---
title: PingFederate 12.3.2 (September 2025)
description: info PF-37936
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1232
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1232.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
section_ids:
  new-features-and-enhancements: New features and enhancements
  jetty-library: Jetty library
  bouncy-castle-fips: Bouncy Castle FIPS
  resolved-issues: Resolved issues
  aws-cloudhsm-certificate-linking: AWS CloudHSM certificate linking
  authorization_details-access-token-inclusion: authorization_details access token inclusion
  overly-detailed-kerberos-error-messages: Overly detailed Kerberos error messages
  pingfailoverappender-race-condition: PingFailoverAppender race condition
  admin-console-classnotfoundexception-error: Admin console ClassNotFoundException error
  jwt-api-authentication-method: JWT API authentication method
  unused-devops-file: Unused DevOps file
---

# PingFederate 12.3.2 (September 2025)

## New features and enhancements

### Jetty library

info PF-37936

We've upgraded the Jetty library to version 10.0.26

### Bouncy Castle FIPS

info PF-37943

We've upgraded Bouncy Castle to version 2.0.1. This version is certified to operate in Federal Information Processing Standards (FIPS) mode 140-3.

## Resolved issues

### AWS CloudHSM certificate linking

Fixed PF-37156

We've fixed a defect that caused failed AWS CloudHSM certificate linking to appear to succeed when the key alias was a value that was previously used in the environment.

### `authorization_details` access token inclusion

Fixed PF-37743

We've fixed a defect that omitted the `authorization_details` parameter from the access token if the value was an empty array.

### Overly detailed Kerberos error messages

Fixed PF-37798

We've fixed a defect that caused lengthy stacktrace data to be included in ERROR level logging for Kerberos errors.

### `PingFailoverAppender` race condition

Fixed PF-37816

We've fixed a defect where a race condition could cause the `PingFailoverAppender` to get stuck in a failed state without switching back to its primary appender.

### Admin console ClassNotFoundException error

Fixed PF-37819

We've fixed a defect that could cause `ClassNotFoundException` errors in the admin console.

### JWT API authentication method

Fixed PF-37841

We've fixed a defect where JWT wasn't a valid authentication method for the admin AP during upgrade utility validation.

### Unused DevOps file

Fixed PF-37846

We've removed an unused file associated with the PingOne Advanced Identity Cloud DevOps deployment that was mistakenly included in the PingFederate Server `.zip` archive.