---
title: PingFederate 12.2.8 (May 2026)
description: Improved PF-38898
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1228
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1228.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
section_ids:
  new-features-enhancements: New features & enhancements
  unconnected-cluster-node-startup: Unconnected cluster node startup
  resolved-issues: Resolved issues
  ognl-code-test: OGNL code test
  multiple-sign-on-delay-routing: Multiple Sign-On Delay routing
  custom-authentication-selector-error: Custom Authentication Selector error
  extended-property-authentication-selector-dependency-error-warning: Extended Property Authentication Selector dependency error warning
  dynamic-jwks-rotation-timer: Dynamic JWKS rotation timer
---

# PingFederate 12.2.8 (May 2026)

## New features & enhancements

### Unconnected cluster node startup

Improved PF-38898

We added the `force.require.replication.data.on.startup` parameter to the `cluster-config-replication.conf` file.

This parameter lets you prevent an engine node from starting up without establishing a connection to the cluster.

Learn more in [Cluster management](../administrators_reference_guide/pf_cluster_management.html).

## Resolved issues

### OGNL code test

Security PF-38742

We improved role-based access control (RBAC) for the administrative expression testing endpoint. Access to expression evaluation is now limited to appropriately privileged roles, ensuring alignment with intended administrative permissions.

### Multiple Sign-On Delay routing

Fixed PF-38801

We fixed a defect that caused PingFederate to route users to the base URL for the Multiple Sign-On Delay page when they should've been routed to the virtual host URL.

### Custom Authentication Selector error

Fixed PF-38875

We fixed a defect that prevented viewing or editing certain custom Authentication Selectors in the admin console.

### Extended Property Authentication Selector dependency error warning

Fixed PF-38901

We fixed a defect that caused PingFederate to continue displaying a dependency error warning for the Extended Property Authentication Selector after the selector instance is deleted.

### Dynamic JWKS rotation timer

Fixed PF-38903

We fixed a defect that prevented dynamic JWKS rotation timing from resetting after a node joined a cluster.