Fast, transparent and ready for the future

We’re proud to announce the release of PAS 6.0, a major step forward for performance, monitoring, user experience, and security. This release is packed with valuable upgrades designed to help you run smarter, gain deeper insight, and deliver a better experience for both administrators and users.

Key highlights

• Upgraded to Java 21 for performance, security and long-term maintainability
• Brand new audit log system with detailed traceability and SIEM integration
• New metrics and dashboards for real-time operational insight
• Modern OneTouch enrollment portal — WCAG-compliant and mobile-first
• New internal application guides with simplified setup and better flexibility
• Improved logout flows and SP/RP configuration — more secure, less complex

Reminder: As always, please read the upgrade notes before updating your environment.

Java 21 — Power and performance

PAS now runs on Java 21, the latest Long-Term Support (LTS) version. This upgrade brings:

• Up to 40% faster server startup and API response times
• Better security and dependency management
• A future-proof foundation for continued innovation

Full Visibility with New Audit Logs

Our new audit log system provides significantly richer and more consistent data, enabling:

• Integration with SIEM platforms for centralized security visibility
• Proactive monitoring to detect issues before users are impacted
• Detailed traceability to investigate events when something goes wrong

Read the deep-dive: Audit logs / Event logs in PAS 6.0

New Metrics & Dashboards — Ready Out of the Box

PAS 6.0 expands our monitoring capabilities with:

• New metrics for authentication flows, pipe execution, license status, and more
• Pre-built dashboards to visualize recommended metrics instantly
• Faster root cause analysis and operational insights without extra setup

Read more: Recommended metrics and visualization

OneTouch Enrollment — Now Accessible for All

With the upcoming launch of OneTouch 2, we’re also releasing a new WCAG-compliant enrollment portal with:

• A cleaner, more accessible user interface
• Compatibility with both OneTouch 1 and 2
• A more flexible enrollment experience across all devices

Read more: OneTouch Enrollment

Smarter Admin Experience

New Internal Application Guides

When creating new guide scenarios, the UI now leverages the modern authenticator architecture (introduced in PAS 5.1), offering:

• More flexibility in selecting authenticators
• Streamlined setup for internal apps like SelfService or Enrollment

Improved Logout & Federation Configuration

We’ve made logout handling more robust and SP/RP setup more straightforward:

• Automatic logout from external IdPs (via SPBroker / RPBroker)
• Auto-management of SLO/ACS/Redirect URIs
• Full Single Logout (SLO) support and bug fixes in federation flows

Read more: SPBroker article

Fixes & Smaller Improvements

From improved container logging to new preset MFA sequences, PAS 6.0 includes many under-the-hood improvements. A few highlights:

• JSON-based logs with MDC fields for containers
• New method for end user IP resolution
• New metrics for license expiration and pipe congestion
• OTTokenVerifierValve now compatible with OneTouch 2

See the full changelog in our Release Notes

Ready to Upgrade?

PAS 6.0 is built to help you grow with confidence — more insight, better performance, and a smoother user experience. Make sure to review the upgrade instructions, and don’t hesitate to reach out if you need guidance.

Major

---

PAS 5.1.7 – Maintenance release is now available

This is a maintenance release that includes a selection of stability improvements and bug fixes, as we continue preparations for our upcoming major version, PAS 6.0, which is just around the corner.

What’s New in 5.1.7

While this release doesn’t introduce any major new features, several enhancements and fixes have been made to ensure a more stable and secure experience:

• Improved support for Freja eID: New attributes such as uniquePersonalIdentifier and loaLevel are now supported, offering greater flexibility for organisations using Freja eID for authentication.

• Better security insights: The included Software Bill of Materials (SBOM) now lists the Java Runtime Environment, making it easier to track vulnerabilities at a deeper level.

• Improved user experience options: A new setting allows administrators to disable automatic sorting of authenticators based on last use, giving more control over the user flow.
  
  

Stability and Bug Fixes

This release addresses a number of issues related to performance, error handling, and edge cases in authentication flows. Highlights include:

• Fixes for occasional token generation errors in OIDC authentication.

• Improvements to large file uploads and stability in PRISM applications under load.

• Adjustments to authenticator sequences, including a fix that may impact nested flows. If you are using nested SequenceAuthenticators, we recommend reviewing your configuration after upgrading.
  
  
  

---

For full details, please refer to the PAS 5.1.7 release notes.

If you have any questions or need support, don’t hesitate to reach out to your PhenixID representative or our support team.

Patch , Maint

---

Security update: Critical Vulnerability Mitigated

Today PAS 5.1.6 is released, including an important update addressing a critical security vulnerability affecting all versions based on the 5.x branch. We strongly recommend updating immediately to ensure the highest level of protection.

Read the full release here

Patch , Maint

---

We are excited to announce the release of PAS 5.1.5, an update with three primary areas of improvement:

• Foundation for New Applications: Laid the groundwork for our upcoming internal web applications (PRISM modules).
• New Web App for Digital Signatures: Introduced a completely revamped frontend for our FedSigning module.
• Bug Fixes: Resolved several issues identified in PAS 5.1.3 and 5.1.4.

Important Note: If you are upgrading from a version earlier than PAS 5.1.4, please review the release notes for those versions to ensure a smooth transition.

 

Highlights: The New FedSigning Module

The digital signature module, phenix-prism-fedsigning, has been transformed with a brand-new look and functionality.

Key Features:

• Enhanced Accessibility: WCAG compliance, responsive design, and support for custom themes and languages.
• New Functionality: Sign multiple PDF documents and view appendices in one seamless experience.

This new functionality complements updates introduced in the upcoming PhenixID Signing Workflow (SWF) 2.5.7.

For the full release notes please follow this link:

• Release notes

Minor

---