Login for Linux release notes

• Improve Login for Linux group bypass integration with domain joined machines via SSSD tool when using configuration option use_fully_qualified_names = True

• Support for Amazon Linux 2 and Amazon Linux 2023 operating systems.

• Support for Linux machines that use GNOME as their desktop environment.

• New properties in the installer configuration. New properties are available to use in the installer config.json file.

  • LDAP request timeout. This new configuration property, ldap_timeout allows you to set the timeout in seconds, that the Login for Linux endpoint waits for the LDAP request to respond before ending the connection.

  Note: This new property will be available in a later update to the Identity Platform on the Login for Endpoints installer UI. As a workaround, you can manually add ldap_timeout to the installer config.json file.

  For more information about the installer configuration properties, see Configure Identity Platform and Login for Endpoints.

• Simple installer. New installer tool that provides a simpler way to configure and integrate Login for LInux on a Linux operating system. To learn more, see Install Login for Linux - Simple configuration.

• CP-1354 – Support for FIDO2 as a second factor

• CP-1393 – New installer configuration properties to bypass MFA or request MFA for users in defined groups or organizational units

  Note: This deprecates the configuration property for group_bypass. However, this property is converted to bypass_mfa so the login flow will be the same for the user.

• CP-1400 – Support for Red Had Enterprise Linux 7.9 and CentOS 7

• CP-1408 – Support for authentication in the Linux local console login

• CP-1410 – New installer configuration property, ldap_timeout to define a timeout setting for LDAP requests to the data store

• CP-1321 – Addressed issue in cross domain logins with group bypass.

• CP-1325 – Certify that Login for Linux is supported on Ubuntu 22.04. See the updated installer configurations in Install Login for Linux - Advanced configuration.

• CP-1328 – Addressed issues with Active Directory integrations. See the user group formats to use for the Bypass Multi-Factor Authentication configuration setting in Configure Identity Platform and Login for Endpoints.

• CP-1336 – Addressed issue with Login for Linux installer not working correctly in Red Hat Enterprise Linux (RHEL) 9. See the updated installer configurations in Install Login for Linux - Advanced configuration.

• CP-1341 – Added logic to better handle group names that are in camel case.

• New properties in the installer configuration. A new property is available to use in the installer config.json file.

  Note: This new property will be available in a later update to the Identity Platform on the Login for Endpoints installer UI. As a workaround, you can manually add this new property to the installer config.json file.

  • User bypass. This new configuration property, user_bypass allows you to define a local username to bypass multi-factor authentication (MFA).

  For more information about the installer configuration properties, see Configure Identity Platform and Login for Endpoints.

• CP-1296 – When a user logs in locally on a workstation with a validated password that does not match their password stored in their organization's domain data store, the login screen will prompt the user for their domain password before MFA.

  Note: This issue is resolved only in the Identity Platform release 21.04 and requires at minimum, hotfix 21.04-9.

• CP-1298 – New installer configuration property, user_bypass to define a local username to bypass MFA.

Login for Linux is the newest member of the SecureAuth endpoints products.

Login for Linux protects remote Secure Socket Shell (SSH) or local logins so end users running on Unix and Linux can authenticate securely. SecureAuth has certified compatibility with Debian, Ubuntu, and Red Hat Enterprise Linux operating systems.

See the Login for Linux configuration guide for all the details.

All of these features are supported only in the SecureAuth® Identity Platform release 21.04 or later.

• New integrated Login for Endpoint configuration page in Identity Platform. Open the new Login for Endpoint page from the Identity Platform user interface to customize your Login for Endpoints user experience. The easy-to-use pages help you set up your operating system, the multi-factor methods, and even personalize your users' experience during authentication. (Existing customers will recognize the options that were manually set in the config.json file in previous releases.)

  To learn more, see Configure Identity Platform and Login for Endpoints

• New second-factor authentication methods added. You can now choose the following new 2FA methods: PIN and link-to-accept available for both SMS/text and email.