---
title: PingFederate 12.1.1 (July 2024)
description: Security PF-35631
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1211
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1211.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 15, 2024
section_ids:
  resolved-issues: Resolved issues
  axis1-patch: Axis1 patch
  refresh-token-rolls-when-configured-not-to-roll: Refresh token rolls when configured not to roll
  provisioning-group-changes-continue-after-user-changes-failure: Provisioning group changes continue after user changes failure
  oauth-client-only-validates-one-access-token-manager-when-aud-parameter-included: OAuth client only validates one access token manager when aud parameter included
  custom-adapter-not-returning-ipv4-addresses: Custom adapter not returning IPv4 addresses
  context-sri-attribute-mapping-failure: Context SRI attribute mapping failure
  error-message-after-user-session-expires: Error message after user session expires
---

# PingFederate 12.1.1 (July 2024)

## Resolved issues

### Axis1 patch

Security PF-35631

Included a patch to address multiple vulnerabilities related to Apache Axis1.

### Refresh token rolls when configured not to roll

Fixed PF-35166

Fixed a defect that caused PingFederate to roll refresh tokens when **Refresh Token Rolling Policy** is disabled but **Refresh Token Rolling Interval** has a value.

### Provisioning group changes continue after user changes failure

Fixed PF-35304

Fixed a defect that caused the provisioner to propagate group updates even if user updates didn't finish.

### OAuth client only validates one access token manager when `aud` parameter included

Fixed PF-35737

Fixed a defect that caused PingFederate to validate only the first OAuth client access token manager it found when **Validate Against All Eligible Access Token Managers** was checked, and the `aud` parameter was included in the request.

### Custom adapter not returning IPv4 addresses

Fixed PF-35783

Fixed a defect where PingFederate failed to return IPv4 addresses in a custom adapter request using the `request.getRemoteAddr()` method.

### Context SRI attribute mapping failure

Fixed PF-35800

Fixed a defect that caused PingFederate to fail to map new attributes added to an existing access token manager to the Context SRI.

### Error message after user session expires

Fixed PF-35815

Fixed a defect that caused PingFederate to present an error message when user tries to sign on again after a session expires due to inactivity.