Release notes

PAM - Add ability to set risk levels on Active Directory and EntryID groups and roles

PAM - Add MongoDB provider support for PAM managed accounts

PAM - Add PAM service auto-updater with silent MSI installer support

PAM - Add support for SSH JIT templates (SSH Jit via sudo)

PAM - Enable security group risk features for Hub data sources

PAM - Add TLS validation option for PowerShell-based PAM connections

PAM - Add variable resolution support in PAM service session token creation

PAM - Support multiple PAM services running simultaneously for high availability

PAM - Terminate gateway sessions on PAM account check-in

PAM - Update Hub Services installer to include Devolutions EULA

Encryption - Various bug fixes and improvements

PAM - Fix Docker-hosted PAM services incorrectly requiring an agent

PAM - Fix forced virtual gateway validation not applying in RDM with PAM service

PAM - Fix heartbeat crash when the FromProvider setting is configured on a provider

PAM - Fix Hub Services installer being blocked by hub key hash validation

PAM - Fix installer prompting to delete configuration files during upgrade

PAM - Fix JIT domain elevation resolving user rights by username instead of SID

PAM - Fix memory leak in scheduled PAM tasks

PAM - Fix PAM checkout corrupting account passwords when service is unreachable

PAM - Fix PAM service not starting automatically after machine reboot

PAM - Fix password rotation policy not being checked before resetting password on failed JIT elevation

PAM - Fix SID not being appended to manually created EntryID accounts

PAM - Various bug fixes and improvements

Reporting - Various bug fixes and improvements

PAM - Added a domain/AD scan filter on a given domain container

PAM - Added Entra ID JiT support

PAM - Added SSH providers

PAM - Added support for account lifecycle policies

PAM - Just-in-time (JIT) elevation support for domain users

PAM - New provider for Amazon Web Service (AWS) Identity and Access Management (IAM)

PAM - New provider for PostgreSQL

PAM - Fixed password resets and heartbeat with corrupted entries

Various bug fixes and improvements

Enhanced error handling with clearer and more descriptive messages

Fix an issue in the Reporting Service that occasionally caused errors when retrieving entries from specific vaults

Fixed Reporting Service connection issue with the Hub

Fixed issue with PowerShell legacy mode not working with AnyIdentity providers in PAM service

Added foundational support for AWS IAM account discovery, import, password reset, and heartbeat checks

Added new domain provider: Active Directory (AD)

Added new reporting service to detect compromised passwords: HaveIBeenPwned

Improved PAM service logging for better traceability

Provider cache is now cleared on connection failures

Fixed issue where Hub services used outdated cached provider credentials

Azure AD account discovery in Hub now supports filtering by user groups and roles for quicker management

Improved password generator in PAM

Fixed issue in services installer where the "Modify" flow did not properly save configuration changes

Resolved an issue where AnyIdentity Discovery failed when using the ExcludeDisabledAccountsInDiscovery parameter

Fixed an issue with PAM Password Reset functionality

Added account discovery on PAM providers

Added checkout policies

Added PAM AnyIdentity templates

Added PAM propagation scripts

Added scheduled PAM heartbeat

Added support for gateway farms

Added support for the Devolutions Hub reporting service

Allowed inherited settings for password rotation schedules

The gateway can now be generated by the service instead of the client

Various fixes

All services - Updated to .net 9

PAM Service - Updated to use the new APIs of Hub Business 2024.3.100

Various bug fixes and improvements

PAM Service - Added PowerShell engine for the upcoming AnyIdentity management

PAM Service - Fixed an inconsistent test provider result

Various bug fixes and improvements

Encryption Service - Added auto reconnect when application idenity (app user) loose connection to Hub

Encryption Service - Added more details in error messages

Encryption Service - Fixed access denied after being invited

Encryption Service - Fixed select account not working correctly

Encryption Service - Updated Docker container to .Net 8

Adds support for password rotation policies in PAM

Encryption Service - Added support

PAM - Switch to immediate tasks instead of regular polling for tasks

Core - Fixed generated password not being saved in entries

Initial release with password reset for Azure AD providers