D294: Duo Release Notes for July 19, 2024

kyleleighavery · ‎07-19-2024

New features, enhancements, and other improvements
Now generally available: Single Sign-On (SSO) for OAuth 2.0 Client Credentials
Risk-Based Authentication information added to the Authentication Log
Update to Duo Trust Monitor Security Event timestamps
One new endpoint added to Admin API for Duo Passport users
Update to the Duo SSO password reset flow
New and updated applications
Ten new named applications with Duo Single Sign-On (SSO)
Duo Desktop for macOS version 6.11.0.0 released
Duo Desktop for macOS version 6.10.0.0 released
Duo Desktop for macOS Public Beta version 6.10.1.0 released
Duo Desktop for Windows 10 and 11 version 6.11.0 released
Duo Desktop for Windows Public Beta version 6.10.1 released
Duo Mobile for Android version 4.68.0 released
Duo Mobile for iOS version 4.68.0 released
Bug fixes

Hello everyone! Here are the release notes for our most recent updates to Duo.

Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

Check out the Guide to Duo End-of-Life and End-of-Support Plans. This guide provides an up-to-date list of current and past end-of-life plans for Duo products.

New features, enhancements, and other improvements

Now generally available: Single Sign-On (SSO) for OAuth 2.0 Client Credentials

Customers can now securely protect machine-to-machine workflows using Duo SSO.

Logging for Client Credentials interactions have been added to the Reports > Single Sign-On Log in the Duo Admin Panel.

Risk-Based Authentication information added to the Authentication Log

The Risk-Based Policy Assessment column of the Reports > Authentication Log in the Duo Admin Panel will now note suppressed detectors (Unrealistic Travel, Country Code Mismatch and Device Distance) when they affect authentication.

Update to Duo Trust Monitor Security Event timestamps

Security Event timestamps in Monitoring > Duo Trust Monitor in the Duo Admin Panel will now show to the second instead of to the minute.

One new endpoint added to Admin API for Duo Passport users

The GET admin/v2/passport/config returns the Passport configuration.

Update to the Duo SSO password reset flow

The Show Password field has been moved on the password reset screen to enhance the end user experience and make it more apparent to users that may want to verify before submitting their password for updating.

Additional grammar and wording enhancements were made.

New and updated applications

Ten new named applications with Duo Single Sign-On (SSO)

There are now named SAML applications to protect Procore, Liongard, Commvault Complete Backup & Recovery, Blumira, Netskope Admin Console, ConnectWise ScreenConnect, Tableau Server, Kandji, and Veeam Backup & Replication, and a named OIDC application to protect Red Hat Keycloak with Duo Single Sign-On (SSO), our cloud identity provider.

Reminder: Duo Access Gateway reached the last date of support on October 26, 2023. The DAG end-of-life milestone scheduled for March 30, 2024, has been canceled. At this time, existing DAG applications will continue to work after March 30, 2024. Please see the Guide to Duo Access Gateway end of life for more details.