Skip navigation
Duo Blog
Admin Login
Documentation

Duo Access Gateway - Release Notes

Last Updated: April 19th, 2023

Contents

Related

Duo Access Gateway adds two-factor authentication, complete with inline self-service enrollment and Duo Prompt to popular cloud services like Salesforce and Google G Suite using SAML 2.0 federation.

Duo Access Gateway reached Last Day of Support on October 26, 2023 for Duo Essentials, Advantage, and Premier customers. As of that date, Duo Support may only assist with the migration of existing Duo Access Gateway applications to Duo Single Sign-On. Please see the Guide to Duo Access Gateway end of life for more details.

Learn more about Duo Single Sign-On, our cloud-hosted identity provider featuring Duo Central and the Duo Universal Prompt.

Download the current release from the Checksums and Downloads page.

Duo Access Gateway for Windows

Version 2.0.0 - April 19, 2023

Version 1.5.13 - December 13, 2022

  • Updated the minimum version of PHP to 8.1.11 or greater.
  • Bug fixes and security enhancements.

Version 1.5.12 - January 19, 2021

  • Fixed an issue introduced by 1.5.11 where upgrading from a previous version of the Duo Access Gateway would not force the user's browser to reload changed JavaScript files.

Version 1.5.11 - December 15, 2020

  • Updated the minimum version of PHP to 7.4.12 or greater.
  • Updated the minimum version of Microsoft Visual C++ Redistributable to 2015-2019 - 14.28.29325.
  • Removed the domain field from the Azure OIDC authentication source page.
  • Fixed an issue where sessions would end prematurely if the authentication source was set to OpenLDAP.
  • Fixed an issue where the wrong SameSite Cookie flag was set on Chrome versions 51-66 causing issues with embedded browsers.
  • Fixed an issue where a redirect loop would occur when performing single logout.
  • Improved error messages in the dag.log file.
  • Bug fixes and security enhancements.

Version 1.5.10 - November 2019

  • Fixed an issue where users who could authenticate through first factor could modify the SAML response sent to the Duo Access Gateway and it would be accepted. This issue only affected Duo Access Gateways configured to use a SAML IdP authentication source. (DUO-PSA-2019-002).

Version 1.5.9 - September 2019

  • Fixed a bug where Duo Access Gateway admin console would sometimes fail to upload applications.

Version 1.5.8 - September 2019

  • Fixed a bug where Duo Access Gateway would fail to authenticate on certain embedded browsers on macOS.

Version 1.5.7 - September 2019

  • Update the minimum version of PHP to 7.3.8 or greater.
  • Added the ability to disable scoping when using AD FS as your SAML IdP authentication source.
  • Added more actionable error messaging and better LDAP logging.
  • Added support for upcoming Google Chrome version 80 SameSite cookie change.
  • mS-DS-ConsistencyGuid can now be used as the sourceAnchor attribute for Microsoft Office 365.
  • Bug fixes and security enhancements.

Version 1.5.6 - December 2018

  • Fixed bug that would cause Duo Access Gateway servers with Office 365 applications to slow down over time.
  • Fixed issue where using Single Logout to a SAML IdP authentication source would result in an error.
  • Fixed issue where Windows file locking could cause authentication failures.
  • Bug fixes

Version 1.5.4 - July 2018

  • Added SHA256 certificate fingerprint to Applications page
  • Fixed case sensitivity bug for Google OIDC and Azure OIDC domain checks
  • Fixed issue displaying Duo Access Gateway login page in IE11 compatibility mode
  • Automatically prompt for install of Visual C++ Redistributable for Visual Studio 2015 on Windows Server 2016
  • Bug fixes

Version 1.5.3 - April 2018

  • Updated UI in the Duo Access Gateway admin console
  • Bug fixes

Version 1.5.2 - March 2018

  • Merged upstream patch for simplesamlphp SSPSA 201802-01. Duo does not believe the Duo Access Gateway is affected by this issue, but has included these patches to increase the security posture of the DAG.
  • Bug fixes

Version 1.5.1 - September 2017

  • Bug fixes

Version 1.5.0 - August 2017

  • Added support for Office 365 basic authentication from legacy clients
  • Bug fixes

Version 1.4.5 - July 2017

  • Bug fixes

Version 1.4.4 - June 2017

  • Updated UI in the Duo Access Gateway admin console
  • Bug fixes

Version 1.4.3 - April 2017

  • Certificates generated in the Duo Access Gateway are now SHA256
  • Bug fixes

Version 1.4.2 - March 2017

Version 1.4.0 - February 2017

  • New minimum PHP version requirement 7.1.1
  • Support for Duo Network Gateway application links in Launcher
  • Support for organizational bookmarks in Launcher
  • Custom logos for generic SAML service providers

