---
title: One-Time Passcode Integration Kit changelog
description: The following is the change history for the One-Time Passcode Integration Kit.
component: otp
page_id: otp:release_notes:pf_otp_ik_changelog
canonical_url: https://docs.pingidentity.com/integrations/otp/release_notes/pf_otp_ik_changelog.html
revdate: March 30, 2026
section_ids:
  version-1-1-3: Version 1.1.3
  version-1-1-2: Version 1.1.2
  version-1-1-1: Version 1.1.1
  version-1-1: Version 1.1
  version-1-0-2: Version 1.0.2
  version-1-0-1: Version 1.0.1
  version-1-0: Version 1.0
---

# One-Time Passcode Integration Kit changelog

The following is the change history for the One-Time Passcode Integration Kit.

## Version 1.1.3

Released in March 2026.

* Fixed an issue with authentication handling. Learn more in security bulletin [SECADV053](https://support.pingidentity.com/s/article/SECADV053-PingFederate-OTP-Integration-Kit-authentication-bypass) (requires sign-on).

## Version 1.1.2

Released in January 2026.

* Removed third-party fonts.

## Version 1.1.1

Released in October 2025.

* Fixed an issue with authentication handling. Learn more in security bulletin [SECADV051](https://support.pingidentity.com/s/article/SECADV051-PingFederate-OTP-Integration-Kit-authentication-bypass) (requires sign-on).

## Version 1.1

Released in April 2025.

* Added a default masking mechanism for arbitrary emails and phone number formats that fail the built-in validation.

  Learn more in the **Visible Leading Characters Length** and **Visible Trailing Characters Length** table entries in the [One-Time Passcode IdP Adapter settings reference](../setup/pf_otp_ik_one_time_passcode_idp_adapter_settings_reference.html).

* Added the ability to customize velocity templates for specific adapter instances.

  Learn more in the **HTML Template Prefix** table entry in the [One-Time Passcode IdP Adapter settings reference](../setup/pf_otp_ik_one_time_passcode_idp_adapter_settings_reference.html).

* Added the ability to pass dynamic user information to velocity templates.

  Learn more in step 5 of the [Configuring an adapter instance](../setup/pf_otp_ik_configuring_an_adapter_instance.html) procedure.

* Added the ability to use a **Messaging Service SID** with the Twilio Programmable API Notification Publisher.

  Learn more in the **Messaging Service SID** table entry in the [Twilio Programmable API Notification Publisher settings reference](../setup/pf_otp_ik_twilio_programmable_api_notification_publisher_settings_reference.html).

* Upgraded the Twilio SDK jar used in the Twilio Programmable API Notification Publisher and the Twilio Verify API Notification Publisher.

## Version 1.0.2

Released in August 2023.

* Fixed an issue that prevented the One-Time Passcode IdP Adapter from creating LDAPS datastore connections.

* Fixed an issue with an invalid URL in the adapter CSS.

* Upgraded the Apache Commons Text library to version 1.10.0 to follow best practices for [CVE-2022-42889](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42889).

  |   |                                                                     |
  | - | ------------------------------------------------------------------- |
  |   | The One-Time Passcode IdP Adapter was not vulnerable to this issue. |

## Version 1.0.1

Released in June 2021.

* Fixed an issue that caused an error when a PingFederate node loaded the adapter while a user was authenticating.

## Version 1.0

Released in June 2020.

* Initial release.

* Added the ability to use the adapter with a UI or through the PingFederate authentication API.

* Added the ability to look up user device details in a data store attached to PingFederate.

* Added the ability to use chained attributes from earlier in the authentication flow.

* Added the ability to allow users to choose their delivery method.

* Added the ability to stop or continue authentication when the data store lookup fails.

* Added the ability to send one-time passcodes through PingFederate notification publishers.

* Added the Twilio Verify API Notification Publisher.

* Added the Twilio Programmable API Notification Publisher.