VeridiumID 3.9 introduces major enhancements focused on SSO and Session Security, Administrative Visibility and Reporting, and Simplified SAML/OIDC Integration. This release strengthens risk-aware authentication and session protection while giving administrators improved tools for configuration, monitoring, troubleshooting, and lifecycle management.
-
Enhanced Web Origin (CORS) Support in Veridium IdP — Expanded CORS handling provides more flexible control over browser-based integrations, including application-specific origins for OIDC clients, global allowed origins, and improved visibility and management from Veridium Manager.
-
Location Information Visibility — New privacy controls allow organizations to determine where user and device location information is visible across Veridium Manager, the Self Service Portal, session history, maps, and raw session data.
-
Display New Certificates in Dashboard — The Certificate Validity Dashboard now provides improved visibility into additional certificates, including Shibboleth IdP and supported internal application certificates, with direct access to the relevant management actions.
-
Custom Reports Generation — Administrators can create customized reports using flexible filtering and data-selection capabilities, save report definitions, and generate CSV exports for further analysis.
-
Administrator Deprovisioning Improvements — Administrator lifecycle management has been extended to identify accounts that are inactive, disabled, no longer authorized, or no longer have a valid authentication method, with support for automated or administrator-reviewed deprovisioning.
-
Administrator List — New Status Labels — New administrator access statuses and warning indicators make it easier to identify accounts that are correctly configured, missing administrative permissions, or do not have an authentication device.
-
Default Authentication Method per SAML Application — Authentication context can now be configured individually for each SAML Service Provider. This provides greater flexibility for integrations that require a specific authentication context, including federated MFA scenarios with Microsoft Entra ID.
-
Generate SAML Service Provider Metadata from Veridium Manager — Administrators can generate SAML Service Provider metadata directly from application configuration, simplifying onboarding when the Service Provider does not provide its own metadata file or URL.
-
Force Re-authentication Using ILP Risk Information — IdP session protection can use ILP risk information to require a user to authenticate again when elevated risk is detected, providing an additional response option alongside full session revocation.
-
Enhanced Traceability and Device Log Reporting — Authentication and enrollment activity can be correlated across identities, devices, sessions, requests, and participating VeridiumID services. Administrators can also temporarily enable remote logging on enrolled devices to simplify investigation of production issues.
-
Enhanced SSO Session Protection — SAML and OIDC SSO sessions receive additional protection throughout their lifecycle. Reused sessions and OIDC token operations can be evaluated against current identity and contextual risk information, allowing VeridiumID to react when the security state changes after the initial authentication.
-
Context-Aware and Phishing-Resistant Authentication — Authentication journeys can now require users to review and explicitly confirm contextual information before completing a mobile PIN or biometric challenge. Optional session-bound challenge signing adds protection against phishing, relay, replay, and unintended authentication approvals.
-
Passkey Authentication with Contextual and Behavioural Data — Server-managed passkey authentication can now be enriched with authentication, device, location, and behavioural context for ILP analysis, providing additional risk visibility and audit information for supported Veridium FIDO and Microsoft Entra passkey scenarios.
Together, these enhancements make VeridiumID 3.9 more resistant to modern authentication threats and easier to integrate, administer, monitor, and troubleshoot, while extending contextual security controls across authentication and SSO session lifecycles.