One of the interesting new features is the user cache.
We reworked the LDAP connection and also added a generic user cache, that stores the userresolver information in the local SQL database. This speeds up authentication performance a lot.
We also added more functionalities to the U2F rollout and authentication.
A new API allows the enrollment of more secure smartphone apps.
See the Changelog for a complete list.