Beyond Identity Secure Work Release Notes - May 28, 2025

Secure Work Release Notes for May 2025 bring powerful new features for IT admins, expanded support for identity integrations, and key improvements across the user experience. From customizable onboarding banners to enhanced proof prompts and refined role permissions, these updates are designed to strengthen security, improve clarity, and reduce friction for both users and administrators.
 

What's New

• Custom Enrollment Banners for User Portal Now Available
  
  IT admins can now customize enrollment banners to end users in the User Portal with the help of our Support Team. These banners support markdown formatting, making it easy to communicate onboarding instructions, security best practices, or key organizational messages at the point of device enrollment. This enhancement gives IT teams full control over messaging, helping reduce user confusion, lower support volume, and reinforce internal policies or branding.

  

• New SCIM Attribute Support: employeeNumber
  
  We've added support for the employeeNumber attribute in our SCIM implementation, aligning with RFC7643 standards. This new directory attribute provides customers with more flexibility in user correlation, particularly useful for complex identity integrations involving systems like Sailpoint and Okta. With this update, IT teams can map, store, and retrieve the employeeNumber attribute through SCIM and within the directory configuration—enabling more consistent identity lifecycle management across platforms.
   

• Kandji + Beyond Identity Integration

  The Beyond Identity Mac Platform Authenticator (PA) is now integrated into Kandji's Auto App Collections, enabling fully automated deployment and updates via the Kandji MDM platform. This eliminates the need for IT admins to manually download and re-upload the latest version of the Mac PA, streamlining operations with zero-touch updates. By selecting options like "Continuously Enforce" and "Automatically enforce new updates," you can ensure your macOS devices will always have the latest, most secure version of the Beyond Identity Authenticator.

Enhancements

• Updated Permissions for Help Desk Plus Role
  
  To better align with common access control practices, users assigned the “Help Desk Plus” role can no longer suspend other users. This helps ensure that sensitive account actions remain restricted to designated administrators. 
  
  🔧 Learn more about roles and permissions
   
• Platform Authenticator Updates: iOS v2.103.1 (Released May 13) 
  
  Streamlined Navigation After Authentication on iOS
  We've improved the post-authentication experience in our iOS app to make navigation smoother and more intuitive. After completing authentication, users are now guided back to the previous screen more seamlessly, reducing friction and improving overall usability. This enhancement is part of our ongoing effort to deliver a more polished and user-friendly experience on key mobile platforms.

Bug Fixes

• We’ve fixed an issue in the List Users API where the skip parameter wasn’t working as expected. You can now reliably paginate through users using this parameter in your API calls.