D227: Duo Release Notes for October 29, 2021

Kelly4 · ‎10-29-2021

Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.

You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

What’s in this release?

New features, enhancements, and other improvements

Minor change to login flow for Duo Single Sign-On with Active Directory

Introduced a minor change to the authentication experience for Duo Single Sign-On that adds a new first screen in the authentication flow featuring only the email address field. From there, a user will either enter their email address (if it did not auto-populate based on a cookie), or just click Next. On the second screen, a user will enter their password, and then click Login to complete primary authentication.
This change allows Duo to introduce new features in the future, including Duo Passwordless, which uses identity verification methods such as biometrics in place of passwords.
This change only affects Duo Single Sign-On with Active Directory as the authentication source. Duo Single Sign-On with a SAML authentication source is not affected. Learn more in the Duo Knowledge Base.
Additionally, a user’s email address will auto-populate in the email address field for Duo Single Sign-On when logging back in to a new session. This is managed via browser cookie and does not carry across multiple browsers or clients.

Duo operating system policy versions updated with release of Windows 11, macOS 12

With the recent release of Windows 11, Duo’s operating system policy will include Windows 11 among the latest versions of Windows when enforcing an “If less than the latest” or “If not up-to-date” policy.
With the recent release of macOS 12, Duo’s OS policy will treat macOS 12 as the latest version of macOS. In addition, macOS 10.14 will be marked end-of-life in OS policy.
To accurately detect the latest versions of macOS and Windows, Duo recommends using the Device Health application, which does not rely on user-agent strings in the browser to collect device information. The Device Health app is included in Duo’s Access and Beyond editions.

Updated Duo Admin API endpoint to include value for users in Pending Deletion status

The Admin API endpoint /admin/v1/info/summary now includes a value for user_pending_deletion_count to provide a count of users in Pending Deletion status (in the Trash).

Credit card billing improvements

Added wording on the Billing page in the Duo Admin Panel to explain what happens when you make changes to your subscription during your current billing cycle (this may result in a prorated charge).
Changed the label on the “Place Order” button to “Update Subscription” (or “Change Edition” for managed service providers).

New and updated applications

Duo Mobile version 4.0.1 for iOS

Miscellaneous bug fixes and behind-the-scenes improvements for the recent redesign of Duo Mobile.
No new feature functionality compared with version 4.0.0.

Duo Mobile version 4.0.1 for Android

Miscellaneous bug fixes and behind-the-scenes improvements for the recent redesign of Duo Mobile.
No new feature functionality compared with version 4.0.0.

Duo Certifier for macOS version 2.0.1 released

Updates dependencies.
Repackages the certifier as an app; previous releases were stand-alone executables.
Fixes a bug which prevented Safari from consuming its certificate on macOS 12. Version 2.0.1 is now compatible with macOS 12 (Monterey).

Bug fixes

Fixed a bug in which hitting the back button in the browser after using the global search box in the Admin Panel brought you back to the Dashboard page, not the page you started on.
Fixed a UI bug in which a red alert icon appeared on the Endpoints page in the Admin Panel for mobile devices that were already up-to-date.
Improved the configuration page for Trusted Endpoints for Microsoft Intune to allow administrators to update API information for existing Intune management systems.