Cloud

What's new

• Sentinel One Integration added another high-profile and strategic partnership to our product.

• Added Group Search functionality allowing tenant admins to locate and manage user group affiliation quickly. 
  
  
  Users can now search within each group for a user
  
  
  Users can identify which groups a user is a member of via the user’s profile

• Added support for multiple onboarding emails:

  • Provides SEs the ability to add multiple email templates.

  • Allows tenant admins to select an email template to use for enrollment.
    
    Support for multiple onboarding emails

• GPG Key Creation is now available as a policy attribute. GPG Key Creation transactions will be evaluated by a tenant's policy rule set starting with Authenticator versions 2.71.0 and above. In order to match on a GPG Key Creation transaction, leverage the specific GPG Key Creation transaction attribute or match on 'any' transaction.
  
  

Updated

• Updated deployment snapshot numbers to match what the users see in the directory.  Previously, we had been compiling these metrics from events, leading to discrepancies between the directory and the snapshot.

• Replaced instances of "device" or "credential" with "passkey" where appropriate. This change gives users a more consistent and understandable representation of passkey-related metrics throughout the admin console.

• Updated the desktop-login downloads page by adding a download link for the executable file (.exe).
  
  

Authenticator

What's new

• We improved the accessibility in the Authenticator user interface on Android, iOS, and Windows.
• Focus on individual or grouped UI elements by tabbing or other UI selection methods is consistent and predictable.
• Enabled labels and headings for all selectable UI elements.
• Enabled operating system text-to-speech accessibility features for all selectable UI elements.

Resolved

• We improved the error message wording to guide users when the Authenticator is not on the user's device.
• When the user started Authenticator on Windows, it stopped with an unexpected error. Resolved in 2.70.3

Desktop Login

What's new

User enrollment data is moved internally to a new extensible data storage model.

Known issue

Any user enrolled before version 2.64 must unenroll and then enroll again after 2.71.0 gets installed. This is because we added passkey caching for offline login in version 2.64. The cache gets created automatically for users enrolled with version 2.64 and later. This cache is necessary for successfully migrating user enrollment data to the new extensible data storage model.

Resolved

• Fingerprint readers respond more consistently after Windows machine startup. 
• We improved the error message wording displayed when a user attempts to authenticate using an account locked by Active Directory.
• When deleting a passkey used to enroll a Windows user, the user gets unenrolled automatically.
• Passkeys marked as invalid can now be removed through the Authenticator user interface.
• The Beyond Identity tile on Windows is now present after rebooting the computer or waking it from sleep.
• The active Authenticator configured was incorrect after uninstalling the User-context Platform Authenticator and installing the System-context Authenticator or Authenticator and Desktop Login on Windows.