Hello everyone! Here are the release notes for our most recent updates to Duo.
Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
Customers with the ability to have subaccounts on different Duo deployments (such as members of Duo’s MSP program) are included in this general availability release.
Now in Public Preview: SAML Encrypted Assertions for SAML Identity Providers in Duo Single Sign-On (SSO)
There is a new Assertion encryption setting for Entra ID (Azure ID) and Other SAML Identity Providers that supports encrypted assertions: Allow use of any algorithm that is supported by SAML Identity Provider configuration.
If enabled, Duo SSO will accept a SAML response using any of the algorithms listed under Assertion encryption algorithm and Key transport encryption algorithm. If disabled, Duo SSO will only accept a SAML response using the specified Assertion encryption algorithm and Key transport encryption algorithm.
Enable this new setting to opt-in to this public preview feature.
When an account has only one Duo administrator with the Owner role, the Duo Admin Panel Administrators page will now display a banner reminding the sole Owner to add another administrator with the Owner role.
Reminder: Duo Access Gateway reached the last date of support on October 26, 2023. The new DAG end-of-life date will be March 30, 2024. Please see the Guide to Duo Access Gateway end of life for more details.
Duo Device Health application is now Duo Desktop with the latest release
Updates the ADFS-Diag.ps1 support script to collect information about Application Groups and NET Framework strong cryptography configuration.
Reminder that effective October 10, 2023, Duo no longer supports Windows Server 2012 and 2012 R2. Although it is still possible to install the Duo Authentication for AD FS plugin on these versions of Windows Server, we do not recommend it and we will not be able to support it going forward.