April 2024 - PingOne - PingOne Cloud Platform

We’ve added two new event types for PingOne gateways configured to use the Kerberos protocol for authentication:

• Kerberos Check Succeeded
• Kerberos Check Failed

You can review these events in the PingOne Audit log. Learn more in Event types.

When adding or editing a Microsoft 365 application, you can now configure the Subject NameIdentifier Format format value and also configure a mapping for the value to a PingOne attribute. Learn more in Adding Microsoft 365 to PingOne.

Now you can include a permissions claim in access tokens created for your APIs and custom resources. This enables you to retrieve and enforce permissions for application features and API resources developed by your organization. Learn more in Application permissions.

The tel and sms protocols are now supported in HTML footers used in customize themes. Learn more in Customizing a theme.

We’ve made it easier to add custom properties to groups in PingOne Directory. Now you can simply add metadata properties as key-value pairs in the user interface for creating or updating groups. Learn more in Creating a group.

The Verify dashboard shows identity verification transaction activity for your organization. Learn more in Verify dashboard.

Previously, when uploading or downloading a language pack in User Experience > Languages, you could only download the translatable keys for each module. Now, you can download or upload the complete language pack.

Learn more in Downloading a language bundle and Uploading a language bundle.

You can now configure a document authentication provider in your verify policy. Learn more in Creating a verify policy.

We’ve added two new features for Verify policies: Government ID Retry Attempts and Selfie Retry Attempts. This allows users to retake pictures of a government ID or selfie if the previous image had a quality problem.

Learn more about government ID retry and selfie retry in Creating a verify policy .

The requirement of responding to a verification email when adding a "sender" email address made it difficult to add an address that does not have an inbox. Now, when you create a trusted email domain, PingOne creates an additional text record that reflects the association of the domain with the specific PingOne environment. If you add this new record to your DNS, any sender email address belonging to the domain is set to active status as soon as you create it, with no need for a verification email.

Branding and Themes now have unique Theme IDs for themes that can be copied and pasted directly into the PingOne Forms connector. A unique theme name will also be generated by default to prevent having duplicate themes in the environment.

Learn more in PingOne Forms connector.

We've added the ability to aggregate all FIDO2 devices associated with a user’s account during authentication. This simplifies authentication, as the user is presented with a single FIDO2 authentication method representing all of their paired FIDO2 devices, rather than seeing each device listed separately. If the user chooses to authenticate with the aggregated FIDO2 authentication method, the OS of the accessing device selects the most appropriate method for them to use to authenticate.

Learn more at Adding a FIDO policy.

We’ve updated the Environments page to include search and sort capabilities that make it easier to find the environment you need. We’ve also added the ability to upload a custom icon to make an environment stand out visually in the list. Additionally, you can now view and edit environment details without leaving the Environments page. The Environment Properties page has also been updated, providing a consistent experience. Learn more at Getting started with PingOne and Environment Properties.