Okta Production – Release 2016.01 Skip to main content
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Okta Production – Release 2016.01
Published: Jan 12, 2016   -   Updated: Jun 22, 2018

Okta Production Release 2016.01 began deployment on January 11. For the latest information on our release schedule, see Current Release Status.

Check the version number at the bottom of your Okta Administrator page to see your current version. Clicking the version number takes you directly to the folder containing the release notes.

User-added image

New Features

  • Microsoft Office 365 Licenses and Roles Management: We are pleased to announce that you can now manage your users’ licenses and roles, independent of other provisioning flows.

    We have introduced a new provisioning type for Office 365, License/Roles Management Only. This provisioning type allows admins to manage user license assignment and role delegation for existing Office 365 users and for users provisioned to Office 365 with third-party tools (for example DirSync or Azure AD Connect). For more details, see Okta Enhancements with Microsoft Office 365 Integration.

    User-added image

  • Okta's Reveal Password feature is now Generally Available (GA). This feature allows end users to show the password of dashboard apps by going into app settings and clicking the new See Password tab. This capability is especially useful for users who need to reenter long, randomly-generated passwords. For more information, see Revealing the Password of an App.

  • We are happy to announce that our Sync Password feature is now GA. This feature allows you to push a randomly generated password, unique to each app user, at setup. The ability to sync a randomly generated password is a powerful security option. For more information, see Using Sync Password.

  • Okta is pleased to announce an enhancement to our Import Safeguard feature. Admins can now specify the threshold rate that triggers the safeguard when the system detects a high number of app unassignments. This enhancement applies to all orgs using Import Safeguard. This is an Early Access (EA) feature; please contact Okta Support for implementation.

    User-added image

  • The ability for end users to add most standard online apps (whether in the OAN or not) to their Okta Home Page with a single click is now GA. When users enter credentials to log in to an online app, Okta displays a banner offering to save the app's password. Clicking Save Password automatically adds the app to the user's Okta Home Page. For more information, see Adding an App from the Browser Plugin.

    User-added image

  • Okta is pleased to announce the BambooHR provisioning integration which supports Universal Directory, Schema Discovery, and configuration as a Profile Master. For more information, see Configuring Provisioning for BambooHR.

  • The Facebook at Work app now supports the addresses -> locality attribute.

  • There are two additions to the Okta Expression Language.

    • There are six new time functions that convert date and time expressions into format that can be used for the Active Directory accountExpires field. For details, see Time Functions in the Okta Expression Language documentation.
    • There are four new functions that convert between ISO 3166-1 2-character country codes (Alpha 2), 3-character country codes (Alpha 3), numeric country codes, and full ISO country names. For details, see Country Code Conversion Functions in the Okta Expression Language documentation.
  • We have improved how we process your custom background image to ensure that image sizes remain under 2MB, regardless of file type. This enhancement helps the Okta Sign In page continue to load quickly.

Incremental Feature Summary

The following table summarizes features that are enabled incrementally. Links in the Feature column point to additional documentation for that feature, if available. After the feature is fully released, it is no longer tracked in this table. For release history of all features, see Features by Release.

New Orgs
New Orgs
Existing Orgs
Existing Orgs
Reveal Password2016.012016.012016.012016.02
Sync Unique Password2016.012016.012016.012016.02
Simplified Addition of Apps to Dashboard2016.012016.012016.012016.02
Group-based Sign On Policies2015.48      –2015.48      –
Enhanced Automatic App Login (Plugin)2015.462015.46      –      –

Agent Updates

We are pleased to announce the EA release of Okta's Java LDAP Agent version 5.3.1. This version provides support for SSL certificate pinning. By default, certificate pinning is enabled for new installations and disabled for agent upgrades. For more information, see Installing and Configuring the LDAP Agent. For version history, see Java LDAP Agent Version History.

Note: This version of the agent is not currently available to our EMEA customers.

