- Fixed a bug that prevented the offline feature to work for multiple users.
- When using RDP, the incoming password is now properly decrypted so that "2step_send_password" works correctly in this scenario.
- Fixed a bug that could cause an infinite loop in the CredUI scenario.
- Improved the "show_domain_hint" feature to directly show the domain that will be used when entering a backslash.
- Entering '.' will now be properly resolved to the local computer name.
- Added "offline_threshold" configuration entry. OfflineRefill is only attempted when the remaining offline OTPs drop below the threshold. This will prevent having to wait for a connection timeout every time a authentication is performed where the computer is really offline.
- Added "enable_reset" configuration setting to show a clickable text at the bottom that resets the login.
- Added "debug_log" configuration setting to create a detailed log file. This setting replaces "release_log", real errors are always written to the log file. This setting also removes the need to install the debug version to create a detailed log.
- Added status callback to WinHttp to get more detailed information about certain failures.
- Fixed crash when deselecting the Credential Provider tile.
- Fixed missing lookup of "no_default" setting.
- The installer now writes all possible configuration keys to the registry. The configurable parts in the installer are unchanged.
- Added "prefill_username" configuration setting to prefill the username field with the last user that logged on
- Fix loading custom bitmaps as custom tile picture.
- Fix WinHttp default timeouts
- The behavior of the CP and Filter can be modified for each scenario separately (see docs).
- Fix missing Submit button upon failure when 2step is enabled.
- Support realms by configuring a realm mapping in the registry
- Support of Push Token
- Support offline authentication
- Support exclusion of a single account
- Fix for clients experiencing a freeze when using only hide_otp configuration.
- URL encoding of parameters which are sent to the server.
- Fix buffer overflow in certain RDP scenarios, that crashes the terminal server client.
- Make default tile configurable via NO_DEFAULT='1' registry key.
- Support SMS/Email tokens, which require a transaction id to be appended to the request. This only works when the CP is configured to ask for the OTP in a second step. The message of the challenge is displayed to the user.
- Logging of sensitive data can be activiated by a registry key
- Fix missing lookup of the domain when using over-the-shoulder-prompting (UAC). Note: The UAC scenario with the credential provider does currently not work on Windows 8/ Server 2012.
- Password change on a locked workstation is not possible. If this occurs, block our tile and guide the user to sign out and in again to complete the password change in the LOGON scenario. (Similar to what Windows does)
- Optionally send an empty password or the domain password to the privacyIDEA server. (As intended in version 2.0) This is only possible if the request for the OTP is made in a second step.
- Added icon to display in installed software list
- Improved debug message format
- More debug messages
- Changed version number format to end with buildnumber
- Displaying the correct version number in the MSI as well as in the installed software list
- Removed unnecessary communication with the privacyIDEA server
- Support changing the password on logon if the password expired or is requested to change by the admin
- Optional registry key for custom ports
- Adjusted Installer
- Fixed a bug with parsing the path from the URL
- Bugfix for URLs with scheme and paths specified
- Username and domain hideable on locked machines (custom login text will still be displayed)
- Custom OTP field text
- Adjusted Installer
- When connecting to a machine with privacyIDEA CP, allow to use the credentials which were already passed in NLA. We only ask for OTP.
- Replaced libcurl and OpenSSL with Winhttp
- SSL errors can be ignored optionally
- Second dialog to enter OTP separately
- Optionally send the domain password to the privacyIDEA server
- Adjusted Installer
- Add new logos
- Cleanup license and README
- Add correct user-agent