Version 1.3.2 - December 2016

  • Bug fixes and security enhancements

Version 1.3.1 - November 2016

  • Supports Windows Server 2016
  • Bug fixes and security enhancements

Version 1.3.0 - August 2016

  • Introduce Launcher portal for cloud applications

Version 1.2.1 - October 2015

  • Support for additional authentication sources

Version 1.1.1 - July 2015

  • Fix issue with initial certificate and private key creation

Version 1.1.0 - June 2015

  • GA release

Version 1.0.1 - May 2015

  • Pre-release beta

Version 1.0.0 - April 2015

  • Pre-release beta

Duo Access Gateway for Linux

Version 2.0.0 - April 19, 2023

Version 1.5.13 - December 13, 2022

  • Updated PHP to 8.1.11.
  • Bug fixes and security enhancements.

Version 1.5.12 - January 19, 2021

  • Fixed an issue introduced by 1.5.11 where upgrading from a previous version of the Duo Access Gateway would not force the user's browser to reload changed JavaScript files.
  • Fixed a bug that could cause Linux Duo Access Gateway processes to hang.

Version 1.5.11 - December 15, 2020

  • Updated PHP to 7.4.12
  • Removed the domain field from the Azure OIDC authentication source page.
  • Removed TLS 1.0 and TLS 1.1 support.
  • Fixed an issue where sessions would end prematurely if the authentication source was set to OpenLDAP.
  • Fixed an issue where the wrong SameSite Cookie flag was set on Chrome versions 51-66 causing issues with embedded browsers.
  • Fixed an issue where a redirect loop would occur when performing single logout.
  • Improved error messages in the dag.log file.
  • Bug fixes and security enhancements.

Version 1.5.10 - November 2019

  • Fixed an issue where users who could authenticate through first factor could modify the SAML response sent to the Duo Access Gateway and it would be accepted. This issue only affected Duo Access Gateways configured to use a SAML IdP authentication source. (DUO-PSA-2019-002).

Version 1.5.9 - September 2019

  • Fixed a bug where Duo Access Gateway admin console would sometimes fail to upload applications.

Version 1.5.8 - September 2019

  • Fixed a bug where Duo Access Gateway would fail to authenticate on certain embedded browsers on macOS.

Version 1.5.7 - September 2019

  • Updated PHP to 7.3.8
  • Added the ability to disable scoping when using AD FS as your SAML IdP authentication source.
  • Added more actionable error messaging and better LDAP logging.
  • Added support for upcoming Google Chrome version 80 SameSite cookie change.
  • mS-DS-ConsistencyGuid can now be used as the sourceAnchor attribute for Microsoft Office 365.
  • Bug fixes and security enhancements.

Version 1.5.6 - December 2018

  • Fixed bug that would cause Duo Access Gateway servers with Office 365 applications to slow down over time.
  • Fixed issue where using Single Logout to a SAML IdP authentication source would result in an error.
  • Fixed issue where Windows file locking could cause authentication failures.
  • Updated PHP to 7.1.25
  • Bug fixes

Version 1.5.4 - July 2018

  • Added SHA256 certificate fingerprint to Applications page
  • Fixed case sensitivity bug for Google OIDC and Azure OIDC domain checks
  • Fixed issue displaying Duo Access Gateway login page in IE11 compatibility mode
  • Bug fixes

Version 1.5.3 - April 2018

  • Updated UI in the Duo Access Gateway admin console
  • Bug fixes

Version 1.5.2 - March 2018

  • Merged upstream patch for simplesamlphp SSPSA 201802-01. Duo does not believe the Duo Access Gateway is affected by this issue, but has included these patches to increase the security posture of the DAG.
  • Bug fixes

Version 1.5.1 - September 2017

  • Bug fixes

Version 1.5.0 - August 2017

  • Added support for Office 365 basic authentication from legacy clients
  • Bug fixes

Version 1.4.5 - July 2017

  • Bug fixes

Version 1.4.4 - June 2017

  • Updated UI in the Duo Access Gateway admin console
  • Bug fixes

Version 1.4.3 - April 2017

  • Certificates generated in the Duo Access Gateway are now SHA256
  • Bug fixes

Version 1.4.2 - March 2017

Version 1.4.1 - February 2017

  • Fix issue with initial SSL certificate and private key warning message

Version 1.4.0 - February 2017

  • GA release (includes all functionality of Duo Access Gateway 1.4.0 for Windows)

Version 1.4.0-beta - January 2017

  • Pre-release betas (-beta1, -beta2)