Customer Authentication 7.10.0

📘

Backward Compatibility

All HYPR components are fully compatible across the three previous/subsequent minor (X.X) releases.

New Features

Enable Role-based Management for API Access Tokens
API Access Tokens can be assigned a variety of roles upon creation, allowing or restricting API access by role. Creation and revocation are logged in the Audit Trail. See the Workforce Access 7.10 UI/UX Updates page for more information.

PingOne DaVinci Integration (Early Access)
The HYPR platform now integrates with PingIdentity's PingOne DaVinci cloud orchestration service. Please contact your HYPR Customer Success manager if you’d like to access this Early Access functionality.

Enhancements

Control Center UI Version Toggle
HYPR Control Center now allows administrators to toggle the User Interface (UI) between Standard and Advanced modes. See the Workforce Access 7.10.0 UI/UX Updates page for more information.

Support Email Changes Now Reflected on Registered Devices
When an administrator changes the support email address in the HYPR Control Center, registered mobile devices now pick up the change the next time they authenticate. Previously it was necessary for users to re-register to get the new support email. Please see the Workforce Access 7.10.0 UI/UX Updates page for details of the Control Center UI changes accompanying this enhancement.

Create a new eventName for non-HYPR authentication: EXTERNAL_AUTH_COMPLETE
Create an event name to indicate when a user has bypassed HYPR and entered their password, Windows Hello PIN, etc.; the specific credential provider will be stored in the DeviceType field within the event

Xcode 14 is supported as of HYPR 7.10
As of this release, Xcode 14 is officially compatible with HYPR SDK for iOS.

General Improvements

• (Control Center) Change default sort order for the Control Center UI User listing
• (Control Center) Log all security key data during a DEREGISTRATION Event. Previous versions did not consitently capture security key data in the Events log.
• (Mobile App - Android) Added a Magic Link missing parameter that was preventing the HYPR Mobile App from registering a new user in some cases.
• (Mobile App - iOS) Fix custom headers delegate for RP client
• (Platform) Add more descriptive errors to replace CC_INTERNAL_ERROR
• (Platform) Handle multiple accounts using the same email address in Okta
• (Platform) The FIDO registration timeout is now tied to error 1206009: Invalid cache
• (SDK) Timeout data was added to the Java client logging information
• (Server) Log all security key info during a DEREGISTRATION event
• (Workforce Access Client - Windows) Restore option to force use of legacy ADCS check
• (Workforce Access Client - macOS) Change commas to periods for the device model in the HTTP headers

Upcoming Changes

Keycloak Upgrade in HYPR 8.0.0
For the upcoming 8.0.0 release in early 2023, HYPR will be upgrading Keycloak from version 7.0 to version 16.1.1. Customers who are running HYPR on-premises must also upgrade Keycloak as part of the HYPR 8.0.0 upgrade. HYPR Cloud customers will get the Keycloak upgrade automatically. Regardless of installation type, all customers should plan to thoroughly test any HYPR instances, with an emphasis on deployments which use Intelligent Extensions, rely on custom templates within HYPR or Keycloak, or deploy applications which depend on embedded browser functionality.