Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.
You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
What’s in this release?
New and updated applications
Bug fixes
See all bug fixes
Got feedback?
New and updated applications
Duo Web v4 SDK now generally available, provides support for future release of Duo Universal Prompt
- Released v4 of the Duo Web SDK to add Duo’s two-factor authentication to your web application, complete with inline self-service enrollment and Duo Prompt.
- Migration of Web SDK v2 applications to Web SDK v4 is a prerequisite for enabling the future Universal Prompt, Duo’s next-generation authentication experience. Review the differences between v2 and v4 of the Web SDK, and the benefits of upgrading, in the Duo documentation.
- Client libraries are currently offered for Python and Java. To integrate with another language, please see the Duo OIDC-based API documentation.
Duo Mobile for iOS version 3.48.0 released
- Added support for Spanish and Japanese, using OS language settings. This is in addition to existing support of French, German, and English.
- Dropped support for devices running iOS 11.x. Users running all versions of iOS 11 who have the app already installed on their devices will continue to be able to use it, but they will no longer receive app updates. This allows us to continue taking advantage of new iOS capabilities.
Duo Mobile for Android version 3.48.0 released
- Added support for Spanish and Japanese, using OS language settings. This is in addition to existing support of French, German, and English.
- Dropped support for devices running Android 7.x (Nougat). Users running all versions of Android 7 who have the app already installed on their devices will continue to be able to use it, but they will no longer receive app updates. This allows us to continue taking advantage of new Android capabilities.
Duo Authentication Proxy version 5.2.0 released
- Adds support for multiple
[cloud] sections, which enables a single Duo Authentication Proxy to service more than one Active Directory or OpenLDAP directory sync. Learn more.
- The connectivity tool now displays warnings in yellow.
- Improved error messaging when a
User-Password attribute is missing in challenge response for radius_server_challenge.
- Corrected an issue preventing silent install on Windows.
- LDAP channel binding no longer fails when the server’s certificate uses the RSASSA-PSS signature algorithm.
- Fixed a bug causing authentications to fail when using SMS as a second factor with
radius_server_eap.
- Fixed a bug where local versions of Python packages interfered with Duo Authentication install on Linux.
- The connectivity tool now utilizes the configured HTTP proxy.
- Adds support for additional EAP and PEAP authentication methods like EAP-MSCHAPv2 in
radius_server_auto .
Duo for Jira version 2.0.2 now generally available, provides support for future release of Duo Universal Prompt
- Duo for Jira version 2.0.2 is now generally available and capable of supporting the future release of the Duo Universal Prompt.
- Updating Duo for Jira is a prerequisite for enabling the Universal Prompt once it is released.
Duo for Confluence version 2.0.2 now generally available, provides support for future release of Duo Universal Prompt
- Duo for Confluence version 2.0.2 is now generally available and capable of supporting the future release of the Duo Universal Prompt.
- Updating Duo for Confluence is a prerequisite for enabling the Universal Prompt once it is released.
Duo Network Gateway version 1.5.10 released
- Improved performance under high loads.
- Disables TLS 1.0 and TLS 1.1 support for improved security.
Ended support for Duo for Drupal 6 and 7 integration
- Support for Duo’s two-factor solution for Drupal 6 and 7 ended on January 28, 2021.
- Existing Duo Drupal installations will continue to provide two-factor authentication for user logins.
- No new Duo Drupal applications may be created in the Duo Admin Panel.
- For more information about this end of support milestone, refer to Duo documentation.
Bug fixes
- Fixed a bug that caused the policy editor UI in the Admin Panel to incorrectly show an entry for a Remembered Devices policy on all custom policies, with a configuration of “Do not remember devices,” where none existed before. Failing to remove the setting of “Do not remember devices” when saving other policy changes could have overridden any existing Remembered Devices settings.
- Fixed a bug where users in Locked Out status could not be edited in the Admin Panel without changing their status first.
Got feedback?
- We are collecting feedback from Duo administrators to better understand how you use information like Duo release notes, email notifications, and other sources of information to stay informed on changes in Duo’s product.
-
Take a 3-minute survey and share your thoughts.
