What's new

New SecureAuth endpoint configuration option available to add multi-factor authentication for logins on Linux servers.

More security controls in login workflows for complex use cases. Improvements include conditional rule statements (AND, ELSE, OR) in policy configurations to allow, block, or prompt MFA during end user login.

As an example, your organization has offices all over the world and you have a group of executives who travel extensively. You need to block all login attempts from a certain country. But, you want to allow executives who are members of a group to login from a blocked country.

You can set up rules to to bypass MFA for minimal risks based on user behavior and IP reputation. And block all logins from a certain country, but allow a users in a group to login.

Create a pre-login questionnaire to determine user risk before allowing login access. For example, ask COVID-19 health questions to determine user risk and allow or block users from onsite access to a work computer.

Available in Login for Mac and Login for Windows.

Endpoint configuration settings are now available in the Identity Platform New Experience.

Updates to the FIDO2 WebAuthn global MFA settings include PIN support. You can require user verification with a PIN on FIDO2 security keys for registration and authentication. You can also define how many FIDO2 security keys users can register.

Add internal application integrations like the Secure Portal, Password Reset, Help Desk pages, and OIDC integrations and attach a user authentication policy.

You can also use the Internal Application Manager to connect a legacy application that was created in the Classic Experience with an authentication policy from the New Experience.

To learn more, see About the Internal Application Manager.