---
title: Regular channel changelog
description: Version 23453.4
component: pingoneaic
page_id: pingoneaic:release-notes:regular-channel/version-23453.4
canonical_url: https://docs.pingidentity.com/pingoneaic/release-notes/regular-channel/version-23453.4.html
llms_txt: https://docs.pingidentity.com/pingoneaic/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
section_ids:
  15_sep_2026: 15 Sep 2026
  enhancements: Enhancements
  fixes: Fixes
---

# Regular channel changelog

|   |                                                                                                                                                                 |
| - | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | This is a changelog entry for version 23453.4. You can review the changelog for all versions in [Regular channel changelog](../regular-channel-changelog.html). |

## 15 Sep 2026

**Version 23453.4**

### Enhancements

* IAM-9603: The Combined MFA Registration, OATH Registration, and Push Registration nodes now include an option to render QR codes without using JavaScript.

* IAM-10200: Improved accessibility across the admin console by ensuring that expandable and collapsible menu controls expose their state to screen readers and other assistive technologies.

* IAM-10682: The admin console left menu has been reorganized into logical, collapsible groups, making features easier to find and aligning labels with current terminology.

* IAM-11617: The v2.0 Choice Collector node now lets you make choice callbacks with dynamically generated options that render as radio-button groups instead of drop-down lists, while existing drop-down behavior remains unchanged.

* IGA-4652\[[1](#_footnotedef_1 "View footnote.")]: IGA now enforces the required request justification setting consistently across lifecycle management, request extension, and entitlement-grant requests.

* IGA-4688\[[1](#_footnotedef_1 "View footnote.")]: IGA now lets you delete certificate templates using the UI.

* IGA-4702\[[1](#_footnotedef_1 "View footnote.")]: IGA now lets you change the campaign title and owner when a campaign is launched.

* IGA-4716\[[1](#_footnotedef_1 "View footnote.")]: IGA role request forms now display current role membership as read-only, and each member addition or removal in the role lifecycle management screen is submitted as an individual grant or removal request.

* IGA-4741\[[1](#_footnotedef_1 "View footnote.")]: IGA activity and notification monitoring is now generally available, with improved event type filtering and audit log presentation.

* IGA-4446\[[1](#_footnotedef_1 "View footnote.")]: IGA correlation rules for unmanaged applications let administrators link aggregated accounts to identities during account aggregation.

* IGA-4254\[[1](#_footnotedef_1 "View footnote.")]: IGA identity profile certification enables reviewers to certify identity records, including external users and AI agents, rather than access alone.

* IGA-4255\[[1](#_footnotedef_1 "View footnote.")]: IGA role composition certification enables reviewers to certify role definitions, including attributes, glossary data, entitlements, applications, and membership rules.

* IGA-4582\[[1](#_footnotedef_1 "View footnote.")]: IGA certification review views let reviewers examine identity-profile and role-composition items in dedicated task views and make decisions.

* IGA-4794\[[1](#_footnotedef_1 "View footnote.")]: Approval tasks can now be created when expiration is configured with a workflow variable.

* OPENAM-28098: The v2.0 CAPTCHA node adds support for Friendly Captcha, a privacy-focused CAPTCHA provider.

* OPENIDM-21472: You can now update a managed user even when the change conflicts with generated attribute values. The update propagates to all associated workforce application accounts during queued synchronization.

* OPENIDM-21711: The external REST service now has a default user agent of `PingIdentity` for outbound requests. This can be overridden by setting the [`userAgent` property](../../external-services/external-rest.html#external-rest-properties-user-agent) for external REST service requests.

* OPENIDM-21726\[[2](#_footnotedef_2 "View footnote.")]: You can now set the [`pooledConnectionTtl` property](../../external-services/external-rest.html#external-rest-properties-pooled-connection-ttl) for the external REST service to expire pooled HTTP connections after a specified time in milliseconds. This prevents request failures caused by stale connections.

* OPENIDM-22745: All connectors included with Advanced Identity Cloud were upgraded to version 1.5.20.36. Learn more in [1.5.20.36 Connector changes](https://docs.pingidentity.com/openicf/connector-release-notes/connectors.html#_1_5_20_36_connectors).

* OPENIDM-22871: The IDM native admin console is now deprecated, and displays a deprecation warning banner.

### Fixes

* FRAAS-34254: Fixed an issue where large configuration files were truncated during promotion, corrupting configuration in both environments.

* IAM-6646: Fixed an issue that prevented navigating back in the journey import modal.

* IAM-9753: Restored the missing Jobs option in the platform UI for tenants without workforce enablement, and the Schedule Jobs option in the IDM admin UI.

* IAM-10010: Fixed an issue that prevented hosted pages theme colors from applying to alert pop-ups.

* IAM-10781: Fixed an issue where the Use Secret Store for secrets checkbox did not persist for legacy applications.

* IAM-10974: Fixed an issue where the rollback button was missing from the promotion history page.

* IAM-11118: Fixed an issue where the number of OAuth 2.0 clients displayed incorrectly in the **OAuth2 Clients** modal.

* IAM-11201\[[1](#_footnotedef_1 "View footnote.")]: Fixed an issue with icon size and appearance in dark mode in the IGA **New Event** dialog.

* IAM-11679: Fixed an issue where the **Debug** menu item in the journey editor was not dimmed when disabled.

* IAM-11803: Fixed an issue with inconsistent padding and height in select and multiselect fields.

* IAM-11835: Fixed an issue with unexpected behavior in the multiselect box when inviting tenant administrators.

* IGA-4700\[[1](#_footnotedef_1 "View footnote.")]: IGA role entitlement selection now omits disconnected entitlements from unmanaged applications, so administrators see only available entitlements.

* IGA-4745\[[1](#_footnotedef_1 "View footnote.")]: Fixed an issue that prevented saving changes to the details of an unmanaged application.

* IGA-4764\[[1](#_footnotedef_1 "View footnote.")]: Fixed an issue that prevented saving glossary data for disconnected applications.

* IGA-4772\[[1](#_footnotedef_1 "View footnote.")]: Fixed an issue where the revoke-from-role modal operated on the wrong table when multiple IGA resource tables were on the same page.

* OPENIDM-20345: Advanced Identity Cloud now rejects relationship creation requests that use a property that does not accept the referenced object type, instead of silently creating the relationship through a different valid property.

* OPENIDM-21675: Fixed an issue that caused an error when configuring an empty server list for remote connector client groups.

* OPENIDM-21724: Fixed an issue that could cause an exception when restarting identity management services under specific conditions.

* OPENIDM-22101: Advanced Identity Cloud now applies the configured WebSocket idle timeout correctly for ICF servlet connections, with a default timeout of 5 minutes.

* OPENIDM-22102: Fixed an issue where an RCS connection didn't recover after a network interruption and required an RCS restart.

* OPENIDM-22157: Fixed an issue that caused reconciliation to fail when correlation queries used numeric values.

* OPENIDM-22399: Fixed an issue where system configuration overwrote existing authentication configuration after an upgrade.

* OPENIDM-22562: Fixed an issue that caused excessive memory use and potential heap exhaustion under high load.

***

[1](#_footnoteref_1). This change applies to a feature only available in PingOne Identity Governance, which is an [add-on capability](../../product-information/add-on-capabilities.html) and must be purchased separately.[2](#_footnoteref_2). This issue was inadvertently excluded from the rapid changelog.