Skip to content
English
  • There are no suggestions because the search field is empty.

SurePassID Authentication Server (SPAS) 2026.4 - Release Notes and Download Links

Release Date: 10/12/2026
Release Type: Major Feature Release

New Features

1. OpenID Connect (OIDC) Provider Support

  • Added OIDC support throughout the admin SSO UI, including a new OIDC application detail for configuring OIDC relying-party applications.
  • Extended the SSO customization to surface OIDC and EAM configuration options.
  • Added design and specification documentation under docs/features/oidc_one/ (Provider Design, Admin UI Spec, Implementation Plan, QA Plan).
  • Certified against OIDC Core 1.0 and 1.0.1 specifications, including support for the Authorization Code Flow and PKCE.
  • SurePassID is a proud member of the OIDC community (https://openid.net/foundation/sponsoring-members/) and contributed to the OIDC certification program.

2. External Authentication Method (EAM) / Microsoft Entra ID Integration

  • Added a new EAM configuration page for configuring Microsoft Entra ID (Azure) External Authentication Method integration.
  • Added supporting help imagery and an Entra ID integration cheat sheet.

3. Session Lifetime & Logout Controls

  • Added configuration items for setting an absolute session limit to force re-authentication after a fixed period.
  • Added UI changes to support logout-flow scenarios (updates to Site2.Master, spCommonPage.cs, and related pages).

4. In-Product Help & Guided Tours

  • Added guided tour (driver.js) and specifically covering OIDC and EAM configuration.
  • Added on-line context sensitive help system to the admin UI putting our knowledge at your finger tips. No need to download the help files to view them. Great for environments that do not have external access such as OT and air-gapped environments.
  • Added Offline OTP documentation and cheat sheet (OfflineOTP-CheatSheet.md, OfflineOTP-and-CacheUpdate.md).

5. Improvements & Fixes

  • Restored missing user-group help content.
  • Cleaned up legacy functionality that had been deprecated long ago.
  • Fixed a compilation issue and a tour.js build issue.

6. Dependencies & Housekeeping

    • Upgraded .NET Hosting Bundle and Desktop Runtime from 8.0 to 10.0.
    • Upgraded jQuery from 3.6.0 to 3.7.1 (removed old 3.6.0 script/map/intellisense files).
    • Updated packages.config and project references (SurePassIdLegacyMfaServer.csproj).
    • Advanced the SurePassIdDotNetLibs submodule pointer to pick up shared library/message updates.
    • Database migration updates in mfa_db_update.sql to support the new OIDC/EAM/session features.

7. Upgrade Process

Microsoft .NET 10

  1. Download and install .NET 10 Hosting Bundle on the server where SPAS is installed
  2. Download and install .NET 10 Desktop Runtime on the server where SPAS is installed

SurePassID Authentication Server (SPAS) 2026.4

  1. Download SPAS 2026.4 to a temporary location - do not unzip
  2. Download SurePassID Installation Manager to a temporary location - do unzip
  3. Run Installation Manager
  4. Choose Upgrade and the SPAS 2026.4 zip
  5. Installation Manager will automatically:
    1. Create backup copies of your SPAS files, configuration, and database
    2. Upgrade your SPAS to 2026.4
    3. Roll back if any part of the upgrade process fails

Upgrade Notes

    • Database migration required: Apply mfa_db_update.sql (and docs/features/oidc_one/Oidc_Schema.sql) to provision the OIDC/EAM tables and new session-limit configuration. If using SurePassID Installation Manager (recommended) this will be handled automatically.
    • Entra ID / EAM setup: Refer to EAM_EntraId_SurePassId_Integration_CheatSheet.md for configuring the Azure application (Tenant ID, etc.).

Download Links and Support

SurePassID Authentication Server (SPAS) 2026.4: 

https://downloads.surepassid.com/as/spas.zip

SurePassID Installation Manager:

https://downloads.surepassid.com/instmgr/spinstmgr.zip

Getting Help

© 2011-2026 SurePassID. All rights reserved.