BeyondInsight and Password Safe 26.1.0.878 release notes

Report subscription management now offers the following features for improved clarity and flexibility:

• Subscriptions now support full post‑creation editing. You can modify all subscription parameters after a subscription is created, allowing administrators to update existing subscriptions as requirements change without recreating them from scratch.

  ℹ️

  This change is for Cloud only.

• Users can assign and update a custom logical name for each subscription and see that name wherever subscriptions are listed, making it easier to distinguish multiple subscriptions for the same report by purpose or audience.

  ℹ️

  This change is for Cloud only.

• The Edit Options menu is renamed to Edit Subscription , making it clear that the action opens the full subscription configuration and helping users quickly locate where to update subscription settings.

ℹ️

For more information, see, Analytics and Reporting.

We introduced a new Secrets Safe Inventory Report. The Secret Safe Inventory Report lists secrets and shows the date when each secret value was last changed. You can filter the report by safe, secret type, secret value age (older than a specified number of days), and by free‑text search on secret name and URL. The report groups results by safe, and you can sort columns within each group.

ℹ️

For more information, see Analytics and Reporting.

Password Safe audit logging now records which administrator locks, unlocks, or terminates a session. This gives security teams clearer accountability and makes it easier to investigate administrative actions on privileged sessions.

The Password Reset-on-Release Reconciliation report is now available for Password Safe Cloud environments. This report provides auditable evidence that managed account passwords have been reset appropriately at the end of a session for any account configured with the Change password after any release option.

📘

For more information, see Analytics & Reporting.

• Secret records now track the last time the secret value itself was modified, separately from other metadata changes. This allows administrators to identify secrets whose values have not been updated recently and prioritize them for rotation.

ℹ️

For more information, see Secrets Safe: Configure.

BeyondInsight can now participate in the MCP gateway ecosystem using token-based authentication compatible with MCP clients. This enables developers to interact with supported Password Safe and BeyondInsight APIs through MCP-enabled tools while maintaining secure and controlled access.

ℹ️

For more information, see MCP gateway.

• Clients and servers can negotiate TLS 1.3 whenever both sides support it while still falling back to earlier TLS versions when needed, allowing customers to gain stronger encryption without disrupting existing integrations that rely on older protocols. Building on this flexibility, Password Safe now supports inbound and outbound TLS 1.3 for environments that can use it, enabling more secure connections while preserving expected behavior for current communication workflows.
• Client certification authentication is no longer supported for API registrations. The following warning message displays in the Configuration > General > API Registrations page and the Client certificate required checkbox is unavailable.

🚧

Important information

• For Cloud and Pathfinder versions only, TLS 1.3 is automatically enabled by default.
• The U-Series appliance controls the enabling and disabling of TLS 1.3 functionality.

The AWS scan connector has been updated to support a wider range of global regions, including new locations in Africa, Asia Pacific, Europe, Israel, Mexico, and the Middle East. This update ensures that organizations can discover and manage assets across a more comprehensive set of AWS infrastructures.

📘

For more information, see AWS Region Support.

The Discovery Scan wizard now includes a Smart Rule picker on the Select Scan Targets page. This feature lets you create and manage scheduled scans directly from Smart Rule address groups. It simplifies scan configuration and keeps scan targets aligned with your existing Smart Rule logic.

ℹ️

For more information, see Discovery: Configure.

The Smart Groups grid in the Group Details page now includes an optional Smart Rule Category column. Administrators can display, sort, and filter by this category to more easily locate and organize related smart groups.

ℹ️

For more information, see Configure: Smart Rules.

• User and Group Management detail panels now show a Value Last Changed field for both users and groups. This helps administrators quickly identify when an account or group was most recently modified.

ℹ️

For more information, see Configure groups.

The Use SAML Authentication login link is now shown whenever SAML is configured, even if FIDO2 is selected as the login method. This ensures users can always access SAML-based authentication without changing the login option first.

ℹ️

For more information, see Welcome to BeyondInsight.

User audit records now include IPv6 address data when available, in addition to existing fields. This gives security and compliance teams more complete visibility into where actions originated, especially in IPv6-enabled environments.

Searching by valid IPv4 and IPv6 addresses continues to work and match all possible combinations of IPv6 addresses For example, searching for ::1 returns results for both ::1 and ::0001.

As part of accessibility enhancements, we have made the following pages a more responsive layout, allowing them to be viewed and used on smaller screens or with higher browser zoom settings:

• Attributes page (Configuration > General > Attributes)
• Installer Activation Key page (Configuration > Authentication Management > Installer Activation Keys)

Session and keystroke purging is now enabled by default for all new Password Safe Cloud customers.

•  Standard: 
  • Default retention period: 1 year
  • Maximum retention (Standard SKU): 1 year
•  Premium: 
  • Default retention period: 3 years
  • Maximum retention (Premium SKU): 3 years