M42 Secure Access 26.2 Release Notes
Secure Access 26.2 release notes
M42 Secure Access 26.2 Release Notes
Secure Access 26.2 release notes
Executive Summary
- Upgraded Secure Access to newer Keycloak version.
- Secure Access 26.2 introduces Signicat VideoID and PictureID person verification, enabling strong biometric and identity document-based identity proofing for user onboarding and password reset flows directly from the login page.
- A new certificate management UI allows administrators to upload, inspect, download, and configure expiry reminders for certificates, directly from Connectors UI.
- Authentication reliability has been improved with a fix to session timeout behavior, users no longer need to log in twice after their session expires.
- Finnish Trust Network (FTN) authentication via Signicat is now fully operational in Pushed Authorization Request (PAR) mode.
Technical Summary
- Upgraded Secure Access to newer Keycloak version.
- New Signicat VideoID and PictureID verification: a Keycloak identity provider extension that initiates a Signicat biometric/document check from the login page, returning a verified national ID on success, usable for both first-time onboarding and password reset flows.
- New certificate management UI: administrators can upload certificates, view certificate metadata and validity details, download certificate files, and configure expiry reminder notification schedules.
- Fixed session timeout re-authentication loop for identity providers, the session is now correctly re-established in a single redirect.
- Fixed Signicat PAR OIDC provider:
acr_values=idp:ftnis now correctly sent in the Pushed Authorization Request POST body, enabling Signicat to route users to FTN authentication.
Summary of Key Features
- Upgraded Secure Access to newer Keycloak version.
- Signicat VideoID and PictureID person verification — biometric and document-based identity proofing from the login page
- Certificate management UI — upload, view, download, and configure expiry reminders
Summary of the Releases
| Release | Summary |
|---|---|
| 26.2.0 | Upgraded Secure Access to newer Keycloak version, Certificate management UI, session timeout fix, and Signicat FTN PAR authentication fix. |
Important Information
Releases are cumulative. The latest release includes the content of all previous releases in the same major version.
Major and Minor Releases Explained
Secure Access (previously known as ESA) follows a continuous delivery model.
- A major release (for example, 26.1) consists of functionality built after the previous major release (for example, 25.3)
- Minor releases are delivered monthly and may already include parts of functionality that later also appear in the next major release
This means:
- Some features associated with a major release may be delivered earlier in minor releases
- Conversely, a major release includes all functionality delivered in its preceding minor releases
The roadmap therefore reflects when functionality becomes available within a time window, not a single fixed release moment.
Release Details
Secure Access 26.2.0 release notes details
26.2.0
New Features
| ID | Item | Notes |
|---|---|---|
| 558876 | Signicat VideoID and PictureID Person Verification | Introduced support for Signicat-based identity document and biometric verification via VideoID and PictureID. Users can now complete a first-time identity verification through a video call or photo-based document check directly from the Secure Access login page. This enables strong identity proofing for onboarding flows and password reset scenarios without requiring an existing authentication method. |
| 549343 | Certificate Upload UI | Added a user interface for uploading certificates directly within Secure Access (previously known as ESA) administration. Administrators can now upload and manage certificates through the UI without requiring manual backend operations. |
| 580401 | Certificate Detail View and Download | Added the ability to view detailed certificate information and download certificates from the Secure Access administration UI. Administrators can inspect certificate metadata and retrieve certificate files directly from the interface. |
| 580433 | Certificate Expiry Reminder Notifications | Introduced a configurable reminder feature for certificate expiry. Administrators can define reminder schedules and notification settings to be alerted before certificates expire, reducing the risk of unexpected authentication failures due to expired certificates. |
| 561032 | Upgrade Secure Access to newer version | Upgraded Secure Access to newer Keycloak version. Selecting Realm on admin UI has changed. Loading certificates to Secure Access has changed. Local user login + Signicat sms otp combination supports now also new Signicat portal. |
Improvements
| ID | Item | Notes |
|---|
Bug Fixes
| ID | Item | Notes |
|---|---|---|
| 563147 | Login Loop After Session Timeout | Fixed an issue where users were required to initiate the login process twice after a session timeout. Users are now redirected and authenticated correctly in a single step after session expiry. |
| 590927 | Signicat FTN Authentication Not Routing Correctly in PAR Flow | Fixed an issue where Finnish Trust Network (FTN) authentication via Signicat was not routing correctly when using the Pushed Authorization Request (PAR) flow. The acr_values parameter is now correctly included in the PAR POST body, ensuring Signicat routes users to FTN authentication as expected. |
Table of Contents