Hello everyone! Here are the release notes for our most recent updates to Duo.
Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
Check out the Guide to Duo End-of-Life and End-of-Support Plans. This guide provides an up-to-date list of current and past end-of-life plans for Duo products.
New Features
- Verified Push is being added as an authentication method in the Admin Authentication Methods page.
- If an Admin has already enrolled their Duo Mobile device, they will seamlessly be able to use Verified Push once the setting is enabled. Only Duo Owners can change admin login settings. The verification code can be set from 3 to 6 digits (default 3).
- For new customers, Verified Push will be on by default for Duo Admin Panel login. Verified Push will be available on all editions for Admins.
- Here’s how the login process looks with Verified Push:
- When enabled, the policy can be configured to block access to high-risk IPs.
- A new permission has been added to the Admin API to give more granular control over an Admin API integration’s ability to set permissions when creating or updating Admin API integrations.
- Shared device authentication will now allow multiple configurations.
- The Admin Panel UI now allows Admins to add multiple configurations and shows a table of configurations.
- Admins can add, edit and delete configurations from the Admin Panel UI and Admin API.
- Shared Device Authentication page is changed to Duo Desktop Shared Device Authentication.
- Desktops page is now called Duo Desktop Authenticators.
- New endpoints have been added to the Admin API to support Shared Device Authentication Configurations.
- Google Workspace (formerly known as G Suite) offers integration with Duo Mobile on Android and now iOS.
New Features Available in Duo’s Federal Editions
- As of October 28, Duo Desktop, Duo Endpoints, and Authentication Logs are now available in the Federal edition.
New and Updated Applications
Seven new named applications with Duo Single Sign-On (SSO)
- Adds the configuration option force_message_authenticator to radius_server modules.
- Set force_message_authenticator to true to force the Authentication Proxy to include a message-authenticator attribute in reply packets.
- Ensures that reply packets containing a message-authenticator attribute send that as the first attribute.
- Miscellaneous bug fixes and behind-the-scenes improvements.
- Miscellaneous bug fixes and behind-the-scenes improvements.
- Duo Desktop authentication is now generally available.
- Fixed an issue where POST requests to the app started to fail in Safari 18. This could cause issues with the registration process or prevent Duo Passport from functioning properly.
- Minor improvements and enhancements.
- Duo Desktop authentication is now generally available.
- Fixed an issue that could cause the app to crash if an incoming request was prematurely terminated.
- All temporary installer executables are now signed.
- Minor improvements and enhancements.
- Fixed an issue where POST requests to the app started to fail in Safari 18. This could cause issues with the registration process or prevent Duo Passport from functioning properly.