- New features, enhancements, and other improvements
- Passwordless Analytics
- Select Multiple User Groups in Shared Device Authentication
- Refreshed UI for Single Sign-On pages
- Now generally available: Grant administrators – Read permissions for the Admin API
- Now generally available: Risk-based Authentication Preview Mode
- Updated Risk-based Authentication Policy Assessment tooltip
- User Activity Logs now show device epkey
- New and Updated Applications
- Five new named applications with Duo Single Sign-On (SSO)
- Name change for Veeam Backup & Replication SSO application
- Duo Desktop 6.13.0.0 for macOS released
- Duo Desktop 6.13.0 for Windows released
- Duo Desktop 6.12.2 beta released
- Duo Mobile for Android version 4.72.0 released
- Duo Mobile for iOS version 4.72.0 released
- ClearPass is now ready for the Duo Universal Prompt.
- Bug Fixes:
Hello everyone! Here are the release notes for our most recent updates to Duo.
Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
Check out the Guide to Duo End-of-Life and End-of-Support Plans. This guide provides an up-to-date list of current and past end-of-life plans for Duo products.
New features, enhancements, and other improvements
Passwordless Analytics
- A new chart "Users capable of using passwordless" appears on the Passwordless page and details the users that are capable of passwordless authentication. A report can be downloaded with more detailed information about each user.
Select Multiple User Groups in Shared Device Authentication
- You can now select multiple user groups and Trusted Endpoints integrations for Shared Device Authentication.
Refreshed UI for Single Sign-On pages
- Customers setting up SSO for the first time will see a refreshed Get started page and Customize SSO Subdomain page.
- Customers adding a new SSO authentication source will see a refreshed Add Authentication source page.
Now generally available: Grant administrators – Read permissions for the Admin API
- This feature previously released in D297 is now available for Duo Federal editions.
Now generally available: Risk-based Authentication Preview Mode
- Removed Preview Mode banner from the Admin Panel dashboard since this feature is now Generally Available.
Updated Risk-based Authentication Policy Assessment tooltip
- Adjusted RBA Policy Assessment tooltip in the Admin Panel Authentication Log table for clarity.
User Activity Logs now show device epkey
- The epkey is the unique identifier for the relevant device. This now appears in the user activity logs.
New and Updated Applications
Five new named applications with Duo Single Sign-On (SSO)
- There are now five new named SAML applications to protect Cyolo for Duo Single Sign-On (SSO), Grafana Enterprise for Duo Single Sign-On (SSO), ManageEngine Remote Access Plus for Duo Single Sign-On (SSO), Zerto for Duo Single Sign-On (SSO), Zoho Sign for Duo Single Sign-On (SSO).
Name change for Veeam Backup & Replication SSO application
- The Veeam Backup & Replication SSO application is now renamed to Veeam Backup Enterprise Manager.
Duo Desktop 6.13.0.0 for macOS released
- Fixed firewall detection on macOS Sequoia.
- Added support for Microsoft Defender for Endpoint.
- Added translations to Duo Desktop authentication.
Duo Desktop 6.13.0 for Windows released
- Updated Intune device identifier detection to support new identifier location.
- Added translations to Duo Desktop authentication.
- Added additional logging if the app crashes.
Duo Desktop 6.12.2 beta released
- Fixed an issue with firewall detection on macOS Sequoia when "block all" mode is enabled.
Duo Mobile for Android version 4.72.0 released
- Miscellaneous bug fixes and behind-the-scenes improvements.
Duo Mobile for iOS version 4.72.0 released
- Miscellaneous bug fixes and behind-the-scenes improvements.
ClearPass is now ready for the Duo Universal Prompt.
- Existing ClearPass applications in the Duo Admin Panel will show the status New Prompt Ready.
Bug Fixes:
- Admin Panel Time Picker — Fixed Time Picker to list the time with the locale-specific meridiem symbol based on the Country/region selected by the user in the Settings page.
- Administrator Actions Custom Filter — Fixed encoding for time range querying.
- Administrator WebAuthn Credential Table — Fixed a bug where the created date for an Admin's WebAuthn credentials displayed on their Admin Page was not being displayed in the timezone specified on the Settings page.
- Reporting Fraud will take priority over phone policies — Previously if a phone was not compliant based on policy (like screen lock, encryption, etc...) and they deny (fraud or mistake) a push, Duo would send an alert on the failing policy and report that in the Authentication Log as opposed to their response. This resulted in pushed reported as fraud being overwritten by the policy result instead. Now Duo will prioritize the fraud report over the policy outcome.
