D268: Duo Release Notes for June 22, 2023

kyleleighavery · ‎06-22-2023

Hello everyone! Here are the release notes for our most recent updates to Duo.

Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

Check out a new resource: Guide to Duo End-of-Life and End-of-Support Plans. This guide provides an up-to-date list of current and past end-of-life plans for Duo products.

What’s in this release?

New features, enhancements, and other improvements

Now Generally Available: Require Devices to be Registered with the Duo Device Health App to Improve Security
Self-Service Portal Policy Enabled by Default for New Customers
Update to Duo Device API

New and updated applications

Six New Named Applications with Duo SSO
Authentication Proxy Version 6.0.1 and 5.8.2
Duo Device Health App for MacOS Version 5.0.0.0
Duo Device Health App for MacOS Public Beta Releases version 5.0.1.0 Released
Duo Device Health App for Windows Version 5.0.0
Duo Device Health App for Windows Public Beta Releases version 5.0.1 Released
Duo Mobile for Android Version 4.42.1
Duo Mobile for Android Version 4.43.0
Duo Mobile for iOS Version 4.43.0

New features, enhancements, and other improvements

Now generally available: Require devices to be registered with the Duo Device Health App to improve security

Duo Premier and Advantage customers can protect against spoofing attacks by requiring device registration and device identifier verification with the Duo Device Health App,
Enable this policy in the Duo Admin Panel under Policies > Device registration.
- You will be able to register devices using signed payloads with the Device Health App. A Trusted Platform Module (TPM) or Secure Enclave is required to register devices.
- To register devices using the Device Health App, you will need to select the Require users to have the app option for MacOS, Windows, or both.
View and manage devices registered with the Device Health App in the Admin Panel under Endpoints > Registered Devices.

Self-Service Portal policy will now be enabled by default for new customers

The Self-Service Portal allows users to add, edit and remove authentication methods while logging in to protected applications through the Duo prompt.
Administrators and Owners can adjust user access to the Self-Service Portal on the Policies page of the Duo Admin Panel

New Duo Device API endpoint

Use the Retrieve Device endpoint to return information about a single device in your management cache.

New and updated applications

Six new named applications with Duo SSO

There are now named applications to protect Jitbit, Asana, Rapid7, HashiCorp Cloud, Planview AdaptiveWork and Jamf Pro Server using Duo SSO, our cloud identity provider.
Reminder: Duo Access Gateway will reach end of life in October 2023. Please see the Guide to Duo Access Gateway end of life for more details.

Authentication Proxy version 6.0.1 and 5.8.2 released

These releases resolve an issue in versions 6.0.0 and 5.8.1 (CVE-2023-20207 Cisco Security Advisory) where some configurations would output plain-text secrets to authproxy.log during proxy service start.

Duo Device Health App for MacOS version 5.0.0.0 released