---
title: PingFederate 12.0.3 (May 2024)
description: New PF-31859
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1203
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1203.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 22, 2024
section_ids:
  new-features-and-enhancements: New features and enhancements
  pingone-admin-url-property: PingOne admin URL property
  resolved-issues: Resolved issues
  authentication-api-allows-different-user-for-change-password-flow: Authentication API allows different user for change password flow
  memory-heap-increase-when-using-admin-api-on-policy-tree: Memory heap increase when using admin API on policy tree
  authentication-api-password-change-flow-ignores-credentials: Authentication API password change flow ignores credentials
  authentication-api-validation-error: Authentication API validation error
  provisioner-uses-wrong-time-zone-when-data-source-and-pingfederate-are-in-different-time-zones: Provisioner uses wrong time zone when data source and PingFederate are in different time zones
  bypass-authorization-approval: Bypass authorization approval
---

# PingFederate 12.0.3 (May 2024)

## New features and enhancements

### PingOne admin URL property

New PF-31859

Added support for the Australia region to the `pf.pingone.admin.url.region` property.

The Asia region is deprecated. We recommend using the Australia region instead.

Learn more in [Configuring PingFederate properties](../administrators_reference_guide/pf_config_pf_propert.html).

## Resolved issues

### Authentication API allows different user for change password flow

Fixed PF-35609

Fixed a defect that caused the authentication API to allow a different user to proceed with the `MUST_CHANGE_PASSWORD` function than the user who initiated the flow.

|   |                                                                                                  |
| - | ------------------------------------------------------------------------------------------------ |
|   | In all cases, the target user's password was required to complete the change password operation. |

### Memory heap increase when using admin API on policy tree

Fixed PF-35423

Fixed a defect that caused PingFederate not to release memory when using the admin API on the policy tree.

### Authentication API password change flow ignores credentials

Fixed PF-35618

Fixed a defect that caused the authentication API to ignore credentials for password changes provided after user authentication.

### Authentication API validation error

Fixed PF-35430

Fixed a defect that caused a validation error in the authentication API when including the `ui_locales` parameter.

### Provisioner uses wrong time zone when data source and PingFederate are in different time zones

Fixed PF-35286

Fixed a defect that caused redundant user provisioner updates when the data source and PingFederate were in different time zones.

### Bypass authorization approval

Fixed PF-35395

Fixed a defect that caused PingFederate to ignore the **Bypass Authorization Approval** setting when **Bypass Authorization For Previously Approved Consents** is enabled.