D222: Duo Release Notes for August 20, 2021

Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.

You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

What’s in this release?

New features, enhancements, and other improvements

New and updated applications

Bug fixes

See all bug fixes

New features, enhancements, and other improvements

Free Duo training and certification platform, Level Up, is now generally available

  • You can now access Duo’s free training and certification platform, Level Up, via the Duo Admin Panel. Look for a link in the left sidebar in the section at the end titled “Helpful Links.” Clicking the link will allow you to log in to Level Up with your existing Admin Panel credentials. Once you have logged in the first time via the Admin Panel link, you can log in directly via levelup.duo.com.
  • Level Up is a free online learning platform with original content created by Duo’s own experts and designed for Duo administrators and help desk staff. Browse available courses at levelup.duo.com.

New operating systems policy option to support iOS 14 users

  • Added a new OS policy option for iOS called “If not up-to-date.” This option has been created in response to Apple’s announcement that it will allow iOS 14 users to receive security updates after the release of iOS 15.
  • The “If not up-to-date” policy option will allow iOS 14 users to continue to authenticate to the protected application even after iOS 15 is released, whereas they would otherwise be blocked if using the current policy option “If less than the latest.”

Notifications will now be sent when a directory fails to sync

  • Duo administrator roles with permissions to manage directory syncs will now be emailed when a scheduled sync fails. Emails will be sent at the intervals of three, seven, and 15 days.
  • After 30 days, if a scheduled sync is still failing to run successfully, it will be paused and administrators will receive an email notification.

Change to Trusted Endpoints integration management for Active Directory Domain Services with certificates

  • With the recent release of Active Directory with Device Health, the new Trusted Endpoints solution for domain-joined Windows endpoints, you can no longer create new AD DS integrations that use Duo device certificates. All new AD DS integrations for Trusted Endpoints will use the Device Health implementation.

New and updated applications

Duo Device Health application version for macOS and versions 2.16.0 and 2.16.1 for Windows released

  • Released version of the Device Health app for macOS:
    • Minor improvements and enhancements.
    • Improved logging.
  • Released version 2.16.0 of the Device Health app for Windows:
    • Fixed detection of Cisco AMP for Endpoints (also known as Cisco Secure Endpoint).
    • Minor improvements and enhancements.
    • Improved logging.
  • Released version 2.16.1 of the Device Health app for Windows:
    • Fixed detection of Symantec Endpoint Protection.

Duo Universal Go library released

  • Released duo_universal_golang, an SDK that allows developers to add the Duo Universal Prompt to any Golang web login form.

Duo Mobile for Android version 3.62.0 released

  • Various behind-the-scenes improvements and minor bug fixes to enhance your authentication experience.
  • Preview the upcoming Duo Mobile version 4.0.0 release for both Android and iOS by signing up on Duo.com.

Bug fixes

  • No bug fixes this release.
1 Like

Flipping the order of approve and deny buttons on android seems trivial but is honestly brutal.

1 Like

Hey hibernal! Thanks for your feedback on this, I know that change has felt really frustrating for some folks, especially at first. What we found with internal testing and during the public preview is that the change felt more natural pretty quickly. If you’re interested in others’ feedback on this topic, check out this related thread: Android approve/deny button notification swap

1 Like

If you’ve been working in a high-pace environment for a long period of time, having muscle memory break authentication is just not cool.