Use of OAEP padding for offline authentication
OAEP padding is now used by default in the encryption for
offline authentication. If you do not want to use OAEP padding for offline
authentication, use the
--rsa_padding
option when running the
command-line installation. For details, see Mac login command line reference.Installation verifies PingID properties file
Beginning with version 1.2 of the integration, you must use the
restricted-permissions properties file that is generated when you click the
Generate button in the Integrate with
Windows and Mac login section. You can no longer use the
properties file that is generated when you click the
Generate button in the Integrate with
PingFederate and
other clients section. This resolves issues related to CVE-2022-23717.