PingFederate 13.0.3 (May 2026)

Improved PF-38898

We added the force.require.replication.data.on.startup parameter to the cluster-config-replication.conf file.

This parameter lets you prevent an engine node from starting up without establishing a connection to the cluster.

Learn more in Cluster management.

Info PF-38819

We upgraded the Jetty library to version 12.0.33.

Info PF-38916

If you configured previous Jetty versions to support symbolic links, those links might no longer work with Jetty 12.0.

You can allow support for the symbolic links by adding the pf.assets.allowSymlinks=true parameter to the run.properties file.

Fixed PF-38801

We fixed a defect that caused PingFederate to route users to the base URL for the Multiple Sign-On Delay page when they should’ve been routed to the virtual host URL.

Fixed PF-38872

We fixed a defect in the OAuth client management service where parameters that support multiple values were always returned as arrays, even with only a single value. Now single values are returned as strings and multiple values are returned as arrays.

If you want the client management service to return arrays for all parameters, you can set the writeSingleItemElementAsArray parameter to true in the com.pingidentity.ws.rest.oauth.client_management.model.converter.SerializerUtil.xml file.

Learn more in Upgrade considerations.

Fixed PF-38875

We fixed a defect that prevented viewing or editing certain custom Authentication Selectors in the admin console.

Fixed PF-38901

We fixed a defect that caused PingFederate to continue displaying a dependency error warning for the Extended Property Authentication Selector after the selector instance is deleted.

Fixed PF-38903

We fixed a defect that prevented dynamic JWKS rotation timing from resetting after a node joined a cluster.

Fixed PF-38907

We fixed a defect where PingFederate rejected valid TargetResource values.