PingFederate 12.2.3 (May 2025)

Info PF-36846

We’ve upgraded Bouncy Castle to version 2.0. This versions is certified to operate in Federal Information Processing Standards (FIPS) mode 140-3.

Info PF-37234

We’ve updated the behavior of the NATIVE_S3_PING discovery protocol when the remove_all_data_on_view_change parameter is active.

Previously, the protocol would delete all files in the S3 bucket, which could lead to the creation of an unwanted subcluster.

Now the protocol deletes all files except for its own to prevent the S3 bucket from being empty.

Learn more in Dynamic cluster discovery.

Fixed PF-37173

We’ve fixed a defect that caused PingFederate to ignore the id_token_hint value during relying party (RP)-initiated logout when the OAuth client logout mode is set to None.

Fixed PF-37237

We’ve fixed a defect that caused PingFederate to ignore the log file size limit and rotation configurations set by the SizeBasedTriggeringPolicy parameter.

Fixed PF-37279

We’ve fixed a defect that caused the ID token claim to be omitted when an OAuth client uses the secondary secret.