Secure Work Release Notes - October 3, 2025

Hot Fix Release

Bug Fix

Windows Desktop Login (YubiKey) – WS-FED Hot Fix

This hot fix addresses several issues affecting customers using Windows Desktop Login with YubiKey over WS-FED.

• Authentication events now correctly report the actor, improving visibility and auditability.

• Policy enforcement has been strengthened so that a DENY action reliably prevents login attempts over WS-FED.

• The Authenticator IP and Related IP fields now populate as expected for POLICY – DENY and POLICY – ALLOW events, ensuring accurate enforcement of IP-based rules. This also fixes the QR Roaming code display so it appears correctly when roaming is restricted by IP rules.

In the example events view below, the Principal Actor is now correctly displayed:

In the example policy event below, the Authenticator IP and Related IPs are properly populated on a POLICY event. Previously, these values were often empty or incomplete, which caused policy rules to fail when matching IP addresses.