We are opening early access for Identity Manager on-prem v7.1 starting 9 July, and we invite on-prem customers to test the upcoming release before general availability. This is an opportunity to explore the new capabilities, validate improvements, and share feedback with the product team.
Here is what is included in the 7.1 early access program:
Want the full details? Click the link below!
New Features and Enhancements
Certification delegation
Access Certification campaigns now support delegation, allowing certifiers to assign individual items to other users for review recommendations while retaining final decision authority.
Campaign configuration
Campaign creators can enable delegation when creating a single-reviewer campaign. A new Delegate checkbox is available under the Allowed Actions section during campaign creation. Once a campaign is created, this setting cannot be modified. Delegation is not available for multi-reviewer campaigns.
Certifier experience
When delegation is enabled, certifiers gain access to three tabs:
- My Items — the standard certification tab
- Delegated to Me — items delegated to the logged-in user by another certifier
- Delegated to Others — items the logged-in user has delegated to someone else
A Delegate action is available on any undelegated item in the My Items tab. Items with an existing active delegation or a recorded decision do not show the Delegate action. Clicking Delegate opens a side panel where the certifier selects a recipient and adds an optional comment. After delegation, the item moves to the Delegated to Others tab.
To revoke a delegation, use the Revoke Delegation button on any item in the Delegated to Others tab. The item returns to the certifier’s My Items tab and is removed from the delegate’s view. The delegate’s comment and decision are cleared.
Delegate experience
When an item is delegated, the delegate receives an immediate email notification with the campaign name and description. The item appears in their Delegated to Me tab. Delegates can record:
- Approve or Refuse — records a recommendation visible to the certifier in their Delegated to Others tab
- Not For Me — returns the item to the certifier’s My Items tab with an Activity indicator; the delegate’s comment is preserved in the audit trail
Delegates cannot delegate or transfer items further.
Confirming decisions
When a certifier clicks Confirm Decisions and delegated items have recorded recommendations, a confirmation popup appears. The certifier can choose Confirm All Decisions to proceed or Cancel to review the Delegated to Others tab first. If the certifier has overridden a delegate’s recommendation, the certifier’s decision is used. Delegated items with no recorded recommendation are treated as undecided.
Audit trail
The Certification Report includes two new columns for delegated items:
- Delegated To — the display name of the delegate
- Delegate’s Decision — the delegate’s recorded decision (Approve, Refuse, Not For Me, or blank if none recorded)
If a certifier overrides a delegate’s recommendation, both decisions are captured. If a delegation is revoked, both columns are cleared.
The existing Forward History popup has been renamed Activity History. It now includes an Action column distinguishing between Transferred and Delegated events, with both types of history visible in the same panel.
SCIM 2.0 Connector (Preview — NIM 7.1)
Preview: Do not use in production without explicit Netwrix approval.
Netwrix Identity Manager 7.1 introduces a new SCIM 2.0 connector for bidirectional identity synchronization with any RFC 7643/7644-compliant endpoint.
Key capabilities:
- Export— reads users and groups from a SCIM endpoint into NIM for synchronization, with support for incremental (delta) exports.
- Provisioning— creates, updates, and deletes accounts and group memberships. Supports a “deactivate instead of delete” mode to preserve accounts for reactivation.
- Password reset— updates passwords directly on the managed system via SCIM.
- Flexible authentication— OAuth2 client credentials, static bearer token, or HTTP Basic.
- Schema auto-discovery— automatically detects the target system’s attribute schema at connection setup.
New left navigation menu
A persistent left-hand navigation menu is now visible on all pages. The menu is collapsible, allowing users to expand it for full labels or collapse it to a compact, icon-only view.
Campaign description field
Campaign creators can now add a description to a certification campaign. The description is visible to certifiers in email notifications, providing context before they begin reviewing.
Permission-based filtering in campaigns
Certifiers can now filter campaign items by permission. This makes it easier to isolate specific roles within a campaign, speeding up review and reducing the risk of overlooking or misjudging access during decision-making.
Multi-reviewer mode now generally available
Multi-reviewer mode for certification campaigns has graduated from Preview and is now generally available. The preview flag has been removed, and per-campaign reviewer mode selection is available directly in the campaign settings UI.
How to join
If you would like to participate in early access for on-prem version 7.1, please download the Beta version from the Netwrix Customer Portal.
Beta version: Do not install in production. This is a beta release intended for testing purposes only.
Early access begins on July 10, 2026 and is available to all on-prem Identity Manager customers and partners.
If you encounter any bugs or issues, please contact Support Center | Netwrix.
For any other feedback, please contact Kate Fleming at kate.fleming@netwrix.com
What are your thoughts?
We are always happy to hear from our users on what you like, and what you hope to see in the future. Please, share your thoughts below!