Release Notes
New features and improvements in PingOne DaVinci. Updated May 6, 2026.
Subscribe to get automatic updates: PingOne DaVinci Release Notes RSS feed
May 2026
May 6
Increased variable limit
Improved
We’ve increased the number of variables that an environment can store to 200. Learn more in Flow limits.
Added new analytics filter
New
We’ve added the ability to filter analytics results by Transaction ID. Learn more in Viewing flow analytics.
May 5
Improved PingOne Authentication session creation
Improved
DaVinci now automatically tracks the user ID and authentication methods used during a flow execution and passes them to the PingOne Authentication connector to create a session. This delivers secure-by-default flows, reducing impersonation risks and removing the need for you to map these fields manually in each flow.
This change is backward compatible. Existing flows using the PingOne Authentication connector’s Return Success Response capability can continue to use existing mappings.
Learn more in Including variables and other data.
April 2026
April 30
Fixed IdP redirect issue in widget flows
Fixed DV-21678
We fixed an issue with flows launched with the widget that used social IdP that caused the Return to URL field to be ignored. If the IdP returns an error, the user is now correctly redirected to the Return to URL, and the flow progresses down the false path from the IdP node.
This fix is controlled by a feature flag. Contact Ping Identity support to enable it for your environment.
April 28
Improved flow analytics display
Improved
We’ve made several improvements to the flow analytics display, including:
-
Clearer linking between nodes and logged events
-
Expandable/collapsible view of event details
-
The ability to copy event details
-
A streamlined user experience
Learn more in Debugging and analytics and Viewing flow analytics.
April 23
Content Security Policy (CSP) updates
Info
We’re making two changes to the upcoming CSP updates.
-
The current CSP controls are now invisible for all environments that aren’t using them. Updated CSP controls will be released in May.
-
The dates for the remaining phases have shifted:
-
Early May 2026: You’ll be able to configure CSP overrides at the flow level if your environment uses custom domains.
-
Early June 2026: We’ll transition the baseline CSP to enforcement mode with a controlled rollout.
-
Teleport node may return payload as string
Issue
If you use a false path to a teleport connector with the Go to Start Node capability selected, the payload that’s passed becomes a string.
The workaround is to place a functions connector after the destination teleport connector and configure the functions connector to reformat the string into the correct data type.
April 21
Info
End of life for pingidentity/davinci terraform provider
The pingidentity/davinci Terraform provider is now deprecated and will no longer be maintained after April 30, 2027. If you’re using it, you should migrate your DaVinci Terraform configuration to the pingidentity/pingone provider. Learn more about migrating in the migration documentation.
April 14
Streamlined PingOne flow identification
Improved DV-14275
We’ve streamlined how PingOne flows are identified within DaVinci. Previously, two different fields (trigger.type=AUTHENTICATION and settings.pingOneFlow) could be used to designate a flow as a PingOne flow.
To improve consistency and clarity, we’ve updated the system to exclusively use the trigger.type=AUTHENTICATION setting as the source of truth. The settings.pingOneFlow field in the flow JSON is now ignored. Flows using the old setting can still be imported but must be updated. If you use Terraform, you should update to the latest version.
Updated flow import to include JavaScript check
Improved DV-21416
We’ve updated the flow import feature to scan the imported flow and any referenced subflows for JavaScript and display a non-blocking warning if JavaScript is found. This improves security awareness without slowing the import process.
April 9
Released Authentication and MFA Use Case connectors
New
We’ve released the Authentication and MFA Use Case connectors in early access. Learn more in the connector release notes.
March 2026
March 31
Added controls for multiple flow executions
New DV-6977
We’ve added the ability for DaVinci to support multiple flow executions if a user launches more than one flow in the same browser. When Allow Multiple Flow Executions in Browser is enabled, the first flow will run, and the remaining flows will pause until the first flow is finished. Learn more in Company Settings and in Launching a flow with the widget.
March 16
New experience for adding nodes to the canvas
New
To make it easier for you find commonly-used nodes, clicking + on the canvas opens a new menu that makes common flow elements easier to find.
-
User Interface
-
Add a blank Show Form, Custom HTML Template, or Custom HTML Message node to the canvas.
-
Select an existing form from the drag-and-drop form builder to add a pre-configured Show Form node to the canvas.
-
-
Connectors
The same as before, but the New tab is now organized by connector type and vendor.
