PingFederate Server

PingFederate 12.0.2 (April 2024)

Java thread exhaustion in PingOne Advanced Services

Fixed PF-35411

Fixed a defect that caused repeated looping in authentication policy involving a local Identity profile.

OAuth clients In Use detection

Fixed PF-35407

Fixed a defect with In Use detection when DynamoDB is used for OAuth client storage.

OIDC policy DELETE request timeout

Fixed PF-35357

Fixed a defect where deleting an OIDC policy fails when using DynamoDB storage for a large number of OAuth clients.

Authentication policy extended properties using OGNL

Fixed PF-35111

Fixed a defect where extended properties retrieved by OGNL are not populated.

Policy fragment rules processing

Fixed PF-35134

Fixed a defect that caused PingFederate to not process authentication policy rules for fragment nodes that do not contain an output contract.

Active Directory binary attribute caused thread proliferation

Fixed PF-35142

Fixed a defect that caused LDAP data source connection pools to close when still in use after the LDAP data source is modified and replicating under heavy load.

Mixed maintenance release cluster caused JWKS errors

Fixed PF-35195

Fixed a defect that caused errors in synchronization and accessing dynamic JSON Web Key Set (JWKS) keys when running a cluster that was a mix of PingFederate versions 12.0 and 12.0.1.

JWKS algorithm parameter not populated after processing shared keys from cluster

Fixed PF-35309

Fixed a defect that caused the alg parameter to fail to populate when EC dynamic keys are rotated on a lead cluster node and shared to the cluster.

PingOne MFA Integration Kit

Improved PF-35325

Upgraded the PingOne MFA Integration Kit to version 2.3.1.

Lightning LDAP library

Improved PF-35310

Upgraded the lightning LDAP library to version 1.5.22.

Upgraded Jetty Library

Improved PF-35184

Upgraded the Jetty library to version 9.4.54.v20240208.