PingFederate 11.3.15 (April 2026)

Improved PF-38898

We added the force.require.replication.data.on.startup parameter to the cluster-config-replication.conf file.

This parameter allows you to prevent an engine node from starting up without establishing a connection to the cluster.

Learn more in Cluster management.

Fixed PF-38442

We fixed a defect where front-channel logouts requests to /idp/startSLO.ping failed to send logout requests to relying party URIs.

Security PF-38742

We improved role-based access control (RBAC) for the administrative expression testing endpoint. Access to expression evaluation is now limited to appropriately privileged roles, ensuring alignment with intended administrative permissions.

Fixed PF-38903

We fixed a defect that prevented dynamic JWKS rotation timing from resetting after a node joined a cluster.