-
Subflow
Select an existing flow to add a preconfigured subflow node to the canvas.
Additionally, when you add nodes to the canvas, you can place them anywhere you want. Learn more about nodes in Managing nodes.
March 13
Adding a baseline report-only Content Security Policy (CSP)
New
We’re introducing a baseline Content Security Policy (CSP) for all PingOne OIDC and SAML flows to enhance browser-level security protections.
The CSP introduction is being applied in multiple phases. In the first phase, beginning March 23, 2026, the baseline CSP will be applied in report-only mode. This will allow Ping to monitor and identify violations without blocking any resources.
Ping will actively monitor violations to ensure a smooth transition to enforcement.
These CSP headers are applied to HTML responses in flows launched with a PingOne redirect. The baseline policy is:
Content-Security-Policy-Report-Only base-uri 'none'; object-src 'none'; frame-ancestors 'none' script-src 'unsafe-eval' https: http: 'nonce-<dynamic>' 'strict-dynamic'; report-uri https://csp.ping-security.com/csp-reports;
What’s next
-
Early April 2026: You will be able to configure CSP overrides at the flow level if your environment uses custom domains.
-
Early May 2026: We will transition the baseline CSP to enforcement mode with a controlled rollout.
If you have concerns about CSP behavior in your flows, contact Ping Support.
March 4
Added legacy browser support
New DV-1222
We’ve added an option for flows to support rendering in a legacy browser directly or within a WebView compatible with legacy browsers. Learn more in Editing flow settings.
March 3
Improved analytics feature
Improved DV-13689
We’ve streamlined flow logging to reduce noise and highlight critical events:
-
Refined the analytics display to make
DEBUGlogging more concise and remove theReceive Requestevent fromINFOlogging. -
Refined the field content for each event to only include identifier and timing information, making relevant data easier to find.
-
Reduced the number of events for
INFOandDEBUGlogs, removing redundant events and making it easier to parse the log. -
Removed unnecessary fields to improve performance.
February 2026
February 27
Added options for disabling default CSS
Improved DV-7299
We’ve added the ability to disable the default DaVinci CSS for a specific flow. You can enable this ability using flow settings for a flow launched with a redirect, or using an alternate JavaScript file for a flow launched with the widget. Learn more in Editing flow settings and Launching a flow with the widget.
February 23
Updated the appearance of nodes on the DaVinci canvas
Improved
We’ve updated the nodes on the DaVinci canvas with softer edges and shadows. For nodes with a list of outcomes, like the Function connector’s A==B Multiple Conditions capability, the new look integrates the list into the parent node and provides more room for the outcome labels.
February 19
Updated global variables for custom domain infrastructure changes
Info
We’ve updated the DaVinci global variables as part of the second phase of custom domain infrastructure changes. Learn more about custom domain infrastructure changes in the PingOne release notes. Learn more about the changes to DaVinci in Including variables and other data.
February 18
Fixed social IdP redirect issue in SDK flows
Fixed DV-18517
We fixed an issue with flows launched with the SDK that used social IdP that caused the Return to URL field to be ignored. If the IdP returns an error, the user is now correctly redirected to the Return to URL, and the flow progresses down the false path from the IdP node.
February 6
Fixed UI Subflow validation issue
Fixed DV-21831
We’ve updated the flow validation rule for UI subflows to make it a warning rather than an error, and to provide additional guidance for avoiding UI subflow issues. Learn more in Validating a flow.
January 2026
January 27
Improved logging data for DaVinci webhook events
Improved DV-21680
We’ve updated the DaVinci Interaction Send Error Response webhook events to include user/actor information whenever it is available for a connector. This improvement streamlines the troubleshooting process by making user details easier to find.
December 2025
December 2
Fixed node configuration retention issue
Fixed DV-17680
We fixed an issue that caused configuration data from previously selected capabilities to be saved within a flow, causing inaccurate data to be included during the flow validation. Saved flow versions now only contain data for the active capabilities.
November 2025
November 21
Issue
We’ve temporarily reverted the analytics changes from November 11 and 18 because of latency issues.
November 18
Improved flow validation
Improved
We’ve improved the flow validation process to detect additional issues, including teleport node, subflow, and JSON success and error issues. Learn more in Validating a flow.
November 11
Improved flow analytics display
Improved
We’ve made several improvements to the flow analytics display, including clearer linking between nodes and logged events, icons for events indicating an error, and the ability to filter the flow execution list for flow executions with errors. Learn more in Debugging and analytics and Viewing flow analytics.
