.
Templating
The new templating feature in NEXIS 4.2 enables efficient deployment and administration of role management processes. By using predefined templates, workflows, dashboards and end-user services can be rolled out with minimal configuration effort. It is also possible to create empty templates in order to bundle and flexibly structure individual processes.
Main features and benefits
- Predefined process templates: Standardized templates for role management reduce the setup effort and ensure uniform implementation of proven processes.
- Creation of empty templates: In addition to the predefined templates, you can create your own templates to flexibly bundle individual processes and structures.
- Fast implementation: The entire role management process can be rolled out with just a few clicks thanks to the minimal configuration steps required.
- Automated setup: The templates not only include workflows, but also the associated end-user services and dashboards, so that all relevant components are provided directly.
- Customizable configuration options: Although the system is highly standardized, targeted adjustments can be made to reflect company-specific requirements.
- Optimized governance: The templates ensure that proven security and compliance policies are implemented correctly from the outset.
With the combination of predefined and customizable templates, the new templating feature offers both standardization and flexibility and enables fast, consistent and tailored management of role processes.
SoD Matrix
NEXIS 4.2 introduces the interactive SoD matrix, which enables companies to manage authorizations and system entitlements more efficiently. In contrast to traditional authorization guidelines, the SoD matrix works at a higher level of abstraction and uses SoD classes as a basis. This significantly simplifies the definition and maintenance of rules.
Main features and benefits
- SoD classes as a basis: System entitlements are organized in structured SoD classes (e.g. market / back office), which enables targeted rule definition and flexible adjustments.
- Matrix-based administration: Rules can be defined and adjusted via a visual matrix, ensuring a clear overview and intuitive configuration.
- Definition of exclusions: Within the matrix, exclusions can be defined at application level or across systems to specifically avoid critical combinations.
- Criticality control: The SoD matrix enables a granular assessment of risk levels and criticality so that companies can implement differentiated security measures.
- Extended compliance support: Detailed audit logs and reports help to fully comply with regulatory requirements such as SOX, MaRisk and VAIT.
The new interactive SoD matrix not only makes the management of segregation of duties more efficient, but also more transparent and flexible. This reduces manual effort, improves governance and increases security within complex authorization structures.
Access Model Optimization
With NEXIS 4.2, Access Model Optimization has been comprehensively revised and is now directly available via a central dashboard card. As a result, the optimization of role structures is not only more present, but also much more intuitive to use. An intelligent algorithm automatically analyses existing roles and role types, identifies optimization potential and suggests targeted improvements. In addition, the management of model restrictions has been optimized so that they can now be configured more easily and tracked more transparently.
Direct availability via dashboard
- Access Model Optimization is now available as a central dashboard card and provides a quick overview of optimization options.
- Administrators retain full insight into existing restrictions and optimization proposals.
- Changes to role concepts are clearly documented to ensure long-term governance and compliance.
Automated identification of optimization potential
- The system analyses existing roles and role types and identifies inconsistencies or potential for improvement.
- Based on these findings, specific suggestions are made for adapting the role structure, assignment logic and categories.
Dynamic management of role types and categories
- Role types and categories can now be freely created, deleted and restructured.
- This allows role models to be managed intuitively and adapted flexibly without complex manual interventions.
These improvements make Access Model Optimization simpler, more transparent and more efficient. The central administration via the dashboard, the more flexible adaptation of role types and the optimized model restriction management ensure a clearly structured and compliant role architecture.
Access Model Discovery
The new Access Model Discovery function uses artificial intelligence to model role models more efficiently and precisely. By analyzing existing authorization structures, optimal role models are created automatically, making the management of identities and access rights much easier.
- Automatic identification of role patterns: Existing authorization structures are analyzed to identify and optimize recurring patterns.
- Optimization of role architecture: Intelligent algorithms use relevant attributes to generate a consistent and efficient role structure.
- Reduction of manual effort: The automated creation of role models minimizes administration effort and reduces sources of error.
- Flexibility and adaptability: Dynamic adaptation of role models to changing business requirements.
