Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.
You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
What’s in this release?
New and updated applications
New features, enhancements, and other improvements
Bug fixes
See all bug fixes
New and updated applications
Duo Authentication Proxy version 4.0.1 released
- Fixed a bug where certain vendor-specific RADIUS attributes were not passed through correctly.
- The Authentication Proxy will not attempt to constantly connect to the Duo Single Sign-On service with expired credentials.
- Fixed a bug with binary LDAP attributes that caused certain authentications to fail.
- Fixed a bug that caused the Windows
authproxy_passwd tool to fail for secrets containing the % character.
- The error output when the Authentication Proxy cannot start TLS encryption due to missing configuration is clearer.
Duo Network Gateway version 1.5.7 released
- For Duo Network Gateways behind load balancers, added the option to specify the addresses of the load balancers so that Duo Network Gateway can trust the X-Forwarded-For header from the load balancer and use the true client IP address for logging, whitelisting IP restrictions, and passing upstream to protected applications.
- Increased the maximum permissible size of Duo Network Gateway restore files to 128MB.
Duo Device Health Application for Mac OS version 2.5.0.0 released
- Some adjustments to collection to support future efforts.
- Several visual improvements.
- Improved logging.
New named application added for the public beta of Duo Single Sign-On
-
Box has been added as a named application for the public beta of Duo Single Sign-On.
New features, enhancements, and other improvements
Improved UI for Protect an Application, application properties, and Directory Sync configuration pages in the Duo Admin Panel
- Combined two columns in the table layout of the Protect an Application page in the Admin Panel to make the information easier to read, including on a smaller screen. Now, 2FA and single sign-on details will display in a single column.
- Added a “Move to Top” label next to the arrow icon that appears in the Policies section of an application’s properties page to make it more clear how to re-order policies.
- Added a confirmation dialog box to Directory Sync configuration pages that appears if there are unsaved changes when an administrator navigates away from the page.
Users’ group membership added to Admin API Authentication Log response
- A user’s group information can now be fetched via
/v2/logs/authentication.
Seconds added to timestamps on Authentication Log and Single Sign-On Log events in the Admin Panel
- Events in the Authentication Log and the Single Sign-On Log, accessible via the Reports page in the Admin Panel, now display timestamps down to the second.
- Note that both the exported logs and logs fetched via API already contained timestamps down to the millisecond.
Bug fixes
- Added a description of the Operating Systems policy that governs static versions of Mac OS when it’s selected in the policy editor in the Admin Panel. Previously, there was no description displayed for this policy configuration in the editor.
- Fixed a security issue where one-time passcodes were not properly deprovisioned from a Duo administrator’s phone when another administrator was associated to that number.
- Fixed a bug in the UI that displayed the “Save Directory” button instead of the “No Changes” label when selecting “Delete Directory” and then canceling the action.