Application Integrations

We've implemented SAML for the following Okta Verified applications:

  • &frankly (OKTA-75835)

  • Bluescape (OKTA-75168)

  • Sli.do (OKTA-75634)

We've implemented SWA for the following Okta Verified applications:

  • 4D Data Centres Client Portal (OKTA-77072)

  • 4D Data Centres Portal (OKTA-77070)

  • Airpush (OKTA-77131)

  • AppliedTrust (Atrek Client Login)

  • BioExpress (OKTA-77122)

  • Bitdefender - GravityZone (OKTA-77039)

  • C&H Distributors (OKTA-77123)

  • CCleaner Cloud (OKTA-76774)

  • CleanPix (OKTA-76776)

  • Dodge Company Shop (OKTA-77124)

  • DomainCentral (OKTA-76772)

  • Domino (OKTA-76684)

  • Element Fleet (InterActive for Drivers)

  • Epocrates Online (OKTA-76969)

  • Fivetran (OKTA-76775)

  • FontShop (OKTA-77128)

  • Franchise Gator (Sponsor Dashboard)

  • Fyber Ad Monetization Dashboard

  • Fyber Advertiser Control Panel (OKTA-77080)

  • Gusto (OKTA-76794)

  • Hawaiian Airlines (OKTA-77076)

  • HostDime (OKTA-76245)

  • IcoMoon (OKTA-76243)

  • itDuzzit (OKTA-77125)

  • Jet.com (OKTA-77106)

  • Lexus Financial Services (OKTA-77193)

  • magicJack (OKTA-75678)

  • Mailjet (OKTA-77108)

  • Medius Corporation (OKTA-76778)

  • Mid Atlantic Capital Group Portal

  • MixRank (OKTA-77129)

  • MoneyGram (U.S.) (OKTA-75663)

  • Motus (OKTA-77187)

  • MyLikes (OKTA-77130)

  • Notability - Support (OKTA-72014)

  • Outreach (OKTA-76777)

  • RealSelf (OKTA-77126)

  • Sematext (OKTA-77107)

  • TapResearch (OKTA-76682)

  • ThemeIsle (OKTA-76804)

  • Transera (OKTA-76779)

  • Vertafore - Engage (OKTA-77047)

  • VisionWeb (OKTA-76968)

  • Webjet (OKTA-77109)

We've added the following Mobile applications for use with Okta Mobility Management (OMM):

  • Airport Community (OKTA-75932)

  • magicJack (OKTA-76576)

  • SharpSpring (OKTA-75394)

  • XPOLogistics Last Mile (OKTA-75393)

Bug Fixes

Bug numbers ending with an H are hotfixes. Hotfixes are generally deployed after the initial release.

  • OKTA-72491 – Fixed an issue in which imports containing updates to groups with deleted app instances failed.
  • OKTA-72864 – Fixed an issue in which data in some fields changed after setting a password when sync unique password was enabled.
  • OKTA-72896 – Fixed an issue where admins were unable to deactivate mobile apps that had no configurations enabled.
  • OKTA-74827 – Fixed an issue in which provisioning to the Zendesk app did not process groups correctly under certain circumstances.
  • OKTA-75549 – Fixed an issue where Push Groups for O365 failed under certain circumstances.
  • OKTA-76540 – Fixed an issue where Okta Verify with Push Notifications occasionally failed.
  • OKTA-76551 – Fixed an issue that prevented admins from performing a Factory Reset on iOS devices.
  • OKTA-76825 – Fixed an issue that caused JIT imports and logins to fail when Inbound SAML was enabled and usernames were not in the form of an email address.
  • OKTA-77162H –  Fixed an issue where, when our latest EA enhancements to Office 365 were enabled, Universal Distribution Groups containing members of multiple domains could not be synced with Office 365. Note: Always sync child domains before parent domains.

The following SWA integrations were not working correctly and are now fixed:

  • Billtrust - Cash App Connect (OKTA-76935)

  • CareFirst (OKTA-76633)

  • Fancy (OKTA-76641)

  • John Hancock Pensions (OKTA-76634)

  • LivePerson Business Agent

  • MyResourceLibrary (OKTA-76639)

  • SteadyBudget (OKTA-76317)

  • USAA (OKTA-76643)

  • Zappos (OKTA-76265)