Partner Management System Revamp 1.3.0-beta.4
Release Name: Partner Management System Revamp
Release Number: 1.3.0-beta.4
Release Date: 4th February, 2026
Overview
PMS Revamp v1.3.0-Beta4 introduces key enhancements focused on partner onboarding expansion, role registration simplification, security configuration flexibility, and proactive notifications. This release adds support for a new ABIS partner type, streamlines Partner Admin and Policy Manager onboarding, enhances OIDC client configuration, improves API key lifecycle management, and introduces MISP license expiry notifications for better operational visibility.
Key Features & Enhancements
1. ABIS Partner Onboarding Support
PMS now supports onboarding of a new partner type — ABIS (Automated Biometric Identification System) Partner — through the Partner Admin role.
With this enhancement, a Partner Admin can:
Create new ABIS partner entries
Upload and re-upload partner certificates
Link relevant policies to the ABIS partner
Note: Before onboarding any partner (including ABIS partners), the upload of Root CA and Intermediate CA certificates is a mandatory prerequisite. Partner onboarding cannot proceed unless this trust chain is already configured in PMS.
Important Note for ABIS Partners: While linking policies for an ABIS partner, only Data Share policies are applicable and should be selected.
2. Updated Partner Admin & Policy Manager Registration Flow
The registration flow for Partner Admin and Policy Manager roles has been simplified.
From PMS v1.3.0-Beta4 onwards, Partner Admins and Policy Managers:
Are no longer required to self-register via the PMS UI
Can be directly created in Keycloak
Can be assigned the Partner Admin or Policy Manager role in Keycloak
Can use the same Keycloak credentials to log in directly to the PMS portal
This change reduces onboarding steps, eliminates redundant self-registration, and centralizes role management within Keycloak.
Note: This updated registration flow is applicable to PMS v1.3.0-Beta4 and later versions only.
3. OIDC Client Enhancement – Additional Configuration Fields
The OIDC client creation flow has been enhanced with a new “Additional Information” section in the UI.
This section allows Relying Parties (RPs) to:
Configure additional parameters
Customize OIDC client behavior with greater flexibility
Support advanced integration and use-case specific requirements
Compatibility Note: The Additional Information section is editable only when PMS is integrated with eSignet version 1.6.2 or above. For PMS deployments using eSignet versions lower than 1.6.2, this section will be visible but not editable.
4. API Key Expiry Date Management by Partner Admin
An enhancement has been introduced to allow editing the expiry date of API keys by partner admin. With this change:
Partner can continue using the same API key for an extended period
The expiry date can be updated as it approaches, without regenerating a new key
This reduces operational overhead and improves key lifecycle management
5. MISP License Key Expiry Notifications
PMS now provides proactive notifications for expiring MISP license keys, targeted at the Partner Admin role.
Notifications are delivered through:
Email alerts to the Partner Admin
Notifications in the PMS notification panel
Dashboard alerts within the PMS portal
This enhancement ensures Partner Admins are informed well in advance and can take timely action to renew licenses.
6. Removal of Partner Existence Validation for Partner Admins
Validation checks to verify whether a partner already exists in the PMS database have been removed for Partner Admin operations, simplifying workflows and improving onboarding efficiency.
Deprecated APIs
/oauth/client
GET
This endpoint retrieves a list of all OAuth clients created by the Auth Partners.
/oauth/client/{client_id}
GET
This endpoint retrieves the OIDC client details by client id.
/oauth/client/{client_id}
PUT
This endpoint is used for updating OIDC Client based on client id.
/partners/{partnerId}/policy/{policyId}/apikey/status
PATCH
Service to activate/de-activate partner API key.
User Stories
OIDC Client Enchancement
Create OIDC Client Partner Enhancement to Support Multilingual Fields and Additional Information.
Change in Partner Admin/Policy Manager Registration
Update the Expiry date of API key
Expiry duration of existing Active API Key should be editable in PMS Partner Admin portal.
Create new endpoint PATCH /partners/{partnerId}/policies/{policyId}/api-keys/{apiKeyName}
MISP License Key Notifications for Partner Admin
Save & Publish Policy
Onboard ABIS Partner
ABIS Partner: API GET /partners/v3?status={status}&policyGroupAvailable={policyGroupAvailable}&partnerType=ABIS_Partner
Known Issues
When a Keycloak user who does not have any valid PMS role logs in to the PMS Portal, the page continuously refreshes and results in a 403 Forbidden error.
PMS - Revamp - MacBook : Keyboard functionality not working for some fields in Additional Information section on Create OIDC Client page in Safari.
PMS-Revamp - “Pending for approval” status label overlaps with the "linked devices" icon in French language on MacBook (Safari browser).
PMS Revamp - Error Message popping up When Editing and adding Client Name With Allowed Max Characters.
PMS-Revamp -“Forgot Password” and “SignUp” link is visible on the eSignet screen even when their respective toggles are OFF.
PMS Revamp- Inappropriate error[bad request] message when user enters a value greater than 10 minutes in "consent_expire_in_mins" field.
Repositories Released
Compatible Modules
Learn More
Partner Management Portal: For code and implementation of Partner Management Portal (revamp),
Test Report
For details on the test results, refer here.
Last updated
Was this helpful?