---
title: PingFederate 11.1.1 (July 2022)
description: Fixed PF-29706 PingDirectory
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1111
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1111.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 1, 2024
section_ids:
  resolved-issues: Resolved issues
  security-around-password-expiration: Security around password expiration
  issuance-criteria-in-authentication-policy-contracts: Issuance criteria in authentication policy contracts
  http-header-for-client-ip-addresses: HTTP header for client IP addresses
  error-descriptions: Error descriptions
  masterkeyencryptor-failure-during-cluster-replication: MasterKeyEncryptor failure during cluster replication
  updating-the-client-secret-with-the-oauth-client-management-service: Updating the client secret with the OAuth client management service
  oauth-authorization-requests-with-response_modepi-flow: OAuth authorization requests with response_mode=pi.flow
  administrative-api-enhancement: Administrative API enhancement
  message-customization-enhancement: Message customization enhancement
  cluster-management-enhancement: Cluster management enhancement
---

# PingFederate 11.1.1 (July 2022)

## Resolved issues

### Security around password expiration

Fixed PF-29706 PingDirectory

Improved the security around password expiration when using PingDirectory as a user store.

### Issuance criteria in authentication policy contracts

Fixed PF-31485

Issuance criteria in authentication policy contracts no longer cause the logs to indicate invalid XML errors. This issue did not cause runtime errors.

### **HTTP header for client IP addresses**

Fixed PF-31735

Resolved an issue that sometimes occurred when IPV6 addresses were specified in the **HTTP Header for Client IP Addresses** field on the **Incoming Proxy Settings** window.

### Error descriptions

Fixed PF-31753

PingFederate error descriptions no longer disclose details of java classes.

### MasterKeyEncryptor failure during cluster replication

Fixed PF-31795

When PingFederate is using a custom MasterKeyEncryptor that relies on an SSL call to an external service, cluster replication no longer causes cascading failures because PingFederate is unable to open Java key store files.

### Updating the client secret with the OAuth client management service

Fixed PF-31851

When updating the client secret with the OAuth client management service, PingFederate now correctly creates the secondary secrets.

### OAuth authorization requests with `response_mode=pi.flow`

Fixed PF-31942

Now when PingFederate receives an OAuth authorization request with `response_mode=pi.flow`, password change and account recovery flows using an authentication policy work correctly.

### Administrative API enhancement

Info

Improved the administrative API to manage the System for Cross-domain Identity Management (SCIM) inbound provisioning settings in identity provider (IdP) connections.

### Message customization enhancement

Info

Enhanced PingFederate message customization by adding the following FedHub-specific context variables:

* `FedHubSpConnApplicationName`

* `FedHubSpConnName`

* `FedHubOAuthClientId`

* `FedHubOAuthClientName`

### Cluster management enhancement

Info

Revised the **Cluster Management** window to make it more obvious when changes to the configuration on the administrative node have not been replicated to the engine nodes.