2017-07-06T202016

Features

• Rate limiting for OTP requests: #1464, #1505, #1507

Bugs and Enhancements

• Enhanced support for translations (read locale from HTTP headers): #1488
• Updated dependencies: #1500
• Enhance user input validation for verify by mail codes: #1498
• Improved account reactivation UX: #1487, #1483
• Improved error handling for OIDC requests: #1494, #1492
• Improved response handling from proofing vendor: #1493
• Updated UI of timeout modal: #1486
• Updated service provider settings for customer agency: #1491
• Minor copy changes: #1490, #1489
• Updated link to Authenticator app Help Center question: #1485

2017-06-22T223821

Features

• Enable initial language translation: #1468, #1480
• Display user flows for support and documentation: #1481
• Added feature flag for address confirmation: #1455

Bugs and Enhancements

• Added fields to confirmation letter #1472
• Updated limits in confirmation letter request #1460
• Improved cancel options and destinations #1471
• Updated flow for account recovery #1470
• Extended OIDC support #1467, 1482
• Fully activate account after password reset: #1465
• Enhanced support for identity proofing: #1466
• Added agency service provider #1479
• Updated libraries: #1478
• Minor interface enhancements: #1473, #1474
• Minor copy changes: #1469

2017-06-08T181917

Features

• Show users what attributes an SP has requested #1431, #1433, #1454
• Updated verify by mail flow #1421, #1424, #1442, #1411, #1440, #1460
• Created mail testing configuration #1434
• Enhanced Open ID Connect sign in / sign out process #1437, #1451

Bugs and Enhancements

• Security config change #1461
• Improved consistency of cancel behavior #1436, #1439, #1449
• Resolved analytics bug that interfered with form inputs #1428
• Updated libraries #1438
• Updated log formatting #1444
• Updated deploy configurations #1448
• Minor interface enhancements #1446, #1441, #1453
• Minor copy changes #1445, #1452, #1447
• Refactored code, improved code consistency, and removed unnecessary code #1432, #1389, #1450

2017-05-25T213649

Features

• Allow OIDC users to navigate “back to service provider” #1398
• Hardened production service provider configuration #1381, #1406
• Hardened session storage #1358
• Updated verification failure interaction #1408
• Rename / redirect /profile to /account #1414
• New authenticator app setup #1420

Bugs and Enhancements

• Updated logging #1392
• Updated activation code by mail process #1410, #1369
• Updated cookie security settings #1374, #1403
• Updated documentation #1385, #1393
• Refined personal key errors #1377, #1386
• Refined load testing #1427
• Updated screenshot capture tool #1426
• Updated deployment mechanism #1429, #1430
• Resolved conflicts between lockouts and timeouts #1376, #1378,
• Updated libraries #1397
• Minor interface enhancements #1380, #1373, #1382, #1384, #1379, #1395, #1399, #1402, #1407, #1412, #1405, #1423
• Minor copy changes #1387, #1404, #1413, #1405, #1422
• Refactored code, improved code consistency, and removed unnecessary code #1370, #1394, #1396, #1401, #1400, #1409, #1415, #1418, #1425

2017-04-27T171416

Features

• Prompt user for LOA3 confirmation by mail #1348
• Make personal key easier to enter #1328, #1377
• Make profile page easier to understand #1336, #1360, #1352, #1375

Bugs and Enhancements

• Fix deploy issues #1341
• Restrict production SPs #1381
• Fixes session timeout when locked out #1376
• Fixed 2FA reauthentication error #1356
• Updated cookie security settings #1372, #1374, #1403
• Updated libraries #1346, #1345, #1318
• Minor interface enhancements #1365, #1359, #1371
• Minor copy changes #1337
• Refactored code, improved code consistency and removed unnecessary code #1338, #1341, #1340, #1344, #1388, #1342, #1349, #1350, #1353, #1351, #1354, #1355, #1357, #1361, #1363, #1364, #1366, #1368, #1367

2017-04-14T160110

Features

• SPs can specify attribute requests in ASCII or UTF-8 #1183
• Added support for load-testing #1188
• Added support for continuing signup in new browser #1265, #1275

Bugs and Enhancements

• Updated caching headers #1171
• Updated test settings #1186
• Updated libraries #1200, #1267
• Updated profile page #1210, #1249, #1271, #1327
• Improved accessibility #1176, #1198, #1202, #1224, #1270, #1280
• Improved error handling #1221, #1251
• Updated links in email #1247
• Updates to personal key #1244, #1259, #1268, #1294, #1304, #1308, #1306
• Removed DAP from authenticated pages #1257
• Updated address verification by mail #1260
• Updated branded experience #1285
• Updated cookie settings for Chrome #1300, #1252
• Updated deployment process #1331
• Fixed bug when cancelling signup #1325
• Minor interface enhancements #1309, #1311
• Minor copy changes #1264, #1283, #1296, #1293, #1295, #1299, #1301, #1305, #1303, #1314, #1321
• Refactored code, improved code consistency, and removed unnecessary code #1194, #1203, #1205, #1211, #1217, #1222, #1226, #1228, #1230, #1258, #1227, #1266, #1262, #1282, #1284, #1287, #1279, #1307, #1310, #1316, #1317, #1320, #1324, #1319, #1330, #1334, #1333, #1332

2017-04-13T193730

2017-04-13T193730 release

Post-launch cleanup

Bugs and Enhancements

• Updated messaging around personal keys and password reset #1301, #1255
• Fixed CSP bug that prevented redirects to SP in some circumstances #1315, #1329
• Clarified privacy act language #1312
• Improved SVG rendering for some browsers #1322
• Clarified canonical URL for content site #1321