Credential Provider V2: Introduced Credential Provider V2 for Windows workstations, delivering an updated sign-in experience.
ARM processor support: Added support for Windows devices running on ARM-based processors (ARM64), allowing the MFA Agent to be deployed on ARM64 PCs alongside existing x64 builds.
Shared Identity: Added Shared Identity support in the Windows MFA Agent, allowing shared or generic Windows accounts to be linked to the correct miniOrange user for MFA and policy evaluation.
Machine-specific recovery codes: Users can sign in from the lock/logon screen using admin recovery codes provided by their miniOrange administrator when normal MFA cannot be completed, including when the device is offline or the service is unavailable or unresponsive. This provides a controlled break-glass path for authorized administrators to access the machine when normal MFA is unavailable.
One-time backup codes (security codes): Added support for one-time backup codes (security codes) in the Windows login flow, aligned with miniOrange backup/security code options for online and offline scenarios, where configured.
YubiKey FIDO2: Added support for YubiKey FIDO2 authentication in the Windows Credential Provider, enabling passwordless or second-factor FIDO2 sign-in where policy allows.
IMPROVEMENTS & FIXES:
Offline Login: Fixed offline login handling to correctly enforce MFA based on user status and configuration.