- New features, enhancements, and other improvements
- Now in public preview: Verified Duo Push in the Duo Auth API
- Updates to the Duo Admin API
- Universal Prompt Progress Report updated for clarity
- SMS passcode hints enabled for US and Canada phone numbers
- Improved Duo Directory Sync entries to the Administrator Actions Log
- Admin Authentication Methods reordered by most to least secure in the Duo Admin Panel
- Increased character limit for Low Risk IPs in Duo Risk-Based Authentication policy
- Update to Risk-Based Policy Assessment column in the Duo Authentication Log
- New and updated applications
- Five new named SAML applications with Duo SSO
- Duo Universal for WordPress version 1.0.0 released
- Duo Desktop for Linux version 2.2.0 released
- Duo Desktop for macOS version 6.5.0.0 released
- Duo Desktop for macOS public beta version 6.5.2.0 released
- Duo Desktop for Windows 10 and 11 version 6.5.0 released
- Duo Desktop for Windows 10 and 11 public beta version 6.5.2 released
- Duo Mobile for Android version 4.59.0 released
- Duo Mobile for iOS version 4.59.0 released
- Bug fixes
Hello everyone! Here are the release notes for our most recent updates to Duo.
Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
Check out the Guide to Duo End-of-Life and End-of-Support Plans. This guide provides an up-to-date list of current and past end-of-life plans for Duo products. We expect to reach these milestones by the end of next month:
- Effective March 30, 2024, Duo will no longer support the Duo LDAP cloud service (LDAPS) used to provide two-factor authentication for Cisco ASA, Juniper Networks Secure Access, or Pulse Secure Connect Secure SSL VPN logins.
- Effective March 30, 2024, Duo will no longer support the traditional Duo Prompt. Duo for NetScaler applications are an exception and the EOL date for existing Duo for NetScaler applications has been extended to September 30, 2024.
 |
SMS passcode hints enabled for US and Canada phone numbers
- When a Duo passcode is requested from a mobile device, the text message response will include an appended, machine-readable passcode hint. This enables the mobile browser to automatically complete authentication without additional user intervention.
- This feature is only available for phone numbers based in the US and Canada.
Improved Duo Directory Sync entries to the Administrator Actions Log
- Active Directory and OpenLDAP directory sync now shows Authentication Proxies Used when using Duo Authentication Proxy 6.0.2 or newer is required.
- The Administrator Actions Log will not show Authentication Proxies for a canceled directory sync.
Admin Authentication Methods reordered by most to least secure in the Duo Admin Panel
 |
Increased character limit for Low Risk IPs in Duo Risk-Based Authentication policy
- Input field for Low Risk IPs expanded from 200 to 8,192 characters.
Update to Risk-Based Policy Assessment column in the Duo Authentication Log
- For Duo Risk-Based Factor Selection, the Risk-Based Policy Assessment column in the Authentication Log will now display the risk pattern detection that resulted in a step-up authentication.
- When a step-up authentication is caused by detection of more than one risk pattern, the Risk-Based Policy Assessment column will show “Multiple Reasons”.
New and updated applications
Five new named SAML applications with Duo SSO
- There are now named SAML applications to protect Amazon AppStream 2.0, Amazon EMR Studio, ManageEngine OpManager, and Pipedrive with Duo Single Sign-On (SSO), our cloud identity provider.
- Amazon EKS can now be protected by Duo SSO with the existing named SAML application for AWS IAM Identity Center.
- Reminder: Duo Access Gateway reached the last date of support on October 26, 2023. The DAG end-of-life milestone scheduled for March 30, 2024 has been canceled. At this time, existing DAG applications will continue to work after March 30, 2024.. Please see the Guide to Duo Access Gateway end of life for more details.
Duo Universal for WordPress version 1.0.0 released
- Supports the Duo Universal Prompt for Duo-protected WordPress applications.
- See documentation to Migrate from the Legacy WordPress Plugin.
Duo Desktop for Linux version 2.2.0 released
- Fixed an issue where the app was improperly using an inotify resource.
- Fixed an issue preventing the app from closing old log files.
- Minor improvements and enhancements.
Duo Desktop for macOS version 6.5.0.0 released
- Added collection of information related to the expiration of the application's certificate.
Duo Desktop for macOS public beta version 6.5.2.0 released
- Minor improvements and enhancements.
Duo Desktop for Windows 10 and 11 version 6.5.0 released
- Session Logouts are now reported when the application is closed.
- Added collection of information related to registration and health reporting performance.
Duo Desktop for Windows 10 and 11 public beta version 6.5.2 released
- Minor improvements and enhancements.
Duo Mobile for Android version 4.59.0 released
- Miscellaneous bug fixes and behind-the-scenes improvements.
Duo Mobile for iOS version 4.59.0 released
- Miscellaneous bug fixes and behind-the-scenes improvements.
Bug fixes
- Updated the Assertion Consumer Service URL for new Duo Single Sign-On for Google Workspace (Google G Suite) applications to match Google’s updated SSO assertion requirements.