ePO extension 25.8 (unsigned) and BT Privilege Management app 25.8

November 25, 2025

✨ Enhancements

Policy Editor: Identity Provider settings have moved!

The settings for configuring OIDC and RADIUS for multi-factor authentication have been relocated. You’ll now find them under Utilities in the Policy Editor menu instead of Messages.

No worries—this is just a UI update. Everything still works the same, and there’s no need to update any existing policies using IdP.

Identity provider settings in the Policy Editor

📘

For more information, see Identity provider settings.

🛠️ Issues resolved

Policy Editor

DescriptionResolution
The %USERPROFILE% environment variable not working as expected in App Definition Regular ExpressionsFixed issue so Windows Application matcher "Regular Expressions" are added to policy when configured for all applicable application types.
Page not correctly scrolling when Show Message on Secure Desktop selected.Now when a user clicks the "Show Message On Secure Desktop" URL in Windows Messages, the page auto-scrolls to open the correct accordion in the UI.
Custom message not displaying correct number of lines.Custom end user Windows messages correctly show line one or two when configured.
Some Spanish translations display in French.Updated QuickStart template so Windows Spanish message templates display in Spanish.
Toast notification blank when generating agent protection key.The toast notification now displays Success or Failure text on Generate/Regenerate via Agent Protection Settings.

🧩 EPM components

  • BT ePO extension 25.8.17
  • BeyondTrust Privilege Management App 25.8.4
  • PM Reporting Database 25.8.17

©2003-2025 BeyondTrust Corporation. All Rights Reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.