TLS, or Transport Layer Security, is an Internet protocol that verifies that a website actually is what it appears to be. There are currently four versions of TLS; 1.0, 1.1, and 1.2.  The Common Vulnerability Scoring System has identified TLS 1.0 as a security risk, and it must be deprecated to adhere to Igloo’s security policies, and to align with industry best-practices.

As of the Cycle 40 March release, the following will no longer be able to connect to Igloo:

• Web browsers that use TLS 1.0 (Such as Internet Explorer 7)
• Igloo LDAP Sync Tool (ILST) v3.1 or prior
• Any web application calling Igloo APIs and attempting to connect using TLS 1.0

What browser can I use to access my digital workplace?

All users will need to access their digital workplace with a browser that utilizes TLS 1.1 or newer, and specifically an up-to-date version of the following browsers:

• Microsoft Internet Explorer 11
• Google Chrome
• Mozilla Firefox
• Safari (Mac OSX)

Users can check what version of TLS their current browser utilizes through the SSL Labs test your browser tool.

How does deprecating TLS 1.0 impact the Igloo LDAP Sync Tool?

Any organization that uses the ILST will need to download and install the latest version, before March 20th. Older versions of the tool will no longer function by this date. You can download the latest version of ILST, and learn how to configure or troubleshoot the tool, through the ILST article on Customer Care. 

For more information, contact Igloo support.