Duo Release Notes for April 10, 2020

Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.

You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

What’s in this release?

New features, enhancements, and other improvements

New and updated applications

Bug fixes

See all bug fixes

New features, enhancements, and other improvements

Improvements to the Directory Sync UI

  • When viewing the Directory Sync page in the Duo Admin Panel, administrators will now see the tab that contains at least one directory as the default view, instead of always seeing the Azure Active Directory tab first.
  • If a group name has changed in the synced directory, the new group name will now appear when the Directory Sync page is loaded, rather than waiting until the next sync to display the new name.

Clearer presentation of Device Health Check data in the Authentication Log

  • The Authentication Log entry for an authentication attempt that is denied due to a failed Duo Device Health Application Device Health Check will now specify which policy was not met. The reason will be marked in red text with an X.

Addition of documentation links for partner applications in the Application list

  • Duo Ready Partner applications now have documentation links to the Duo Ready Partners page.
  • Search for “partner” on the “Protect an Application” page to find all Duo partner-created integrations.

Updated error message wording in the Duo Prompt for unenrolled users

  • Updated the wording of the error message shown to end-users when they are not enrolled in Duo and cannot self-enroll in order to make it more clear how they can get help. The new message directs them to contact their organization’s IT help desk for assistance.

New and updated applications

Public beta of Duo Single Sign-On now available on more deployments, Cisco Umbrella added as named application

  • The public beta for Duo Single Sign-On is now available for non-U.S. deployments on DUO3, DUO47, and DUO57.
    • You can join the beta and begin configuring Duo Single Sign-On through your Admin Panel. If you are unsure whether Duo Single Sign-On is available on your deployment, check out this article to learn how to find your deployment ID.
  • Cisco Umbrella has also been added as a named application for Duo Single Sign-On.

Duo Mobile for Android 3.31.2 released

  • Improved support for Duo Mobile for Trusted Endpoints.
  • Improvements to the restore workflow for Duo-protected accounts.
  • Fixed an issue where some users saw redundant Duo Push notifications.

Bug fixes

  • Directory Sync fixes:
    • If the “Import phones” attribute is disabled on a Directory Sync that previously synced phones, all synced phones will be converted to non-synced, editable entries the next time the sync runs. This change will allow administrators to delete those phones as needed.
    • Improved the wording for validation error messages on Active Directory and OpenLDAP Directory Sync configuration pages.
    • Fixed a bug that caused newly created Azure Active Directory syncs to sync users’ phones by default.
    • Fixed a bug for Active Directory and OpenLDAP syncs that prevented users from being updated when the only change was a new distinguished name (DN).
    • The “Sync This User” button for single-user syncs is now disabled when a username is not provided in the username field.
    • Fixed an issue where enrollment emails were sent to users regardless of whether the “Send enrollment emails to sync users” checkbox was checked in the Admin Panel.