Warning
This is an early alpha release, not meant for production use. Use it to test brand-new functionalities.
About this release
Configure exactly how users authenticate with multi-step MFA, including FIDO2 security keys. Administrators have full control over MFA flows for each location, with stronger authentication options for high-security environments.
The mobile client has also been redesigned, joining the rest of the refreshed Defguard family.
✨ What's new
- Multi-step configurable MFA methods
- Use FIDO2 hardware key as MFA factor - add it as a passkey in your profile, configure an MFA Flow with FIDO2 Security Key factor, assign it to your location and connect using the latest Desktop Client.
- Bulk actions for Firewall module
- Handling multiple locations with DNS configuration connected simultaneously
- Completely redesigned Mobile Client - try it out by joining our beta channels or by installing packages from the release assets (more details in the mobile release).
|
🧪 How to test
🚀 Quickly run the latest server components using one-line-script in pre-release mode.
🔄 Worried that your users have to upgrade the client applications? Here you can check the client vs server feature compatibility matrix.
🙋 Feedback
We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues
Full changelog
- add multi-step MFA flow management API by @wojcik91 in #3535
- update proto submodule by @wojcik91 in #3538
- Update model_derive by @moubctez in #3548
- implement client version gate for multi-step MFA locations by @wojcik91 in #3554
- Mfa flow editor by @j-chmielewski in #3551
- implement MFA session DB store by @wojcik91 in #3577
- Mfa flow fixes by @j-chmielewski in #3584
- multi-step MFA engine MVP by @wojcik91 in #3591
- Atomic postures and mfa-flows assignments by @j-chmielewski in #3590
- fix mfa editor spacing issue by @j-chmielewski in #3602
- Stable to dev by @moubctez in #3642
- Assign MFA flows to locations by @t-aleksander in #3609
- ACL bulk actions by @t-aleksander in #3644
- Show in the location settings when a configured MFA flow becomes unusuable by @t-aleksander in #3647
- Fido2 by @moubctez in #3593
- utoipa is an option by @moubctez in #3650
- Optimise by @moubctez in #3652
- handle remote-auth methods in multi-step MFA flows by @wojcik91 in #3657
- Fix ghost rows being left behind in MFA flow assignment by @t-aleksander in #3659
- Attempt at fixing e2e tests by @t-aleksander in #3667
- Settings details in activity log by @moubctez in #3653
- Configure MFA methods on demand via client by @t-aleksander in #3656
- Switch to PNPM 12 and fix LogDetailDrawer by @moubctez in #3675
- Re-order activity log columns by @moubctez in #3679
- Update sqlx to 0.9 by @moubctez in #3681
- fix: don't emit failure event for each OIDC finish poll by @wojcik91 in #3684
- Client MTU by @moubctez in #3686
- Clean before alpha release by @moubctez in #3690
- chore: port LDAP firewall update fix from stable by @wojcik91 in #3692
Full Changelog: v2.1.0...v2.2.0-alpha1