---
title: PingFederate 12.2.3 (May 2025)
description: Info PF-36846
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1223
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1223.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
section_ids:
  new-features-and-enhancements: New features and enhancements
  bouncy-castle-fips-2-0-compatibility: Bouncy Castle FIPS 2.0 compatibility
  native_s3_ping-update: NATIVE_S3_PING update
  resolved-issues: Resolved issues
  rp-initiated-logout-error: RP-initiated logout error
  log-rotation-policy-ignored: Log rotation policy ignored
  secondary-secret-missing-id-token-claim: Secondary secret missing ID token claim
---

# PingFederate 12.2.3 (May 2025)

## New features and enhancements

### Bouncy Castle FIPS 2.0 compatibility

Info PF-36846

We've upgraded Bouncy Castle to version 2.0. This versions is certified to operate in Federal Information Processing Standards (FIPS) mode 140-3.

### NATIVE\_S3\_PING update

Info PF-37234

We've updated the behavior of the NATIVE\_S3\_PING discovery protocol when the `remove_all_data_on_view_change` parameter is active.

Previously, the protocol would delete all files in the S3 bucket, which could lead to the creation of an unwanted subcluster.

Now the protocol deletes all files except for its own to prevent the S3 bucket from being empty.

Learn more in [Dynamic cluster discovery](../server_clustering_guide/pf_dynamic_cluster_discovery.html).

## Resolved issues

### RP-initiated logout error

Fixed PF-37173

We've fixed a defect that caused PingFederate to ignore the `id_token_hint` value during relying party (RP) *(tooltip: \<div class="paragraph">
\<p>An OAuth 2.0 client that requires end-user's authenticity and claims (attributes) from an OpenID provider.\</p>
\</div>)*-initiated logout when the OAuth client logout mode is set to `None`.

### Log rotation policy ignored

Fixed PF-37237

We've fixed a defect that caused PingFederate to ignore the log file size limit and rotation configurations set by the `SizeBasedTriggeringPolicy` parameter.

### Secondary secret missing ID token claim

Fixed PF-37279

We've fixed a defect that caused the ID token claim to be omitted when an OAuth client uses the secondary secret.