D241: Release Notes for May 27, 2022

Release Notes
#1

Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.

You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

What’s in this release?

New features, enhancements, and other improvements

New and updated applications

Bug fixes

See all bug fixes

New features, enhancements, and other improvements

Universal Prompt adds support for fifteen languages

  • New language support for Chinese (Simplified), Czech, Danish, Finnish, Hindi, Indonesian, Italian, Korean, Norwegian, Polish, Portuguese (Brazil), Swedish, Thai, Turkish, and Vietnamese. The end-user’s browser language settings determine the language shown in the prompt as well as the language used for Duo Mobile activation and SMS passcode text messages.
  • Note that this set of supported languages does not apply to authentication by phone callback. Phone callback supports English, German, French, Spanish, and Japanese, and will default to English when a user’s default UI is configured for another language.

Added the ability to cancel a Duo directory synchronization in progress

  • The Directory Sync detail page displays a new Cancel sync control while a full Azure Active Directory sync, Active Directory sync, or OpenLDAP sync is in progress.

Directory Synchronization Cancel sync

  • Duo will not revert attribute changes applied to synced users when a sync is canceled. After canceling a sync and updating the configuration, running a full sync is recommended to avoid leaving users in an unexpected state.
  • The Administrator Actions report lists a canceled sync Action as Sync failed. The Action Detail displays that the sync was canceled and the administrator who canceled it.

Announcing public preview for device management in Duo Central

  • If configured by an administrator, end-users can now manage their devices via a Manage Devices link in Duo Central. The link loads the same self-service portal accessible from the Universal Prompt, where end-users can add, remove, or update their own Duo MFA and Duo Passwordless devices. Note that Duo Passwordless is currently in public preview.

Duo Central tiles support more URL schemes

  • Duo Central tiles now permit URLs that begin with schemes other than http:// or https://, such as rdp:// or ssh://, to allow you to link to web applications other than websites.

Added filter to list Applications reaching end of support

  • On the Applications page in the Duo Admin Panel, there is now an End of Support filter that displays protected applications that are approaching or have reached End of Support status.

Duo Applications End of Support Filter
Duo Applications End of Support Filter1150×793 181 KB

  • Protected applications that meet this criteria are still displayed under All Applications.
  • The Applications page export also now works with both the search filter and the End of Support filter.

Added timestamp filters to the Telephony Log report

  • On the Telephony Log page in the Duo Admin Panel, there is now a Time Range filter that supports control over the report range. These function the same as the timestamp filters on the Authentication Log page.

image
image1407×626 55.6 KB

Windows 10 version 20H2 will reach end-of-life in operating systems policy

  • Starting June 14, 2022, Duo operating system policy will treat Windows 10 version 20H2 as end-of-life following Microsoft’s end of servicing for this version.

New and updated applications

Duo Authentication Proxy version 5.7.1 released with security updates

Duo Device Health application for Windows 10 and 11 production version 2.25.2 released

  • Fixed issue with DuoConnect integration.

Duo Device Health application public beta version 2.25.3 released

Duo Mobile for Android version 4.16.0 released

  • Customer organization name now displays on full screen Duo Push authentication.

Duo Mobile for iOS version 4.16.0 released

  • Miscellaneous bug fixes and behind-the-scenes improvements.

Bug fixes

  • Fixed a UI bug on Admin Panel application details pages in which a long group name or a long list of group names obscured the plus and minus buttons behind the group dropdown control.
1 Like
More info about D241 Duo Authentication Proxy update
#2
  • Starting June 14, 2022, Duo operating system policy will treat Windows 10 version 20H2 as end-of-life following Microsoft’s end of servicing for this version.

Duo, an enterprise product, should probably follow the End-of-Servicing date for Windows 10 Enterprise. This date is May 9, 2023

#3

Hi @jonathanb, thanks for sharing this feedback with us! I already responded to your other post, but I will link it here as well in case anyone else reading would like to officially share their feedback with the Duo Team on this issue, or learn some of the background of why we currently follow the Home edition support schedule over the Enterprise one. Windows 10 20H2 support ends a year early - #2 by Amy

#4

More good news! A late addition to these notes, a new Telephony Log feature released in D241 and the upcoming D242 release notes will reveal even more Telephony Log timestamp fun.

Added timestamp filters to the Telephony Log report

  • On the Telephony Log page in the Duo Admin Panel, there is now a Time Range filter that supports control over the report range. These function the same as the timestamp filters on the Authentication Log page.
1 Like
#5

I’ve just posted another update related to Authentication Proxy 5.7.1, in order to provide specifics about the Python library vulnerabilities resolved in that version, and vulnerabilities that remain under review. Special thanks to our Authentication Proxy and Security Operations teams for awesome due diligence!

2 Likes