Duo Release Notes for December 11, 2020

Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.

You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

What’s in this release?

New features, enhancements, and other improvements

New and updated applications

Bug fixes

See all bug fixes

New features, enhancements, and other improvements

Custom group policies can now be applied on Duo MFA edition

  • Duo MFA edition administrators may now apply any existing MFA edition policies (such as authorized networks, authentication methods, and new user enrollment) to specific user groups.
  • Custom group policies can be added to one or more Duo user groups from an application’s properties page. To understand how multiple group policies get enforced and how to reorder policies based on priority, refer to this section of the Policy & Control documentation.

Allowed network access now configurable for Duo Admin API, Accounts API

  • Duo administrators may now restrict access to the Admin and Accounts API to a set of IP addresses or IP ranges. Requests originating from IPs that do not match the network allow list will be blocked.
  • You can configure allowed IPs through the Duo Admin Panel on the application details page for the Admin or Accounts API using the new field “Networks for API access,” or through the Admin API itself.
  • Requests to the API from a disallowed IP will be logged in the Administrator Actions report.

Bulk-edit feature added for updating company details on MSP child accounts

  • MSP partners who manage child accounts may now bulk-update those accounts’ company details (e.g. name, industry, country, etc.) using a CSV upload.
  • To begin a bulk edit of child account company details, go to the Accounts tab in the Admin Panel and select the link to “Bulk Edit Accounts” at the top of the page.
  • More information is available in this Duo Knowledge Base article.

Admin API now returns activation URL information for administrators in pending status

  • The Admin API endpoint /admin/v1/admins will now return the activation URL information for Duo administrators who have a status of Pending Activation.

New and updated applications

Duo Mobile for Android version 3.43.0 released

  • Duo now helps you differentiate between all of your third-party accounts. If you add an account that we do not have a logo for, we will automatically generate a unique logo with a color and letter tied to the account.

Duo Mobile for iOS version 3.43.0 and version 3.44.0 released

  • Various behind-the-scenes improvements and minor bug fixes to improve your authentication experience.

Bug fixes

  • Fixed a bug that prevented the display of the “Text me new codes” button in the browser-based Duo Prompt for users whose only authentication method was SMS passcode.