Skip to Main Content
IBM Data Platform Ideas Portal for Customers


This portal is to open public enhancement requests against products and services offered by the IBM Data Platform organization. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:


Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,


Post your ideas

Post ideas and requests to enhance a product or service. Take a look at ideas others have posted and upvote them if they matter to you,

  1. Post an idea

  2. Upvote ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

IBM Employees should enter Ideas at https://ideas.ibm.com



ADD A NEW IDEA

Clear

Ideas

Showing 14 of 18234

MWS - NO RATE LIMIT ON FILE UPLOAD

As part of ticket: TS020360245, seems "NO RATE LIMIT ON FILE UPLOAD for MWS" exists meaning which means an attacker gaining access can make system fail by uploading too many files. Could you please think of this vulnerability and enforce checks?
5 days ago in webMethods BPM 0 Submitted

MWS - Two factor authentication using OIDC protocol

We have created ticket: TS020839599 for assistance and seems "MWS - Two factor authentication using OIDC protocol" is currently nor available. As part of enhance security + regulatory compliance for finance domain, it would really help if 2FA is i...
5 days ago in webMethods BPM 0 Submitted

Change the JWT 'iss' claim to the introspection endpoint URL of the issueing IM/Zen

Customers' landscape still is sort of silo-ed, meaning there's a large department managing BAW , and there's another big department managing FileNet. Current production for bothruns on WebSphere traditional (tWAS), ( deployed on CloudPak Systems a...
24 days ago in Cloud Pak for Data / Bedrock 0 Submitted

Token exchange - Use token created in customer's OIDC enterprise IdP to login in CP4D

Context: Customer is building in .NET their own Data Marketplace based on IBM CP4D (IKC+DV). One of the principal users will be Healthcare, that wants to publish and share data between users in a secure platform. Then, because of security requirem...
7 months ago in Cloud Pak for Data / Bedrock 0 Under review

Multiple Identity providers(idp)using oidc with Oauth for token generation)

Add multiple idp support for Zen Custom tokens for CP4BA - we have multiple IDPS onsite. Westpac consumers using JWT token generated by idps from frontend applications. This JWT token is locally validated by Websphere when request is received for ...
27 days ago in Cloud Pak for Data / Bedrock 0 Submitted

FISMA Audit Logging feature: Unified Correlation ID Framework Support for BA Cross-Component Traceability

To enable end-to-end observability and consistent audit traceability across Cloud Pak for Business Automation (CP4BA) capabilities, Zen must provide a unified correlation ID service that can be consumed by all CP4BA components. https://bigblue.aha...
about 1 month ago in Cloud Pak for Data / Bedrock 0 Under review

BPM designer should not use dropdowns for critical settings

When hovering over a dropdown, eclipse lets you update it with scrollwheel and doesn't force you to click it first. Unless the dropdown update behavior can be prevented when not clicked, these critical settings should use other UI modules, like ra...
about 1 month ago in webMethods BPM 0 Submitted

SSH Server CBC Mode Ciphers Enabled on InfraDC SSH port 8022.

Security scan has identified SSH Server CBC Mode Ciphers Enabled on InfraDC SSH port 8022. We tried disabling CBC ciphers from java.security config file however it does not work. Below are vulnerabilities which have been identified. Supports follo...
7 months ago in webMethods BPM 0 Submitted

Need to Encrypt credentials within the application itself before transmitting them over the network in BPM UI

We are able to see the credentials in Plain text. We are not using any testing tool to capture the packet. we are just inspecting the packet in browser in debugger mode and able to see the password in the browser in plain text. Please encrypt the ...
10 months ago in webMethods BPM 0 Submitted

Incorporate Certificate Authority (expiration) into RedHat Cert Manager

CA issue(resulted in support case). In the case, it was the CA that expired. The customer has paid-for CAs, as well as the product self-signed. Dev mentioned ways to incorporate external cert managers into RedHat CertManager: Here are the procedur...
10 months ago in Cloud Pak for Data / Bedrock 0 Under review