Hello everyone! Here are the release notes for our most recent updates to Duo.
Please note that release D273 was delayed; Originally scheduled for August 24-31, D273 began deployment to production on August 31 and is expected to finish on September 7. Some customers will not see the changes described under the sections New features, enhancements, and other improvements and Bug fixes until September 7, 2023.
Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.
Check out a new resource: Guide to Duo End-of-Life and End-of-Support Plans. This guide provides an up-to-date list of current and past end-of-life plans for Duo products.
What's in this release?
- New features, enhancements, and other improvements
- Now in public preview: Redesigned header and navigation in the Duo Admin Panel
- Now in public preview: SAML Encrypted Assertions and Metadata Discovery for Duo Single Sign-On for Generic SAML Service Providers
- Updated WebAuthn authentication methods now available in the Duo Universal Prompt and Duo's self-service portal
- Duo’s Import Users tool can now match import file alias values with existing usernames
- Duo Applications search criteria improved
- Activity Logs endpoint updated in the Duo Admin API
- New and updated applications
- Four new named SAML applications with Duo SSO
- Duo Mobile for Android version 4.48.0 released
- Duo Mobile for iOS version 4.48.0 released
- Bug fixes
New features, enhancements, and other improvements
Now in public preview: Redesigned header and navigation in the Duo Admin Panel
- Admin Panel header and navigation are presented with new design and styles.
- The Admin Panel can be displayed full-width in the browser.
- Search results are now categorized.
- Help content is now available in the header.
- The account switcher dropdown now displays the number of users in each account.
- Duo Support phone number under Help is now localized to the administrator location.
- For a limited time, administrators may opt-out of the new header and navigation using a link at the bottom of the left navigation panel.
- Customers with the ability to have subaccounts on different Duo deployments (such as members of Duo’s MSP program) will not have access to the public preview at this time. Read this article to learn more about how to identify your Duo deployment.
Now in public preview: SAML Encrypted Assertions and Metadata Discovery for Duo Single Sign-On for Generic SAML Service Providers
- Duo SSO now supports encrypted assertions for generic SAML service providers.
- Duo SSO now supports import of your generic SAML service provider metadata using a file or URL.
Updated WebAuthn authentication methods now available in the Duo Universal Prompt and Duo's self-service portal
- End-users will see new options when they first enroll in the Universal Prompt or modify their authentication device after enrollment in the self-service portal:
- Touch ID has been renamed Platform authenticator, and includes the following factors:
- Touch ID or Face ID on macOS and iOS devices
- Android Biometrics
- Windows Hello
- Security Key has been renamed Roaming authenticator, and includes any external device supported as a WebAuthn/FIDO2 security key.
- Duo administrators will see these methods in the Duo Authentication Log viewed in the Duo Admin Panel or exported via the Duo Admin API.
Duo’s Import Users tool can now match import file alias values with existing usernames
- Import Users will now try to match CSV file alias values to existing Duo usernames.
- Previously, Import Users would only identify existing users with a username that matched the value in the username field.
- When importing a CSV file to create or update users, Import Users will now modify an existing Duo user whose username matches values in the CSV username or alias[1…8] fields.
- When importing a CSV file, Import Users will still create a new user for a row in a CSV file when the row username and alias fields do not match any existing Duo usernames.
- For example, given an existing Duo user with username george and alias1 martha:
- If the CSV has username george and status disabled, Import Users will update the existing user george to disabled.
- If the CSV has username martha and status disabled, Import Users will update the existing user george to disabled.
- If the CSV has username martha and alias1 james, Import Users will match the user with username george on the alias martha, and will update alias1 from martha to james.
- If the CSV has username james and alias1 george, Import Users will search for a user with username or alias james. If there is no james, Import Users will attempt to create a new user with username james and alias1 george. It will fail because a user with username george already exists.
Duo Applications search criteria improved
- The search feature on the Applications page now supports searching by a protected application’s integration key/client ID.
Activity Logs endpoint updated in the Duo Admin API
- deviceapi is now included as an actor type in the Admin API Activity Logs endpoint response format.
- Note that the Activity Logs API endpoint is currently in Public Preview for Duo Advantage and Premier. Interested Duo Essentials plan customers can contact us to join the preview.
New and updated applications
Four new named SAML applications with Duo SSO
- There are now named SAML applications for Elastic, GitLab self-managed subscription, Island, and Datto File Protection to protect using Duo SSO, our cloud identity provider.
- Reminder: Duo Access Gateway will reach end of life October 16 through 26, 2023. Please see the Guide to Duo Access Gateway end of life for more details.
Duo Mobile for Android version 4.48.0 released
- Google Play will now list the Duo Mobile nearby devices permission group.
- Duo Mobile updated to support custom branding accent and background color. This will not be fully enabled until release D274 (scheduled to begin September 7, 2023) when corresponding updates will be released in the Duo Admin Panel. After D274, custom branding accent and background color settings will automatically apply to Duo Mobile.
Duo Mobile for iOS version 4.48.0 released
- Miscellaneous bug fixes and behind-the-scenes improvements.
Bug fixes
- Fixed a bug affecting Duo Free and Duo Federal editions that prevented saving changes to the Help Desk Custom Message.
