Release Notes¶

CEP 1.11 includes new features, enhancements and resolve some issues.

What’s New?¶

Download Links And QR-Code for Smartphone Push App¶

Users can now scan a qr-code to install the NetIQ or custom vendor app. This feature has also been implemented for custom vendor selection..

Image title

Download Links And QR-Code for TOTP Smartphone App¶

If the parameter CEP_METHOD_TOTP_APP_LINKS is configured, users can also scan a qr-code to install the app for TOTP Smartphone app.

Image title

Phone Number Help Message¶

A new message to guide users for input their phone number in the right format.

Image title

Extra HTML For Support Page¶

You can add custom HTML on top of the support information page. more

Email Auto Enrollment¶

If the parameter CEP_METHOD_EMAIL_AUTOENROLL is configured, the user has no email method enrolled and an email address is available from the repository, the CEP will auto enroll the method If the user requests the authenticator overview.

Add Parameter CEP_METHOD_WINHELLO_HIDE_DEVICENAME¶

If the parameter CEP_METHOD_WINHELLO_HIDE_DEVICENAME configured true no input device name will be displayed on enrollment.

Add Parameter CEP_METHOD_WINHELLO_ENFORCE_NETBIOSNAME¶

If the parameter CEP_METHOD_WINHELLO_ENFORCE_NETBIOSNAME configured true CEP will use login session username (NETBIOS-Name with domain prefix) on Windows Hello enrollment for on AD users.

Enhancements¶

New Windows Hello Icon¶

The Windows Hello icon has been replaced.

Image title

Changed handling of CEP_LDAP_DIRECTORIES parameter¶

Binding credentials are no longer mandatory for the CEP_LDAP_DIRECTORIES parameter If CEP_LDAP_CHANGE_AS_USER is not configured true.

A Minimal AD Config (DNS: _ldaps.tcp.example.com)

    environment:
      - CEP_LDAP_ENABLE=true
      - 'CEP_LDAP_DIRECTORIES={"UNIQUE_REPOSITORY_NAME" : {"type": "ad", "ssl": true, "dnsdomain": "cep.corp", "userbase": "CN=%s,OU=Users,DC=cep,DC=corp", "basedn": "DC=cep,DC=corp"}}'

Resolved Issues¶

Issues

Fixed Windows Hello allow account name property configured by AA method configuration.
Fixed stripping of characters for OTP related methods on login and enrollment pages.
Fixed replacement of OTP destination in registration message.
Fixed empty OTP handling for registration and method reset.