---
title: PingFederate 13.0.3 (May 2026)
description: Improved PF-38898
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_1303
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_1303.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
section_ids:
  new-features-and-enhancements: New features and enhancements
  unconnected-cluster-node-startup: Unconnected cluster node startup
  jetty-library: Jetty library
  jetty-symbolic-links: Jetty symbolic links
  resolved-issues: Resolved issues
  multiple-sign-on-delay-routing: Multiple Sign-On Delay routing
  oauth-client-management-service-response-format: OAuth client management service response format
  custom-authentication-selector-error: Custom Authentication Selector error
  extended-property-authentication-selector-dependency-error-warning: Extended Property Authentication Selector dependency error warning
  dynamic-jwks-rotation-timer: Dynamic JWKS rotation timer
  url-validation-for-targetresource: URL validation for TargetResource
---

# PingFederate 13.0.3 (May 2026)

## New features and enhancements

### Unconnected cluster node startup

Improved PF-38898

We added the `force.require.replication.data.on.startup` parameter to the `cluster-config-replication.conf` file.

This parameter lets you prevent an engine node from starting up without establishing a connection to the cluster.

Learn more in [Cluster management](../administrators_reference_guide/pf_cluster_management.html).

### Jetty library

Info PF-38819

We upgraded the Jetty library to version 12.0.33.

### Jetty symbolic links

Info PF-38916

If you configured previous Jetty versions to support symbolic links, those links might no longer work with Jetty 12.0.

You can allow support for the symbolic links by adding the `pf.assets.allowSymlinks=true` parameter to the `run.properties` file.

## Resolved issues

### Multiple Sign-On Delay routing

Fixed PF-38801

We fixed a defect that caused PingFederate to route users to the base URL for the **Multiple Sign-On Delay** page when they should've been routed to the virtual host URL.

### OAuth client management service response format

Fixed PF-38872

We fixed a defect in the [OAuth Client Management Service](../developers_reference_guide/pf_oauth_client_manage_service.html) where parameters that support multiple values were always returned as arrays, even with only a single value. Now single values are returned as strings and multiple values are returned as arrays.

This defect affects PingFederate version 13.0.3 or later that was upgraded using the in-place method.

If you want the client management service to return arrays for all parameters, you can set the `writeSingleItemElementAsArray` parameter to `true` in the `com.pingidentity.ws.rest.oauth.client_management.model.converter.SerializerUtil.xml` file.

Learn more in [Upgrade considerations](../upgrading_pingfederate/pf_upgrade_considerations_13x.html).

### Custom Authentication Selector error

Fixed PF-38875

We fixed a defect that prevented viewing or editing certain custom Authentication Selectors in the admin console.

### Extended Property Authentication Selector dependency error warning

Fixed PF-38901

We fixed a defect that caused PingFederate to continue displaying a dependency error warning for the Extended Property Authentication Selector after the selector instance is deleted.

### Dynamic JWKS rotation timer

Fixed PF-38903

We fixed a defect that prevented dynamic JWKS rotation timing from resetting after a node joined a cluster.

### URL validation for `TargetResource`

Fixed PF-38907

We fixed a defect where PingFederate rejected valid `TargetResource` values.