v1.0.21 - May 27, 2026

New Features & Improvements

• Push authentication via OXU Pass — Supports authentication through the OXU Pass app

• Auto open Passkey prompt — Automatically triggers the Passkey prompt without requiring users to click Continue

• Alert Notification Center (Phase 1) — Introduces popup notification view on web and a new notification config page

• Datepicker for Analytics page — Adds date range picker to the Analytics page in Org Admin

• Improved Access Denied page UI/UX — Refreshed design and experience for the Access Denied page

• Device information in Activity log — Device details are now recorded in Activity log entries

• Activity log camelCase update — Standardized field naming format across Activity log

• SDK Middleware for AuthN/AuthZ — Added middleware layer to handle authentication and authorization flows

• Enhanced challenge flow — Improved reliability and experience of the sensitive action challenge flow

---

Bug Fixes

• Fixed unclear message when user toggles Authenticator App setup multiple times

• Fixed popup incorrectly prompting users to set up a second MFA method when not required

• Fixed issue allowing users to delete a Passkey that is the only remaining second MFA method

• Fixed incorrect MFA method display priority on the login challenge screen

• Fixed case where login succeeds but user appears as offline

• Fixed Sensitive Action policy on Org Unit being incorrectly overridden by root org settings

• Fixed Access Denied page not showing when admin role was revoked from a user

• Fixed Access Denied page still showing after admin role was reassigned to a user