Hello everyone! Here are the release notes for our most recent updates to Duo.
Public release notes are usually published on the Customer Community every other week after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
Check out the Guide to Duo End-of-Life and End-of-Support Plans. This guide provides an up-to-date list of current and past end-of-life plans for Duo products.
New features, enhancements, and other improvements
- Preview mode, which is now the default view in Reports > Authentication Log, allows you to see which authentications would have triggered a step-up authentication by highlighting detection information in the authentication logs.
- You will see the "Risk-Based Policy Assessment" column and a banner on authentications that would have required a step-up authentication.
- Select the Preview Insights button next to an authentication to learn more about what Duo detected, what would happen to the user if the policy were configured, and how many step-ups would have occurred within the past month across all your users.
Now generally available: Security Analyst administrative role for Duo Trust Monitor (Advantage or Premier edition required)
- Security Analyst administrators can set and edit Trust Monitor risk profiles, process events, lockout users as well as view all logs and reports.
- Security Analyst administrators can create, update, and delete user phones, tokens, and bypass codes; use directory sync to create or update a single end-user; send enrollment emails to users; modify full names, email addresses, and notes; change user status from "Locked Out" to "Active"; and can send Duo Mobile activations to users.
- Security Analyst admins cannot manually create or delete users, modify usernames or user aliases; use bulk enrollment; or run a full directory sync.
- The Authentication Log filter now includes a Passport section that allows administrators to filter by “Remembered device via Passport.”
- When an authentication session expires, users will be directed to a message indicating that their session has expired and prompting them to log in again.
- If administrators create a new policy or revert the Global Policy to default settings after enabling Duo Passwordless, all passwordless authentication methods are enabled by default.
Updates to the Duo sign-up page
- The Duo sign-up page has been updated to reflect our latest product features, increase access to support options, and simplify the form fields.
Two new endpoints added to Admin API for Duo Desktop–registered devices
New and updated applications
Two updated named SAML applications with Duo Single Sign-On (SSO)
- The existing Meraki SSO named application has been updated to support Meraki Vision.
- The existing Cisco ISE SSO named application has been updated to support ISE User Portal.
- Reminder: Duo Access Gateway reached the last date of support on October 26, 2023. The DAG end-of-life milestone scheduled for March 30, 2024, has been canceled. At this time, existing DAG applications will continue to work after March 30, 2024. Please see the Guide to Duo Access Gateway end of life for more details.
- Fixed an issue that could cause an existing registration to become invalid and result in authentication failures.
- Fixed an issue where authentications could fail in certain network conditions.
- Fixed an issue where authentications could fail on devices that don't have the Secure Enclave.
- Miscellaneous bug fixes and behind-the-scenes improvements.
- Miscellaneous bug fixes and behind-the-scenes improvements.
Bug fixes
- Fixed a bug in Duo Mobile inline authentication with Passwordless on iOS where users were prompted for their authentication gesture (for example, Touch ID or Face ID) too early, which led to authentication challenges.
