Duo Release Notes for October 30, 2020

Kelly4 · ‎10-30-2020

Hello everyone! Here are the release notes for the most recent updates we’ve made to Duo.

You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

What’s in this release?

New features, enhancements, and other improvements

Duo Single Sign-On and Duo Central are now generally available

Duo Single Sign-On and Duo Central are now generally available to all non-Federal customers on Duo MFA, Access, and Beyond editions at no additional cost.
Duo Single Sign-On is our new cloud-based SSO offering. Duo Central is a cloud-hosted site that users can visit to get access to all of your organization’s applications and links.
You can enable and configure Duo Single Sign-On and Duo Central from the Duo Admin Panel by going to Single Sign-On in the left sidebar.
Learn more about Duo Single Sign-On and Duo Central in this Duo blog post and related Duo Community post. You can also now check out a demo of Duo Single Sign-On at demo.duo.com.
As part of this latest release, we also added the following enhancements to Duo Central:
- Moved the Status field to the top of the Duo Central configuration page, where it will now appear as a toggle.
- Added a link to the Duo Central portal site at the top of the configuration page.
- Added the ability to search tiles from the Tiles tab.
- The Duo Central portal site also now maintains the end-user’s preference of tile or list view between sessions.

Public preview phase announced for new developer tooling as part of the Universal Prompt Project

You can now participate in a public preview of Duo’s new developer tooling for the Universal Prompt, including a new OIDC standards-based Auth API and Duo Web SDK 4.
The public preview of Web SDK 4 provides client libraries for Java and Python. Please contact Duo Support if you are interested in SDK support for other languages. To use a different language or to create your Duo integration without using one of our SDKs, see the OIDC Auth API.
To learn more about the Universal Prompt Project and new developer tooling, see this Duo blog post.

Public preview phase announced for updated Jira and Confluence applications as part of the Universal Prompt Project

You can now participate in a public preview of updated versions of Duo’s Jira and Confluence integrations. These new versions are capable of supporting the Duo Universal Prompt once it is released.
For more information about the Universal Prompt Project, refer to our documentation and Duo blog series.

New Admin Panel UI messaging and report for tracking progress toward the Universal Prompt

Added the Universal Prompt Update Progress report, available at Reports > Universal Prompt Progress in the Admin Panel.
The Universal Prompt Update Progress report acts as a centralized location for determining which of your applications will be capable of supporting the new Universal Prompt, monitoring updates to the availability of required software updates to support the Universal Prompt, and viewing which applications have the necessary updates in place.
When the Universal Prompt becomes available, the report will show which applications are ready for you to activate the new prompt and which have completed migration to the new UI.
Individual application details pages will also display a new Universal Prompt section where applicable. You will also see a banner on the Applications page with a link to the Update Progress report.
For more information about the Universal Prompt Project, refer to our documentation and Duo blog series.

New, easier workflow for adding Duo administrators

There is a new method for adding administrators to Duo that allows Owner-role administrators to create a new administrator of any role, generate a setup link, and then allow the new administrator to complete their own account setup, including setting their own password and activating Duo Mobile.
A banner has been added to the Add Administrator page in the Admin Panel to describe the new process. From this page, Owner-role administrators can check a box to automatically send the new administrator setup link via email. Alternatively, Owners can choose to send the email later, or copy-paste the link to send it through another channel.
Administrator setup links expire after 1 week, and can be invalidated or recreated at any time by an Owner.
As part of this change, Owners will no longer be able to set a new password for an administrator who has forgotten their password. Instead, Owners will be able to copy-paste a link from the administrator’s details page where the administrator can reset their password. The action of viewing the reset password link for another administrator will be recorded in the Administrator Actions log.
The Admin API has also been updated to support the new administrator provisioning workflow.
- Refer to this Duo Knowledge Base article for more information.

Username alias options increased from 4 to 8 aliases

Users can now have up to 8 username aliases. These are managed on the User details page or Directory Sync pages in the Admin Panel.
The previous maximum username aliases was 4.
As part of this change, we also updated the UI to make it easier to add or edit aliases in any order, as described in the August 28, 2020 and August 14, 2020 release notes.
In addition, this change introduced a new attribute to the Admin API endpoints for user aliases. Refer to the September 11, 2020 release notes for more information.

Change to security key dual-enrollment workflow for new Duo end-users

End-users who are enrolling a security key in Duo for the first time will now be prompted each time they authenticate with their security key to enroll the key as both a U2F and a WebAuthn device. They will have the option to skip the dual-enrollment step, but will now be asked the next time instead of permanently skipping the prompt.

New and updated applications

Added support for AWS China regions for Duo Single Sign-On for Amazon Web Services

The Duo Single Sign-On for Amazon Web Services application now supports AWS China regions.

Duo Mobile for iOS version 3.41.0 released

Behind-the-scenes improvements and minor bug fixes to enhance your authentication experience.

Duo Mobile for Android version 3.41.0 released

Behind-the-scenes improvements and minor bug fixes to enhance your authentication experience.

Bug fixes

The label “trusted network” has been updated to “authorized network” on the Policy Impact report in the Admin Panel to align with the terminology used in documentation and in other parts of the product.
Fixed a bug with the Duo Access Gateway Admin Panel application page that would sometimes prevent administrators from saving their configuration changes.
Fixed an issue where users saw an error on the AD FS login page when using AD FS as a SAML authentication source for Duo Single Sign-On.