Hello everyone! Here are the release notes for our most recent updates to Duo.
Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
Check out the Guide to Duo End-of-Life and End-of-Support Plans. This guide provides an up-to-date list of current and past end-of-life plans for Duo products.
New Features:
- Customization for enrollment emails is now located in a new Enrollment section. In addition, there is a new enrollment link expiration setting, which defaults to 30 days. We encourage you to lower your enrollment link expiration setting to the minimum amount of time needed for your users to enroll.
- While Cisco considers this integration GA, the corresponding External Authentication Methods functionality is currently still considered a preview feature with Microsoft. Their designation of that feature is independent of Cisco's announcement here.
New and Updated Applications
Five new named applications with Duo Single Sign-On (SSO)
- Supports direct Duo OAuth authentication from NetScaler 14.1-29.63 and later with Advanced or Premium licensing.
- Solution does not require on-premises Duo Authentication Proxy or Citrix Federated Authentication Services (FAS) deployment.
- Miscellaneous bug fixes and behind-the-scenes improvements.
- Miscellaneous bug fixes and behind-the-scenes improvements.
Splunk has been added to the list of frameless capable integrations.
- Splunk has made updates available to support Universal Prompt. Splunk integrations will no longer show as "Waiting on App Provider" in the Universal Prompt Progress Report, and instead will show "Update Required."
- Duo Universal Prompt requires Splunk Enterprise on-premises versions 9.1.6, 9.1.7, 9.2.3, 9.3.1, or higher.
- Reminder: The iframe-based traditional Duo Prompt in Splunk Enterprise configurations will reach end of support on December 31, 2024.
“NetScaler” RADIUS application renamed to NetScaler RADIUS
- This new name better reflects the capabilities of the RADIUS application and distinguishes it from the OAuth and SAML NetScaler applications.
- Support for RADIUS iframe and traditional prompt ends for NetScaler on December 31. 2024. Other RADIUS configurations for NetScaler like RADIUS Challenge or RADIUS Auto will remain supported.
Bug Fixes:
- Improved Duo SSO’s parsing of a metadata XML from file when the metadata could have encrypted assertions within it. If encrypted assertions are there, when a “Save” action is performed, SSO saves it and enables encrypted assertions which blocks users from further saving the file.
- Fixed a bug preventing read-only admins from taking certain actions in the Admin Panel.