• [FIXED] TOTP and backup codes saving issue
• [IMPROVED] Security requirements to the Data Center App Approval process

• [ADDED] Support for WebAuthn API

• [ADDED] Restrict API calls

• [FIXED] Error on the user config page

• [FIXED] Export Authentication Log with big data
• [ADDED] Provide non-admin user with ability to manage 2fa users

• [IMPROVED] Security improvements
• [IMPROVED] Bulk user reset option

• [FIXED] Validation on IP whitelist fields
• [FIXED] Close pop-up

• [FIXED] Error after login on Windows
• [FIXED] Hide info banner from non-admin users

• [ADDED] Hide the info message about deactivated login options for non-admin users (optional)
• [ADDED] Autologin as a configurable option
• [ADDED] CSRF protection on User delete
• [IMPROVED] Application security
• [FIXED] Path Traversal issue
• [FIXED] Lost token on the User config page
• [FIXED] Minor security issue
• [FIXED] Wrong redirect after pass 2FA

• [ADDED] Confirmation on Key Size and Timestep change
• [ADDED] Validation for TOTP settings
• [ADDED] Auto submit TOTP key
• [ADDED] Remove 2FA user’s settings after User is deleted
• [FIXED] U2F notification in IE
• [FIXED] Login using dashboard
• [FIXED] Compatible with oAuth

• [FIXED] Search groups on the configuration page

• [IMPROVED] Redirect the user to the dashboard after reset by an administrator
• [IMPROVED] Minor issues
• [FIXED] Block access to the instance before brute force enabled

• [IMPROVED] Minor improvements

• [ADDED] Brute Force Defence
• [FIXED] Force after 2FA reset
• [FIXED] Authentication disabled in logs
• [FIXED] Optimized the layout of the login page
• [IMPROVED] Minor issues

• [ADDED] Export logs

• [ADDED] "Resets authentication settings" entry in audit log
• [ADDED] Option to force all except groups

• [FIXED] Lost page parameters after redirect
• [FIXED] Minor issues
• [FIXED] Transactional error
• [ADDED] Whitelist for login with OAuth (Application links, etc.)
• [IMPROVED] Application performance

• [FIXED] IE login button

• [ADDED] Duo Security Support
• [ADDED] Support IE and EDGE
• [ADDED] Support unlimited amount of U2F devices
• [FIXED] Use the same name of device in all system
• [FIXED] IP whitelisting performance issue
• [FIXED] IP whitelisting range
• [IMPROVED] Minor issues

• [ADDED] Configurable the lifetime for "Remember me"
• [ADDED] Added device date info
• [IMPROVED] Long U2F name issue
• [FIXED] Blocking Google NTP Server connection in certain cases (2FA Configuration page was not loaded

Application release