Hello everyone! Here are the release notes for our most recent updates to Duo.
Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
What’s in this release?
New features, enhancements, and other improvements
- Now in Public Preview: Duo Single Sign-On (SSO) Support for OpenID Connect (OIDC) and OAuth 2.0 Client Credentials
- Duo Free Edition Now Supports Shared Custom New User Policies
- Duo Prompt Now Recommends the Minimum iOS Version According to the Protected Application’s Dynamically Updated By Duo Operating Systems Policy
- Message Customization is No Longer Available by Default for New Duo Customers
New and updated applications
- Duo Device Health Application 4.0.0 for macOS and Windows 10 and 11
- Duo Mobile 4.30.0 for Android
- Duo Mobile 4.30.0 for iOS
New features, enhancements, and other improvements
Now in Public Preview: Duo Single Sign-On (SSO) support for OpenID Connect (OIDC) and OAuth 2.0 Client Credentials
- Duo SSO can now act as an OpenID Connect (OIDC) Provider to protect relying parties that use the grant type of authorization code. Protect an application with the Generic OIDC Relying Party application type to use Duo Single Sign-On with OIDC. Read more on the Duo blog about the benefits of the OIDC authentication protocol.
- Duo SSO can now act as an OAuth 2.0 Provider to allow secure machine-to-machine interactions. Protect an application with the OAuth 2.0 Client Credentials application type to use Duo Single Sign-On with OAuth 2.0.
- These Public Preview features make more applications compatible with Duo SSO, Duo Passwordless, and Risk-Based Authentication and they are available at no additional cost to all customers on Duo MFA, Access, and Beyond editions.
- Duo SSO will continue to support Active Directory and SAML 2.0 as a first-factor authentication source.
Duo Free edition now supports shared custom New User policies
- Duo Free edition now supports sharing a custom New User policy between multiple applications.
The traditional Duo Prompt now recommends the minimum iOS version according to a protected application’s Dynamically updated by Duo operating systems policy
- If an iOS operating systems policy is configured for a protected application in the Duo Admin Panel to Encourage users to update or Block versions using either If not up-to-date or If end-of-life under the Dynamically updated by Duo versions in the dropdown selector, then an end-user who requests a Duo Push to a device running a blocked version of iOS will see a browser-based Duo Prompt notification asking the end-user to update to the minimum iOS version required by the policy.
- For example, with the policy depicted below, when an end-user requests a Duo Push to an iOS 15.6 device, the Duo Prompt will encourage them to update to iOS 15.7.1 (the minimum version required by the policy), not iOS 16.1.2 (the latest version of iOS). If they’re using iOS 14.8.1 or below, the Duo Prompt will require that they update to iOS 15.7.1 (not 16.1.2) and Duo will block their authentication. (These OS versions are in effect as of November 30, 2022.)
- Before this release, the Duo Prompt would have informed the end-user to update to the latest device-compatible version of iOS available.
- Operating systems policy is available to all customers on Duo Access and Beyond editions.
Message customization is no longer available by default for new Duo customers
- New Duo customers on Free or paid editions will not be able to customize SMS and Email messages for enrollment, activation, or authentication until this feature is enabled by a Duo service representative.
New and updated applications
Duo Device Health Application version 4 released
-
Version 4.0.0.0 for macOS
- Added support for Spanish (Latin America), Spanish (Spain), French, German, and Japanese languages.
- Fixed an issue that could prevent the enable automatic updates checkbox from being unselected.
- Improved reliability of the detection of Cisco Secure Endpoint.
-
Version 4.0.0 for Windows 10 and 11
- Added support for Spanish (Latin America), Spanish (Spain), French, German, and Japanese languages.
Duo Mobile for Android version 4.30.0 released
- Miscellaneous bug fixes and behind-the-scenes improvements.
Duo Mobile for iOS version 4.30.0 released
- Miscellaneous bug fixes and behind-the-scenes improvements.