D280: Duo Release Notes for Dec 8, 2023

[kyleleighavery]

• New features, enhancements, and other improvements
• Now generally available: Duo Trust Monitor security event notifications
• Now generally available: Duo Authentication Proxy Dashboard
• Duo Single Sign-On for Generic OpenID Connect (OIDC) Relying Parties now supports OIDC Claim Transformations
• Duo Single Sign-On for Generic SAML Service Providers now supports preview of Attribute Transformation rules
• New Duo Push Verification endpoint available in the Duo Admin API
• Mobile Device Biometrics policy now supports disabling fallback to a less secure authentication factor
• New and updated applications
• Five new named SAML applications with Duo SSO
• Duo Authentication Proxy version 6.2.0 released
• Duo Desktop for macOS version 6.2.0.0 released
• Duo Desktop for Windows 10 and 11 version 6.2.0 released
• Duo Mobile for Android version 4.55.0 released
• Duo Mobile for iOS version 4.55.0 released
• Bug fixes

Hello everyone! Here are the release notes for our most recent updates to Duo.

Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out. You can subscribe to notifications for new release notes by following the process described here. If you have any questions about these changes, please comment below.

Check out the Guide to Duo End-of-Life and End-of-Support Plans. This guide provides an up-to-date list of current and past end-of-life plans for Duo products.

New features, enhancements, and other improvements

Now generally available: Duo Trust Monitor security event notifications

• Duo administrators with the Duo Premier or Duo Advantage edition can now enable email notifications sent for each security event surfaced by Duo Trust Monitor.
• Configure Duo to send security event notifications either to all Duo admins, or to only specific Duo admins, with Owner, Administrator, and Read-only roles.

 

Now generally available: Duo Authentication Proxy Dashboard

• The dashboard lets Duo administrators monitor the state of Authentication Proxies from the Duo Admin Panel.
• The dashboard is compatible with Authentication Proxies running version 6.0.1 or later and configured for SSO, MFA, or directory sync.

 

Duo Single Sign-On for Generic OpenID Connect (OIDC) Relying Parties now supports OIDC Claim Transformations

• OIDC Claim Transformations lets you define rules to modify relying party user attributes (claims) mapped to Identity Provider (IdP) attributes.
• OIDC Claim Transformation rules are useful when an OIDC relying party requires an attribute in a format that isn't provided by your IdP source. 
• The OIDC Claim Transformations feature in the Duo Admin Panel also lets you preview the result of transformation rules.

 

Duo Single Sign-On for Generic SAML Service Providers now supports preview of Attribute Transformation rules

• The Attribute Transformation feature in the Duo Admin Panel now lets you preview the result of transformation rules.

 

New Duo Push Verification endpoint available in the Duo Admin API 

• The new endpoint /send_verification_push enables the Admin API to Send Duo Push to a specific user.  

• The new endpoint /verification_push_response enables the Admin API to return the result of a specific verification push.

 

Mobile Device Biometrics policy now supports disabling fallback to a less secure authentication factor

• Duo administrators can now choose to disable fallback to the device passcode when biometric verification fails on an authentication device with Duo Mobile. 
• Available in Duo Advantage and Duo Premier.

New and updated applications

Five new named SAML applications with Duo SSO

• There are now named SAML applications to protect AWS Client VPN (note: does not support IDP-initiated authentication), ManageEngine AssetExplorer, ManageEngine Access Manager Plus, ManageEngine Endpoint Central and UserVoice with Duo SSO, our cloud identity provider.
• Reminder: Duo Access Gateway reached the last date of support on October 26, 2023. The new DAG end-of-life date will be March 30, 2024. Please see the Guide to Duo Access Gateway end of life for more details.

 

Duo Authentication Proxy version 6.2.0 released

• Connectivity checker no longer rejects ECC SSL keys.
• Improves integration with systemd on Linux systems.
• Improves handling of corrupted SSO configuration file.
• IFrame reconfiguration script no longer creates duplicate configuration sections.
• Resolves various CVEs including CVE-2023-5363, CVE-2023-4807, and CVE-2022-40897.

 

Duo Desktop for macOS version 6.2.0.0 released

• Fixed an issue that would prevent the app from automatically launching after being updated or when logging in.
• Significantly improved the performance of certain security agent checks.

 

Duo Desktop for Windows 10 and 11 version 6.2.0 released

• Fixed an issue that would cause automatic updates to the app to get delayed if the system was in sleep or hibernate mode.

 

Duo Mobile for Android version 4.55.0 released

• Miscellaneous bug fixes and behind-the-scenes improvements.

 

Duo Mobile for iOS version 4.55.0 released

• Miscellaneous bug fixes and behind-the-scenes improvements.

Bug fixes

• Duo administrators with the Help Desk role can now export reports in CSV and JSON format.