---
title: PingFederate 12.2.1 (February 2025)
description: New PF-36970
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1221
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1221.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
section_ids:
  new-features-and-enhancements: New features and enhancements
  duplicate-rsa-key: Duplicate RSA key
  red-hat-enterprise-linux-8-10-compatibility: Red Hat Enterprise Linux 8.10 compatibility
  resolved-issues: Resolved issues
  access-token-manager-admin-api-error: Access token manager Admin API error
  refresh-token-error-when-authorization-bypass-enabled: Refresh token error when authorization bypass enabled
  this-is-my-device-error-on-html-form-adapter: This is My Device error on HTML Form Adapter
  tls-connection-in-bcfips-mode: TLS connection in BCFIPS mode
  group-membership-loss-during-provisioning: Group membership loss during provisioning
  change-password-failure-with-pingone-protect: Change password failure with PingOne Protect
  ognl-expressions-with-sdk-classes: OGNL expressions with SDK classes
---

# PingFederate 12.2.1 (February 2025)

## New features and enhancements

### Duplicate RSA key

New PF-36970

We've added a feature that gives you the option to include a duplicate RSA key with the RS256 algorithm. You can enable this option by setting the `add-duplicate-rs256-alg-key` parameter in the `<pingfed-install>/pingfederate/server/default/data/config-store/jwks-endpoint-configuration.xml` file to `true`.

### Red Hat Enterprise Linux 8.10 compatibility

Info PF-36972

We've confirmed that PingFederate is compatible with Red Hat Enterprise Linux ES 8.10.

## Resolved issues

### Access token manager Admin API error

Fixed PF-36845

We've fixed a defect that caused a `500` error when creating or updating an access token manager using the Administrative API.

### Refresh token error when authorization bypass enabled

Fixed PF-36851

We've fixed a defect that caused PingFederate to return a revoked or expired consent error when both **Bypass Authorization Approval** and **Bypass Authorization Approval for Previously Approved Consents** are enabled.

### This is My Device error on HTML Form Adapter

Fixed PF-36864

We've fixed a defect that caused PingFederate to behave inconsistently when **This is My Device** is selected and an HTML Form Adapter instance has more than one session configuration in the session overrides.

### TLS connection in BCFIPS mode

Fixed PF-36865

We've fixed a defect where PingFederate could not accept a TLS 1.2 connection in BCFIPS mode on Java 17.

### Group membership loss during provisioning

Fixed PF-36874

We've fixed a defect that caused PingFederate to lose user group membership information when it lost contact with the datastore during provisioning operations.

### Change password failure with PingOne Protect

Fixed PF-37012

We've fixed a defect that caused the HTML Form Adapter Change Password using an authentication policy to fail when PingOne Protect is the risk provider.

### OGNL expressions with SDK classes

Fixed PF-37021

We've fixed a defect that caused OGNL expressions to fail to load when they contained SDK classes.