The B2C Commerce Account Manager 1.31.67 release.
- Secure Your Organization By Removing Shared Users With Escalated Privileges
To prevent privilege escalation, partner accounts in your organization who received administration privileges in another organization are now automatically removed from your organization. Previously, these users would receive admin privileges in your organization. Whenever a partner account receives admin privileges in another organization, any assigned security contacts in your organization receive an email notifying them of the event and whether the user was removed. - Change Logs Show Executing User's Email Address
The change log now display the executing user's email address. Change logs can be found on the user detail page, API client detail page, organization detail page, and account information page. - Trusted Location for Multi-Factor Authentication Is Now Supported
All users can now use the Trusted Location feature when using the Salesforce Authenticator for multi-factor authentication. - Passwords Can Only Be Changed Through Self-Service
Passwords can only be changed by a user, through the self-service feature. Administrators can continue to initiate user password resets through the API, but they can't update the password. - New Accounts That Remain Inactive Are Purged After 90 days
New accounts that remain in the status Waiting for Activation for over 90 days are automatically purged. A job runs once a day remove these accounts.