Known issues

IDP-9757

The Service Account Password is a required field in the SecureAuth IWA Service Settings section of the AD data store.

In edit mode, when the password field is empty, the data store does not warn the user when clicking Save.

Make sure the Service Account Password field is populated.

IDP-9759

In edit mode, after saving changes in the SecureAuth IWA Service Settings section, using the Backspace key in any field automatically causes the page to Save.

After saving and if you're still in edit mode, select and overwrite text.

Or, click Back to Summary and click the pencil edit icon to edit the page again.

IDP-9921

The Authenticated User Redirect field on the Post Authentication tab in the Classic Experience is not disabled for a new internal application created in the New Experience.

This issue happens when you immediately click the link to finish the configuration in the Classic Experience as soon as the new internal application is created in the Internal Application Manager.

When you click Create Connection for the new internal application, leave the page and return to the newly created internal application in edit mode.

Then, click the Go to Classic Version to finish the configuration for this application at the bottom of the page.

IDP-10084

In the Classic Experience, after making some changes on the Adaptive Authentication tab for a realm, and selecting the check box for another realm, when you click Save, there is no prompt to confirm your changes.

Be sure to save your on the changes on the current realm before selecting another realm.

IDP-10087

An issue occurs for an Administrative Password Reset page configured in the Classic Experience with the Username Textbox field set to Enabled - change other user passwords.

It does not send an email notification to the user whose password was changed on their behalf by an administrator.

None.

IDP-10131

An issue occurs with correctly displaying the password complexity rules created using the Password Policies in the New Experience, and then attached to the Password Reset page in the Internal Application Manager.

The issue is that it incorrectly displays the password complexity rules from the Classic Experience instead of from the New Experience password policy.

Modify the rules in the Classic Experience to match the rules created for a password policy in the New Experience.

IDP-10159

For Mobile Enrollments view In the Dashboard, the Device Name sort order incorrectly displays all device names with the first character as uppercase A-Z first, followed by lowercase a-z.

None.

IDP-10767

Browser language changes the field name on end user login pages with the Arculix theme.

For example, the field name should be Username, but it displays User ID.

None.

IDP-10805

On the Password Reset page, the user receives an error message that the new password does not meet the password policy requirements. However, it incorrectly resets the old password.

The issue occurs when there is an Identity Platform password policy attached to the Password Reset page. The Azure AD password policy takes precedence for meeting password requirements.

None.

IDP-11451

In Password Throttling, the following scenarios could occur:

None.

IDP-11461

In the login workflow, when two different MFA options have the same name, one of them will not work correctly.

For example, a FIDO2 (with PIN) method has a name like "PIN". And you have the Personal Identification Number (PIN) enabled as a method on the MFA options page.

Change the name of the FIDO2 method to something other than "PIN", like "Windows Hello PIN".

IDP-11507

Preferred MFA does not work correctly on a machine that has FIPS enabled.

None.

IDP-11580

The login page does not open for a realm configured in the Advanced Settings with Azure AD data store that has an expired or incorrect service account password.

Update the service account password for the data store.

IDP-11595

In the Advanced Settings, when creating a new realm by cloning an existing realm and then clicking the link of the newly created realm, the page loading animation never stops.

None.

IDP-11596

Using the Classic Migration feature in the New Experience does not work for applications with the following postauth pages:

None.

IDP-11733

In the Application Manager, you can add a SAML application without completing the required fields.

Make sure to complete the required fields before saving the application.

IDP-11738

In the data store settings for Microsoft Entra ID (formerly Azure AD), you can enable Allow Windows SSO and save the configuration without completing the required fields.

Make sure to complete the required fields before saving the data store settings.

IDP-12037

When copying a data store, it allows you to save the data store with an empty Service Account Credentials password field.

In the copied data store, enter the Service Account Credentials password.

IDP-12050

The FIDO2 Enrollment page, when seen on a mobile device in a card view, might have misaligned text at some resolutions.

None.

IDP-12082

In the SSO Portal, a Windows SSO application requires the user to enter their credential.

It is not recommended to have a Windows SSO application in the SSO Portal since it will always prompt the user to enter their credentials.

IDP-12105

SecureAuth IdP and Arculix integration (IdP Chaining) issue.

An issue occurs when you log into an application that starts in SecureAuth IdP. For example, you log in with a username and password on the SA IdP page at samlSP.aspx. Then, it goes to Arculix for authentication.

If you cancel MFA from Arculix, it redirects you to SecureAuth IdP at AssertionConsumerService.aspx. But, if you click the Restart Login link, it sends you to SecureAuth IdP at the SecureAuth.aspx login page.

None.

IDP-12106

Transparent SSO does not work for SecureAuth IdP and Arculix integration (IdP Chaining).

None.

IDP-12365

SecureAuth IdP and Arculix (IdP Factoring) SP-initiated by Post integration with SCIM server.

An issue occurs when you authenticate through MFA in Arculix. You might be asked to authenticate again with MFA through SecureAuth IdP.

If the connection setting in the application is configured for SP-initiation by Post, set up the policy to skip MFA.

IDP-12440

In the Application Manager, when creating a new application, it does not automatically assign a realm number.

Manually select the next realm number from the list.