UI improvements for FIDO2 registration: Improved the user on-boarding flows for FIDO2 MFA setup. Users should now have a better user experience during inline registration as compared to before.
Before:
Improvement:
Improved AD user sync: Fixed an issue where disabled users in Active Directory were getting imported to miniOrange in Enabled state. Going forward User state should get synced correctly, ensuring consistent account status between AD and miniOrange.
SuperAdmin hardware token assignment: Super Admins now have the ability to assign hardware tokens to users directly.
Bug Fixes:
Custom attribute fix: Fixed an issue where custom profile attributes were being cleared when users logged in through an external IDP. Attributes not mapped via JIT or entered at signup will now remain intact, preventing unintended data loss.
MFA configuration fixes: Fixed an issue where some authentication methods were not visible on the MFA configuration page. All methods (Phone Verification via IVR, QR Code Authentication, OTP over SMS/Email) are now consistently displayed.
Logout time fix in reports: Corrected the logout time shown in download SSO usage reports for better accuracy.
Prevent Browsers to enable Auto-Save password: Added an option to prevent browsers from auto-saving login credentials on miniOrange login page. Navigate to Product Settings >> Settings >> Security and Enable the Prevent Credentials Auto-Save option to enable this feature.
2FA method display improvements: Fixed display inconsistencies in the User List for 2FA methods. Method names are now more descriptive (e.g., “OTP over SMS” instead of just “SMS”).
Send Mail for MFA activation: The Send Mail for MFA Activation option under the User List Action drop-down is now globally available without any dependence on the Send Email for MFA Activation option under 2FA options for EndUsers.