16 January 2025

Production release: 16 January 2025
Staging release: 09 January 2025

09 January 2025

Implemented SAML Response validation to prevent replay attacks by verifying the InResponseTo attribute, issuer, destination, and audience restrictions, and ensuring all assertions are encrypted and signed by the IDP
Enhanced the security of federated authentication by implementing the encryption of SAML assertions
Increased AWS WAF Request Body Size Limit to 32KB
Implemented rate limit validation for failure cases related to verification codes and multi-factor authentication (MFA)
Addressed cookie errors when local storage is not supported in browsers or webviews
Removed UI encoding from the left panel text box fields in the MyProfile application
Copyright year now updates dynamically
Removed placeholder text from the username field on the sign-in page