RSA ID Plus Release Notes
Last Modified: 2026-10-05

    RSA ID Plus October 2026 Release Notes

    We are excited to announce the October 2026 release of RSA ID Plus. This release delivers new features, enhancements, and bug fixes to improve your experience with our product.  

      

     

    Release Notes Renamed to RSA ID Plus

    Starting with the October 2026 release, the Cloud Access Service release notes have been renamed ID Plus release notes. While the Cloud component remains the focus of these release notes, they also include information about other ID Plus components, such as identity routers, authenticator applications, and agents.

    New Features and Enhancements

    This release includes the following new features and enhancements.

    Common User Schema Support in the Cloud Administration REST User APIs

    The Cloud Administration REST APIs now support the Common User Schema, released in September. This includes APIs such as Create Local User, Update Local User, and User Details, for users from all identity sources. The API requests and responses now include additional common schema attributes. 

    Enhanced Report Viewing and Exporting

    The Reports page under Users has a new look and layout. Each report row now has a View option that opens the report data, along with the report status and the number of users included. In the report view, you can filter the data and use Column Settings to select and reorder columns, and download the results. With Export Report, you can download the filtered records rather than the full report. You can generate one report of each type every two hours. After you generate a report, its row on the summary page shows how long until you can generate it again. 

    Configurable ID Token Lifetime for OIDC Connections

    The generic OIDC connection profile now includes a new ID Token Lifetime field, where you can set how long an ID token stays valid. You can enter any value from 1 to 1440 minutes (24 hours). Previously, the lifetime was always 5 minutes. Some setups, such as an OIDC connection with SharePoint SE, need a longer token lifetime. Existing and new connections still use 5 minutes until you change this value.

     

    Coming Soon

    RSA Authenticator 4.8 for iOS and Android

    The following features and improvements are included:

    • Performance and stability improvements: Faster Home screen loading, smoother app performance, and greater stability. 
    • Anti-tampering: The RSA Authenticator app now enables new anti-tampering measures to make your authentication process more secure.

     

    Fixed Issues

    The following table lists the issues fixed in this release.

      

    IssueDescription
    NGX-248419
    In the Common User Schema Migration Dashboard, the Migration Details section still showed Action Needed for Migration after all conflicts in the Migration Preview were resolved and the Overall Publish Status was Success. This issue is now fixed.
    NGX-247086Previously, a generic OIDC relying party governed by an access policy could prompt users for a password instead of the method set in the policy (for example, SecurID OTP), so users could not authenticate as expected. Now the policy's configured primary authentication method is applied correctly.
    NGX-246786
    Fixed an issue where certain permissions could be presented incorrectly when configuring an OAuth client for RSA MFA Agents. Permission visibility now matches the supported configuration.
    NGX-246332
    Fixed a license status display issue to ensure the RADIUS Clients page accurately reflects active licenses and only alerts administrators when a required license is missing. 
    NGX-244950
    Fixed an issue where the Cloud Administration Console incorrectly displayed a phone number validation error for certain valid, properly formatted numbers when configuring SMS-based authentication. Valid phone numbers are now accepted.
    NGX-244946
    Fixed an issue where an identity source could not be removed after the Live Verify License entitlement was not renewed.

     

     

    Upcoming End of Primary Support (EOPS) Details

    The following table provides details on RSA products reaching the end of support within the next six months. 

     

    ProductVersionEOPS DateExtended Support Level 1/Level 2

    Authenticator for iOS & Android 

    4.5 
    October 2026 
    N/A
    4.6 
    March 2027
    N/A
    MFA Agent for Microsoft Windows 2.3.3/2.3.4/2.3.5 December 2026  N/A
    Authenticator for Windows 
    6.2.2 
    December 2026
    N/A
    6.2.3 
    March 2027 
    N/A
     RSA Authentication Manager  8.7 SP2 January 2027  January 2028 / January 2029 

     

    For more details, refer to Product Life Cycle.

            

    Product Documentation and Support

    Visit RSA Community to access the latest version of the product documentation, answers to common questions, solutions to known problems, community discussions, and case management.  

             

    Recent Release Notes

      

      
    Previous Release Notes: Cloud Access Service and Authenticators Historical Release Notes