---
title: PingFederate 11.2.4 (March 2023)
description: Fixed PF-32971
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1124
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1124.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 22, 2024
section_ids:
  resolved-issues: Resolved issues
  base-dn-reference-attribute: Base DN reference attribute
  identity-store-provisioner-validation-rules: Identity store provisioner validation rules
  dcr-with-client-secret-retention: DCR with client secret retention
  response-handling-logs: Response handling logs
  oidc-policies-with-fragments-configured: OIDC policies with fragments configured
  ldap-filter-validation: LDAP filter validation
  hsm-key-sessions: HSM key sessions
---

# PingFederate 11.2.4 (March 2023)

## Resolved issues

### Base DN reference attribute

Fixed PF-32971

We've fixed an issue where upstream data stores in the chain could not recognize the reference attribute for base distinguished name (DN) during lookup.

### Identity store provisioner validation rules

Fixed PF-33017

We've improved validation rules to ensure that only identity store provisioners that support groups require group attribute contract validation.

### DCR with client secret retention

Fixed PF-33035

We've resolved a null pointer exception (NPE) error that occurred when attempting to set up Dynamic Client Registration (DCR) with client secret retention.

### Response handling logs

Fixed PF-33131

We've added additional logging to help debug unexpected errors in response handling.

### OIDC policies with fragments configured

Fixed PF-33158

We've resolved an issue that occurred when saving OpenID Connect (OIDC) policies with fragments configured.

### LDAP filter validation

Fixed PF-33173

We've fixed an issue related to LDAP filter validation that arose when accessing the **IdP Connections** page.

### HSM key sessions

Fixed PF-33284

We've improved the process of cluster replication for PingFederate integrated with AWS CloudHSM by purging HSM key pair generation sessions.