Overview
This update introduces delegated authentication support and improves the reliability, usability, and error handling of authentication flows performed through the VeridiumID ADFS Plugin.
-
Added support for delegated authentication.
-
Improved authentication behavior in Windows App and Citrix Workspace.
-
Improved error feedback for failed authentication attempts.
-
Added production-safe and diagnostic error display modes.
-
Fixed QR authentication in two-step journeys.
-
Added automatic recovery when an authentication session expires.
What’s New
ADFS Plugin
Delegated Authentication
The VeridiumID ADFS Plugin now supports delegated authentication when the authentication flow is initialized with a username.
The available options for delegated authentication include:
-
A personalized QR code for the selected user.
-
Passkey authentication.
The personalized QR code can be scanned and approved either by the selected user or by an authorized delegated user. VeridiumID Server validates the user context and confirms that the authenticating user is permitted to approve the authentication request.
Authentication Workflow Improvements
-
QR authentication in Windows App: QR authentication forms are now submitted automatically when the ADFS Plugin is accessed through Windows App or Citrix Workspace on a Windows machine.
-
Two-step journey support: When a personalized QR code is used during the first challenge of a two-step journey, the authentication flow now proceeds correctly to the next challenge.
-
Session timeout recovery: Expired authentication sessions can now refresh automatically according to the configured option “Auto refresh user session when timeout” in the ADFS configuration interface.
Error Handling and Diagnostics
-
The ADFS Plugin now displays user-friendly generic error messages in production environments.
-
Detailed diagnostic errors can be enabled for testing and troubleshooting through the
Show system errorconfiguration option.