Orchestration SDKs

Developer Experience changelog

Latest Releases

Orchestration SDK for iOS 2.1.1

September 4, 2026 patch

Updated

  • Updated RecaptchaEnterprise dependency to 18.9.1 for Xcode 27 and iOS 27 compatibility. [SDKS-5306]

Orchestration SDK for JavaScript 2.1.1

August 10, 2026 patch

Fixed

  • Fixed the OIDC client to always include prompt=none on background authorization calls, for both standard and PAR flows.

Orchestration SDK for iOS 2.1.0

July 22, 2026 minor

Key features

Added

  • Added PollingCollector for DaVinci flows. [SDKS-4682]

  • Added QRCodeCollector for DaVinci flows. [SDKS-4680]

  • Added BooleanCollector to support Checkbox and Switch input types in DaVinci forms. [SDKS-4920]

  • Added ReadOnlyTextCollector for DaVinci forms. [SDKS-4928]

  • Added rich text and embedded link support to LabelCollector through new RichContent and RichContentReplacement types. [SDKS-4245]

  • Added support for phone number extensions in PhoneNumberCollector. [SDKS-4668]

  • Added PushError.pushNumberChallengeError to surface a distinct failure for Push Number Challenge responses. [SDKS-5115]

  • Added preferImmediatelyAvailableCredentials option to FIDO authentication to restrict the ceremony to locally-available credentials only, if they exist. [SDKS-5212]

  • Added AuthMigration module for migrating existing sessions from the legacy ForgeRock SDK. [SDKS-4773]

  • Added Page Node description, header, and footer support. [SDKS-4762]

Fixed

  • Fixed permanent authentication failure after iCloud device migration caused by a Secure Enclave key mismatch. [SDKS-5172]

  • Fixed PingFido WebAuthn registration ignoring the configured displayName during passkey creation. [SDKS-5211]

  • Fixed PasswordCollector not handling nested password policies. [SDKS-4695]

  • Fixed PIN verification during device binding registration. [SDKS-5015]

  • Fixed Protect collector being triggered multiple times within a flow. [SDKS-4769]

  • Fixed browser close and reset logic. [SDKS-4717]

  • Fixed device binding authenticators incorrectly reporting as supported on the simulator. [SDKS-4836]

  • Fixed DeviceBindingConfig device name defaulting to the user-assigned name instead of the device model. [SDKS-4850]

  • Fixed DefaultDeviceIdentifier to reuse the legacy device identifier when available. [SDKS-4630]

  • Fixed Swift build failures caused by a platform bump and missing canImport guards. [SDKS-4916]

  • Fixed FIDO ceremony logs not routing through the workflow logger. [SDKS-4924]

Orchestration SDK for JavaScript 2.1.0

July 8, 2026 minor

Key features

Added

  • Added PollingCollector for DaVinci flows.

  • Added QrCodeCollector for DaVinci flows.

  • Added BooleanCollector and ValidatedBooleanCollector to support Checkbox input types in DaVinci forms.

  • Added PhoneNumberExtensionCollector for phone number fields that include an extension.

  • Added ValidatedPasswordCollector for password fields with embedded policy validation.

  • Added ImageCollector for IMAGE form fields in DaVinci forms.

  • Added subscribe method to journey and OIDC client instances.

  • Added WebAuthn conditional mediation (passkey autofill) support.

  • Added user.session() method for silent OIDC session verification (prompt=none).

Updated

  • Updated rich-text support of the ReadOnlyCollector to handle links in Translatable Rich Text (Forms).

Fixed

  • Fixed RTK Query cache lookups in cache.getLatestResponse() and cache.getResponseWithId().

  • Fixed resume() to correctly forward redirect query parameters from the authorization response.

  • Fixed JourneyLoginFailure not being returned when the server sends a login failure response.

Orchestration SDK for Android 2.1.0

July 7, 2026 minor

Key features

Added

  • Added PollingCollector for DaVinci flows. [SDKS-4681]

  • Added QrCodeCollector for DaVinci flows. [SDKS-4679]

  • Added BooleanCollector to support Checkbox and Switch input types in DaVinci forms. [SDKS-4919]

  • Added ReadOnlyTextCollector for DaVinci forms to support Terms of Service and agreement displays. [SDKS-4927]

  • Added support for links in Translatable Rich Text (Forms). [SDKS-4246]

  • Added support for phone number extensions in PhoneNumberCollector. [SDKS-4669]

Fixed

  • Fixed OATH and Push URI parsers to propagate typed InvalidUriException for structural URI parse errors. [SDKS-5074]

  • Fixed Ktor CIO engine dropping repeated Set-Cookie headers with mixed casing (KTOR-8614 workaround). [SDKS-4742]

  • Fixed Push Number Challenge not surfacing a distinct failure for wrong-number responses. [SDKS-5116]

  • Fixed PasswordCollector not handling nested Password policies. [SDKS-4694]

Orchestration SDK for React Native 1.0.0

June 29, 2026 major

Key features

Orchestration SDK for Android 2.0.1

June 1, 2026 patch

Fixed

  • Upgraded bcpkix-jdk18on from 1.81 to 1.84 to address a security vulnerability (CVE-2026-5588).

Orchestration SDK for Android 2.0.0

April 15, 2026 major

Key features

Added

  • Added new network module. [SDKS-4505]

  • Added new mfa-commons module. [SDKS-4106]

  • Added new auth-migration module. [SDKS-4716]

  • Added new device-binding-migration modules. [SDKS-4115]

  • Added new device-id module. [SDKS-4120]

  • Added new device-root module. [SDKS-4365]

Orchestration SDK for iOS 2.0.0

April 15, 2026 major

Key features

Added

  • Added new PingNetwork module. [SDKS-4496]

  • Added new PingDeviceId module. [SDKS-4122]

  • Added new PingTamperDetector module. [SDKS-4366]

  • Added new PingJourneyPlugin and PingDavinciPlugin modules. [SDKS-4492]

  • Added new PingCommons module. [SDKS-4104]

  • Added support for core callbacks in the PingJourney module. [SDKS-4060]

  • Added support for native social login to Facebook, Google, and Apple in Advanced Identity Cloud and PingAM journeys. [SDKS-3898]

  • Added migration mechanism for existing device binding data from the ForgeRock SDK to the Orchestration SDK for iOS. [SDKS-4495]

Fixes

  • Updated PingStorage module to allow multiple DaVinci/Journey instances to have separate cookies, sessions, and token storage. [SDKS-4588]

Orchestration SDK for JavaScript 2.0.0

April 15, 2026 major

Key features

Added

  • Added well-known OIDC endpoint discovery support.

    The journey client can now fetch configuration from the .well-known/openid-configuration endpoint. The realm path is automatically inferred from the well-known issuer URL.

    Learn more in Configuring the Journey module in JavaScript.

Fixed

  • Fixed error handling in the storage client and davinci-client.

    • Added isGenericError type guard to sdk-utilities for runtime error validation.

    • Fixed storage client to properly catch errors from custom storage implementations, honoring the errors-as-values contract.

    • Improved davinci-client error handling to use explicit error checks instead of try-catch.