What's New on the Lucanet CFO Solution Platform?

Administrators can now activate the TOTP MFA (authenticator app code) authentication method for users who log in with a user name and password. The user receives an e-mail and sets up an authenticator app at the next login. Afterwards, a six-digit code from the app is required at every login.

In the list of users, the icon indicates that multi-factor authentication is active, and you can filter the list accordingly. If a user no longer has access to their authenticator app, administrators can reset the multi-factor authentication for a single user or for several users at the same time.

For more information, see Multi-Factor Authentication with an Authenticator App and Authentication Methods.

The homepage of the Lucanet CFO Solution Platform now consists of sections, with Ask Lume as the first section. Further sections that you can add, arrange, and remove for your own user account will follow shortly.

The new Data Hub is now available in the main menu of the Lucanet CFO Solution Platform. Data Hub brings the management of external data integrations together in one central place.

In Data Hub, you can create connections to external source systems. For each connection, you can define one or more source datasets that specify the data to be imported, start an import at any time, and track its progress and results in a detailed execution history.

At release, Data Hub supports connections to SAP S/4HANA and Microsoft Dynamics 365, and you can use the imported data in our xP&A solution. Integrations with additional solutions and source systems are planned.

Data Hub with its connections and source datasets is displayed as follows, for example:

For more information, see Data Hub.

You can now combine Consolidation & Financial Planning users into user groups and assign shared permissions to all members at once, instead of configuring each user individually. User groups are available in the Administration | User management | User groups workspace for administrators with the Administrator or Master role for Consolidation & Financial Planning.

For each user group, you can define permissions for the data model, transfer the group's permissions to individual users or other user groups (optionally for a limited period), inherit permissions from other user groups, and review the group's change log.

The new workspace is displayed as follows, for example:

For more information, see Managing User Groups.

You can now connect your central identity system directly to Lucanet through the Platform API, so users are created, updated, and deactivated automatically instead of being managed manually. In the new API token management workspace, administrators can create scoped API tokens, give them an optional expiration date, and revoke them at any time.

Every action performed with a token is attributed to the user who created it and is recorded in the change log. To make API-driven changes easy to identify, the change log now includes an Authenticated as column and displays the token name for changes performed through the Platform API.

The new API token management workspace is displayed as follows, for example:

For more information, see Managing API Tokens.

Configuring external authentication is now faster and less error-prone. When you set up SSO in Administration | Platform management | External authentication, you first choose your combination of protocol and identity provider (OIDC or SAML with Microsoft Entra ID, Okta, or Custom). The form then displays provider-specific hints for each field and validates the Issuer URL in real time, so you can fix common mistakes before saving. For added security, the client secret can no longer be displayed in full after activation.

For SAML setups, Lucanet now also reminds you by e-mail before the SAML signing certificate expires, so you can renew it in time and avoid sign-in failures.

For more information, see Configuring External Authentication.

The Lucanet licenses workspace has been redesigned. Each licensed solution is now displayed as an expandable card with its license package, the used license slots per user role (with a usage bar), and its licensed units, where applicable.

In addition, each solution card now displays a usage limit warning when the license slots for a user role are used up (red) or are running low (orange), so you can spot license bottlenecks at a glance and request an upgrade in time.

The redesigned page is displayed as follows, for example:

For more information, see Managing Lucanet Licenses.