What is new
Support for RADIUS clients that do not validate username and password
We have added support for RADIUS clients that do not validate the first factor for customers who use Active Directory synchronization.
This includes support for VPN solutions such as FortiGate VPN, WatchGuard VPN, and Palo Alto GlobalProtect VPN, as well as other applications that integrate with RADIUS.
The Client Type options have been extended with Client does not validate user name and password. You can also use the Access-Challenge feature or the Avoid compound mode.
To configure these options, follow the instructions in the Online Help and the vendor documentation for the client application.
|
We recommend that you review your existing RADIUS configuration to identify and correct potential misconfigurations and remove complex workarounds. |
Provisioning email content
We have redesigned the provisioning email to help users understand why they receive it, which account and realm the email is associated with, and steps to set up multi-factor authentication (MFA).
User interface design update
Minor improvements to modernize the user interface, including improvements to user import, hard token import, and the breadcrumbs when you edit modules.
Other improvements and bug fixes
For more information, see the changelog.