November 6
Added flow timeout customization options
Improved
We’ve added the option to use custom HTML and CSS for the flow timeout error message, replacing the default flow timeout error message. Learn more in Editing flow settings.
October 2025
October 7
PingOne Forms connector renamed to Form connector
Info
The PingOne Forms connector has been moved to the Core category and named the Form connector. Learn more in the Form connector.
September 2025
September 23
Fixed flow version retention issue
Fixed DV-18157
We’ve fixed an issue with flow version retention. The issue caused every previous deployed flow version to be preserved, which caused flow latency or save failures in some cases. The creation of new flow versions was blocked in some environments because of this issue.
DaVinci now correctly enforces a limit of 100 flow versions per flow, which includes the versions used in flow policies directly or indirectly through a subflow reference. Versions older than the 100 most recent versions, which might have been visible before, are now deleted automatically.
September 9
Upcoming analytics data retention changes
Improved
Starting September 10, 2025, and rolling out over the following two weeks, we will make the following changes to how DaVinci analytics events older than 30 days are retained:
-
Analytics data up to 30 days old will continue to be available in the DaVinci Analytics feature as it is today.
-
Analytics data older than 30 days will no longer be retrievable.
This change won’t affect dashboards or DaVinci audit trail retention.
August 2025
August 20
Added the ability to open Translatable Rich Text links in a new tab in PingOne forms
Improved
In PingOne Forms, you can now set hyperlinks in Translatable Rich Text to open in a new tab. This allows you to keep the user in the current flow while directing them to an out-of-band experience or to an external resource, such as an agreement document hosted by your organization.
August 19
Added SAML request parameters
New
For flows launched using PingOne, when the Initiate Single Sign-On URL includes request parameters, those parameters are included in the SAML properties from PingOne. Learn more in Launching a PingOne flow with a redirect.
August 1
Flow versions retention issue
Issue DV-18157
Flow versioning has a known issue that causes every previous flow version to be preserved, ignoring the intended limit of 100 flow versions per flow. In some cases, this can cause flow latency or save failures. The creation of new flow versions has been blocked for flows with excessive versions.
July 2025
July 29
Enhanced linting in custom code fields
Improved
Custom code fields in DaVinci, such as in the Custom Function node, now support more linting rules to promote best practices for code. As a result, you might see new messages in existing code, including line 3 of the default code that was previously provided.
The default code for Custom Function nodes has been updated to support the new standards.
If your current code includes module.exports = a = async ({params}) ⇒ {, update it to match line 3 of the new default code:
// Write your code here
// Supported language: Javascript
module.exports = async ({params}) => {
console.log('params: ', params);
return { 'testVariable': params.testVariable };
}
July 28
Changed handling of global variables
Info
We’ve updated the handling of global variables. Any global variable that’s specific to the client, such as IP address and userAgent, is populated or repopulated by the most recent HTTP request. This can include out-of-band continue or webhook nodes that are active on the current branch of the flow, where the client might be different from the one that initiated the flow.
Removed unnecessary attributes from connector error output
Improved
We’ve removed the following unnecessary attributes from connector error outputs:
-
errorCategory -
expected -
isErrorCustomized
Removed superfluous analytics entries
Improved
We’ve removed some items, such as internal API calls and other internal processes, from the analytics. This makes the analytics easier to parse by removing items that aren’t generally relevant.
Removed global variable object
Improved
We’ve updated the way that global variables are referenced within a flow. You can still reference a global variable using the global.variables.<variable name> syntax, but you can no longer reference the entire global.variables object.
July 14
Added Error logging level
New
We’ve added an additional logging level Error that logs only starting and error events. This level is the default for newly created flows. Learn more in Editing flow settings.
June 2025
June 23
Custom Analytics improvements
Improved
We’ve added new options to the Custom Analytics display in the dashboard. You can now create graphs comparing flows or node outcomes over time. Learn more in Dashboard.
June 13
Flow validation improvements
Improved
We’ve improved the flow validation feature to enable automatic validation whenever you save a flow and to clearly associate validation results with specific flow versions. Learn more in Validating a flow.
June 11
Flow canvas improvements
Improved
We’ve made improvements to the flow canvas. When you open a flow, there’s now a search option that lets you locate specific nodes using connector or node information. Learn more in Using flow search.