July 2021

In the Interactive API Reference, the static password parameter is documented to be mandatory for the Create User API. However, the API works without the static password and returns "isPasswordSet": false if the static password is not provided.

Status: This issue has been fixed. staticPassword is no longer documented as a mandatory parameter.

The POST /users/register endpoint does not check if any activations for multi-device licensing (MDL) authenticators are still available. The MDL provisioning process is triggered regardless of whether license activations are still available.

Status: This issue has been fixed. If there are not enough activations available for the MDL license, the endpoint now returns the following error message: 409 License activation limit reached.

The probability that Intelligent Adaptive Authentication accepts a random one-time password (OTP) on first authenticator usage is too high.

Status: This issue has been fixed. The relevant policies for authentication and signature validation scenarios have been changed. For more information about authentication policies, refer to Authentication policies.

Intelligent Adaptive Authentication supports the following versions of the Orchestration SDK Client:

• 5.4.1

• 5.4.0

• 5.3.1

• 5.3.0

• 5.2.0

• 5.0.2

• 4.24.4

• 4.24.2

• 4.23.0

• 4.21.1

• 4.20.2

• 4.19.3