Workflow Engine 2.0
NEXIS 4.2 introduces the Workflow Engine 2.0, which offers improved control of request processes and an intuitive visual scripting function. This makes it much easier to create, manage and automate workflows.
RequestFlows – Bundling and coordination of requests
- Higher-level request workflows enable the bundling and central control of several individual workflows.
- Requests from submitted end user services can now be summarized and coordinated to ensure better traceability and efficient processing.
- This structure reduces complexity, improves transparency and ensures consistent approval and decision-making logic.
Visual Scripting – Intuitive workflow configuration
- Visual Scripting has been integrated wherever scripts can be stored or written.
- Instead of writing complex code, scripts can now be created intuitively via a graphical interface.
- This significantly increases usability and makes it easier for less technically experienced users to customize and manage workflows.
With these improvements, the Workflow Engine 2.0 offers more flexibility, clarity and user-friendliness and enables significantly simplified process control.
Admin Redesign
With NEXIS 4.2, the admin interface has been further revised to provide a clearer structure, consistent user guidance and simplified configuration. Functions have been specifically merged, while others have been highlighted to ensure a better overview and faster access. A central element of this redesign is the consistent use of the slider design. Detailed information and configuration options are now displayed directly in the main view, eliminating the need to switch pages. This significantly improves user-friendliness and enables more efficient navigation.
- Consistent slider design: All administrative areas have been converted to the slider design. Detailed information can be called up directly from the main view, enabling more efficient navigation.
- Consolidation of functions: To simplify administration, several settings have been merged. For example, System Status and System Settings as well as the Single Sign-On configurations have been combined to reduce redundant menu items.
- Revision of the data import: The data import has been fundamentally revised and now offers significantly improved clarity and intuitiveness. Users can import data faster and with fewer errors, as the entire process has been optimized and made more transparent.
- Highlighting of central functions: While some areas have been merged, others have been purposefully made more present. These include Backup & Restore, which now offers improved visibility and easier handling, and About & License Information, which provides faster access to version and license details.
- Restructuring of the project settings: The project settings have been divided into clearly delineated areas to allow for more targeted configuration. These include Basic Settings, Advanced Settings, Login Lock, AI Configuration and Entity Cleanup. This division simplifies administration and allows adjustments to be made more efficiently.
- Increased user-friendliness: By reducing caching and eliminating unnecessary navigation, configuration work has been significantly accelerated.
With these improvements, the new admin redesign ensures easier handling, reduces the configuration effort and provides a clearer structure for administrative activities.
Delta Import
NEXIS 4.2 introduces the Delta Import feature, which allows data to be updated in a targeted and resource-saving manner. Instead of performing complete data imports for all applications, deltas can now be imported in a targeted manner in order to apply changes flexibly and efficiently.
Main features and benefits
- Import of changes instead of complete data imports: Only the changed or new data is imported, which improves performance and conserves system resources.
- Application-specific control: Deltas can be defined at application level so that only the relevant applications are updated without affecting other systems.
- Faster synchronization: The targeted processing of changes significantly accelerates the updating of identity and authorization data.
- Minimization of downtimes and load peaks: As full imports are no longer necessary, the system load is reduced and ongoing operations are less affected.
- Improved flexibility: The delta import can be carried out at any time without having to wait for the next full import, which enables authorizations to be adjusted promptly.
The Delta Import feature makes the management of identity and authorization data much more efficient and flexible. Changes can be applied selectively and with minimal effort, reducing synchronization times and optimizing system performance.
Further Features
- Statistics Monitoring – Allows the monitoring of entities over time and displays changes in diagrams, e.g. the development of the number of employees in a department.
- Corporate Design Wizard – Enables quick adaptation of the UI to the corporate design with a few central settings for colors and fonts.
- Rich Text Editor – New form category that enables formatted text input and improves usability.
- Rule Browser – Rules can now be viewed and edited in the Analytics area to make role modeling more flexible.
- Entity Staging – Allows the staging of individual entities between different environments.
- NEXIS 4 Staging – Objects such as forms, workflows, dashboards and policies can be migrated between environments.
Technical Changes
- Java 17 is required.
- PostgreSQL 16 is recommended.
- Tomcat 10.1 is still required as the application server.