---
title: PingFederate 11.3.9 (November 2024)
description: Fixed PF-35867
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1139
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1139.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
section_ids:
  resolved-issues: Resolved issues
  refresh-token-time-zone-discrepancies: Refresh token time zone discrepancies
  provisioning-character-limit: Provisioning character limit
  pingdirectory-password-warning: PingDirectory password warning
  multiple-application-requests-within-a-browser: Multiple application requests within a browser
  device-authorization-grant-time-zone-error: Device authorization grant time zone error
---

# PingFederate 11.3.9 (November 2024)

## Resolved issues

### Refresh token time zone discrepancies

Fixed PF-35867

We've fixed a defect that caused refresh tokens to roll prematurely when making authorization requests to servers in different time zones.

### Provisioning character limit

Fixed PF-36035

We've fixed a defect that caused outbound provisioning to fail and cease if a source user object exceeded a 255-character limit. In the new behavior, PingFederate will skip user objects that exceed 255 characters and log a warning.

### PingDirectory password warning

Fixed PF-36232

We've fixed a defect that prevented PingFederate from issuing a password expiration warning when using PingDirectory as a datastore.

### Multiple application requests within a browser

Fixed PF-36239

We've fixed a defect that could cause inconsistent sessions or authentication errors when starting multiple applications in different browser tabs at the same time.

### Device authorization grant time zone error

Fixed PF-36261

We've fixed a defect that caused device authorization grant flow errors when clustered server nodes are in different time zones.