RSA ID Plus Release Notes
Last Modified: 2026-10-08

    RSA ID Plus October 2026 Release Notes

    We are excited to announce the October 2026 release of RSA ID Plus. This release delivers new features, enhancements, and bug fixes to improve your experience with our product.  

      

     

    Release Notes Renamed to RSA ID Plus

    Starting with the October 2026 release, the Cloud Access Service release notes have been renamed ID Plus release notes. While the Cloud component remains the focus of these release notes, they also include information about other ID Plus components, such as identity routers, authenticator applications, and agents.

     

    New Features and Enhancements

    This release includes the following new features and enhancements.

    Common User Schema Support in the Cloud Administration REST User APIs

    The Cloud Administration REST APIs now support the Common User Schema, released in September. This includes APIs such as Create Local User, Update Local User, and User Details, for users from all identity sources. The API requests and responses now include additional common schema attributes. 

     

    Enhanced Report Viewing and Exporting

    The Reports page under Users has a new look and layout. Each report row now has a View option that opens the report data, along with the report status and the number of users included. In the report view, you can filter the data and use Column Settings to select and reorder columns, and download the results. With Export Report, you can download the filtered records rather than the full report. You can generate one report of each type every two hours. After you generate a report, its row on the summary page shows how long until you can generate it again. 
     

    Configurable ID Token Lifetime for OIDC Connections

    The generic OIDC connection profile now includes a new ID Token Lifetime field, where you can set how long an ID token stays valid. You can enter any value from 1 to 1440 minutes (24 hours). Previously, the lifetime was always 5 minutes. Some setups, such as an OIDC connection with SharePoint SE, need a longer token lifetime. Existing and new connections still use 5 minutes until you change this value.

     

    Third-Party API Support in API Access Management

    The API Access Management page now has an updated layout with two tabs: RSA Resources, for managing access to ID Plus resources, and 3rd-Party Resources, for managing access to external resources. On the 3rd-Party Resources tab, you can register external resource servers and add the API clients that access them using tokens issued by RSA. This extends OAuth capabilities beyond RSA APIs, so clients can securely access your resources on behalf of users, with your choice of what each client is allowed to do. 

     

    Coming Soon

    RSA Authenticator 4.8 for iOS and Android

    The following features and improvements are included:

    • Performance and stability improvements: Faster Home screen loading, smoother app performance, and greater stability. 
    • Anti-tampering: The RSA Authenticator app now enables new anti-tampering measures to make your authentication process more secure.

     

    Fixed Issues

    The following table lists the issues fixed in this release.

      

    IssueDescription
    NGX-248754

    Fixed an issue where quotation marks were automatically added around the single-valued constant attribute source in the SAML assertion for an IDR-based SAML application.

     

    (Added on October 15, 2026)

    NGX-249141

    Fixed an issue where the NameID prefix could not be added to a SAML application configured on the identity router. The prefix and suffix values were cleared when the application was saved, which prevented users from logging in. These values are now retained and applied correctly.

     

    (Added on October 8, 2026)

    NGX-248419

    In the Common User Schema Migration Dashboard, the Applications section did not appear in the Migration Preview when an application had Fulfillment Application Roles enabled but used no attributes affected by the migration. Migration Details showed Action Needed for Migration, but the conflict and the steps to resolve it were not shown. This issue is now fixed.

    NGX-247086Previously, a generic OIDC relying party governed by an access policy could prompt users for a password instead of the method set in the policy (for example, SecurID OTP), so users could not authenticate as expected. Now the policy's configured primary authentication method is applied correctly.
    NGX-246786
    Fixed an issue where certain permissions could be presented incorrectly when configuring an OAuth client for RSA MFA Agents. Permission visibility now matches the supported configuration.
    NGX-246332
    Fixed a license status display issue to ensure the RADIUS Clients page accurately reflects active licenses and only alerts administrators when a required license is missing. 
    NGX-244950
    Fixed an issue where the Cloud Administration Console incorrectly displayed a phone number validation error for certain valid, properly formatted numbers when configuring SMS-based authentication. Valid phone numbers are now accepted.
    NGX-244946
    Fixed an issue where an identity source could not be removed after the Live Verify License entitlement was not renewed.

     

     

    Upcoming End of Primary Support (EOPS) Details

    The following table provides details on RSA products reaching the end of support within the next six months. 

     

    ProductVersionEOPS DateExtended Support Level 1/Level 2

    Authenticator for iOS & Android 

    		4.5 
    		October 2026 
    		N/A
    4.6 
    		March 2027
    		N/A
    MFA Agent for Microsoft Windows 2.3.3/2.3.4/2.3.5 December 2026  N/A
    Authenticator for Windows 
    		6.2.2 
    		December 2026
    		N/A
    6.2.3 
    		March 2027 
    		N/A
     RSA Authentication Manager  8.7 SP2 January 2027  January 2028 / January 2029 

     

    For more details, refer to Product Life Cycle.

            

    Product Documentation and Support

    Visit RSA Community to access the latest version of the product documentation, answers to common questions, solutions to known problems, community discussions, and case management.  

             

    Recent Release Notes

      

      
    Previous Release Notes: Cloud Access Service and Authenticators Historical Release Notes

     

    Related Articles

    Trending Articles

    Don't see what you're looking for?