> For the complete documentation index, see [llms.txt](https://docs.fortifiedid.se/password-reset/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fortifiedid.se/password-reset/overview/about-this-release/release-notes.md).

# Release notes

### Version 3.3.0

#### Documentation

**Improved product overview and guidance for Fortified ID Password Reset**

The Password Reset documentation has been expanded and restructured to make it easier to understand what Fortified ID Password Reset is, what it can be used for, and where to start depending on the reader's goal.

The updated documentation now includes clearer overview content such as [Overview](/password-reset/overview.md), [Overview](/password-reset/overview.md#delegated-password-reset), and [Overview](/password-reset/overview.md#different-password-policies). The [Get started](/password-reset/overview/get-started.md), [Modules](/password-reset/modules.md), [Management Center](/password-reset/management-ui.md), [UI](/password-reset/ui.md), and [On behalf of](/password-reset/on-behalf-of.md) pages have also been positioned more clearly as entry points for different reader needs.

These updates are intended to make the documentation more approachable for both business-oriented readers and technical readers, while giving a clearer picture of the scenarios that Fortified ID Password Reset supports.

***

### Version 3.1.2

#### New Features

**Multiple Password Policies**

* Added support for multiple named password policies in the same Password Reset installation
* A default policy can be configured
* The active password policy can now be selected per user session

***

#### Upgrade Notes

* Existing configurations using a single `rules` section continue to work

***

### Version 3.1.1

#### New Features

**Header Text Display**

* Added `header_text` parameter to the API for customizable header display
* New component displays configurable text to the left of the avatar in the UI
* Text is right-aligned and grows to the left
* Supports language files for multilingual deployments
* If `header_text` is not set, no additional text is displayed

**Session Variables in Rules**

* Added support for session variables in `rules.json` regex evaluation
* Session attributes (e.g., `${session.givenName}`, `${session.familyName}`) can now be used in regex patterns
* Enables dynamic blocking rules based on logged-in user information
* Example: `"regex": "^((?!(?i:${session.givenName})).)*$"` now works as expected

**Extra Attribute Support**

* Added `extra_attribute_1` attribute for SAML SP applications
* Can be used by applications that require additional user attributes
* Available for all SAML SP configurations

***

#### Improvements

**Configuration Updates**

* Updated `pwdreset.json` module with two new configuration parameters:
  * `"overlay_dir": "${system.customer_home}/overlay/"`
  * `"logout_endpoint_url": "${globals.logout_endpoint_url}"`

**Logging Optimisation**

* Cleaned up default logging configuration in pipe files:
  * **pwdreset.json**: Removed all default logging (no request/session logging)
  * **self\_reset.json**: Kept only request logging (removed session logging)
  * **delegated\_reset.json**: Kept only request logging (removed session logging)
* Reduces log verbosity while maintaining essential audit trails

**Configuration Cleanup**

* Removed unnecessary parameter from `globals.json` for Password Reset
* Streamlined configuration for better maintainability

***

#### Bug Fixes

**EntraID Module**

* Fixed missing EntraID module in Password Reset distribution
* EntraID password changes now supported for Microsoft Entra ID (formerly Azure AD)

**InformationEndpoint Update**

* Updated InformationEndpoint module to version 2024.77 or higher
* Now supports overlay configuration consistent with other modules
* Resolved compatibility issues with newer configuration patterns

***

#### Technical Details

**Dependencies:**

* InformationEndpoint: 2024.77+
* Platform: 2024.77+
* Includes EntraID module support

**Configuration Changes:**

* Session variables are now resolved at runtime in rules.json
* New overlay directory configuration for easier customization
* Logout endpoint URL can be configured globally

**API Changes:**

* Added `header_text` field to API responses
* Added `extra_attribute_1` to SAML attribute list

***

#### Upgrade Notes

1. **Session Variables in Rules:**
   * If you use custom rules.json files, you can now leverage session variables
   * Update your rules to use `${session.<attribute>}` syntax for dynamic evaluation
2. **Configuration Files:**
   * Review and update `pwdreset.json` if you need overlay or logout endpoint customization
   * Check `globals.json` for removed parameters (automatic cleanup)
3. **Logging:**
   * Default pipe logging has been reduced
   * If you need more verbose logging, add configuration explicitly in your pipes
4. **EntraID Support:**
   * EntraID module is now included by default
   * No additional configuration needed unless using EntraID password operations

#### Known Issues

None reported for this release.

***

#### Support

For questions or issues, please contact Fortified ID support or visit our GitHub repository.

### 3.1.0

* Prepared to become part of the management center
* CVE updates