January 12th, 2026

Version 4.16.0 Cloud

New Features:

• Number Matching in Push Notifications: Push-based MFA attacks are on the rise. We’ve added number matching to push notifications, so users must confirm a specific number on their device instead of just tapping "Approve." This stops accidental approvals and helps with MFA fatigue from spam attacks. [Click here to Read More]
• Improved Device Fingerprinting and Posture Check: Introducing a new device fingerprinting approach which ensures only trusted devices can access applications by combining device identity with contextual security checks. This new approach securely identifies devices using hardware-based attributes and baseline profiling. Admins can now define their custom risk attributes and scoring, automatically allow/challenge( prompt for MFA )/block access based on calculated risk, and supports flexible enrollment: self-registration, pre-approved devices, or silent registration. [Click here to Read More]
• Radius Authentication: Radius Authentication now supports EAP-MSCHAPv2 for broader protocol compatibility.
• Hardware Token Management Improvements: Managing your Hardware Tokens is now more easy and flexible. Users can now have multiple tokens assigned to them. Admins can view and assign tokens in bulk, and users can sync all their C100 tokens in one click. [Click here to Read More]

Improvements:

• Execution Transparency & Better Reporting for Workflows: Failed workflows show exactly which step broke and why, with detailed error logs. Scheduled workflows and user creation failures now surface detailed errors, so you’re not guessing what went wrong.
• Better Conditional Logic in Workflows: Filter conditions work on non-required attributes, and you can now chain AND/OR logic for complex rules.
• Automatic Role Assignment via Workflows: Along with groups you can now set up workflows to assign users to Role automatically.
• Increased IP Restriction Limits: IP allowlists/blocklists now support more than 255 entries. If you’ve been hitting that ceiling, you’re free to scale.
• OAuth 2.0 Authorisation support for GMAIL as SMTP: We have added support for OAuth 2.0 as a secure, token-based alternative for authentication against Gmail for SMTP. Basic auth still works.
• Password Policy Improvements: You can now restrict how many characters from a user’s email, first name, last name, or username can appear in their password. [Click here to Read More]
• Rate Limiting in Radius Authentication: Better Rate limiting for MFA flows during Radius Authentication. Helps with brute-force attacks against your VPNs and Network devices.
• CAPTCHA Enhancements: CAPTCHA is no longer all-or-nothing. Admins can now enable it independently for Login, Registration, or Forgot Password from the Product Settings.
• SSO Auditing - SIEM Integration: Send SSO audit logs directly to your SIEM tool for centralised analysis, threat detection, and compliance reporting. No manual exports needed.
• Improved Visuals and Usability: Assign Hardware Token to Users, Assign Token, User Profile Fields and Group Custom Field configuration pages have now been modernised and updated for better usability and quicker load times.