Orchestration SDKs

Release Notes

Latest updates

Orchestration SDK for React Native 1.1.0

October 8, 2026 minor

Key features

  • DaVinci module for React Native.

    The first public release of the @ping-identity/rn-davinci module lets your React Native app run DaVinci flows end to end, with form rendering and submission.

    Learn more in Using the DaVinci module for React Native.

  • PingOne Protect fraud prevention in DaVinci flows.

    The new @ping-identity/rn-protect module collects behavioral data and sends Protect signals during DaVinci flows, so your React Native app can assess fraud risk.

    Learn more in Getting started with PingOne Protect on React Native.

  • External IdP (social sign-on) collectors in DaVinci flows.

    Authenticate with external identity providers such as Apple, Google, and Facebook directly from DaVinci flows in your React Native app.

    Learn more in Configure a React Native app for social sign-on.

  • FIDO and passkeys in DaVinci flows.

    Register and authenticate passkeys in DaVinci flows with the new FidoRegistrationCollector and FidoAuthenticationCollector.

    Learn more in Getting started with FIDO on React Native.

  • Device Authorization Grant in OIDC sign-on.

    Sign in on devices with limited input, such as smart TVs or set-top boxes, using the new createOidcDeviceClient and useDeviceAuthGrant APIs.

    Learn more in Authenticating devices with the Device Authorization Grant.

  • Pushed Authorization Request (PAR) in OIDC sign-on.

    Send OAuth 2.0 authorization parameters directly to the server before the redirect begins, keeping them out of the browser URL, through the new par client config option.

    Learn more in Securing OIDC sign-on with Pushed Authorization Requests.

Added

  • Added DaVinci BooleanCollector and ReadOnlyTextCollector support, plus auto-submit for collectors flagged auto-capable by the flow.

  • Added DaVinci polling and QRCode collectors so flows can wait on out-of-band status and display QR codes.

  • Added DaVinci phone number collector support for phone extension fields (extension, showExtension, extensionLabel).

  • Added DaVinci label collector support for richContent.

  • Added DaVinci password collector support for server-provided validation rules, structured password-policy validation errors (INVALID_LENGTH, UNIQUE_CHARACTER, MAX_REPEAT, MIN_CHARACTERS) with native constraint values, and a validate method for on-demand collector validation.

Updated

  • Improved the useJourneyForm hook with typed, normalized form fields for simpler Journey callback handling in @ping-identity/rn-journey.

  • Updated Journey ContinueNode to expose UI metadata, such as page header, description, submit button text, and page footer details.

  • Improved Expo compatibility with config plugin ownership.

  • Updated OATH typed errors to carry violated policy details, so callers can react without parsing message strings.

Fixed

  • SOCIAL_LOGIN_BUTTON no longer reported in unsupported fields when an IdP collector is present in @ping-identity/rn-davinci.

Orchestration SDK for JavaScript 2.3.0

September 25, 2026

Key features

PingOne Recognize

The Journey client now supports PingOne Recognize enrollment and authentication callbacks, providing privacy-preserving facial biometrics for enrollment and sign-in in authentication journeys.

Learn more in Integrating PingOne Recognize.

Enhancements

  • Enhanced WebAuthn.isConditionalMediationSupported to now accept an optional journey step. In addition to checking browser support, the method now also reports whether the server requested conditional mediation for that step, so the result reflects the journey’s configuration.

  • Custom storage configuration types are now exported from the OIDC client, so you can write strongly typed custom storage implementations in TypeScript.

Orchestration SDK for JavaScript 2.2.0

September 16, 2026

Enhancements

  • Added MetadataCollector support for DaVinci flows to support exchanging custom SDK metadata.

  • Added JSON client config helper re-exports from the respective client packages, so a single import can build a client configuration from the unified JSON config.

  • Added create-journey-step export so a Journey step is easy to deserialize after it has been serialized.

Breaking Changes

  • Changed the device client tokenStore configuration to accept a CustomStorageObject instead of the legacy TokenStoreObject.

    This is a breaking change for custom token-store implementations. Learn more in Incompatible changes.

Changes

  • Changed FIDO/WebAuthn DOMException handling in DaVinci flows to catch errors and send them to DaVinci instead of failing generically.

  • Removed the @forgerock/javascript-sdk dependency from device-client.

  • Fixed the HTTP header to send ping-sdk instead of forgerock-sdk.

Orchestration SDK for iOS 2.2.0

Enhancements

  • Added opt-in support for Facebook Limited Login in Advanced Identity Cloud and PingAM Journeys.

    Configure an OIDC Social Identity Provider with a name containing fb-limited to use the OIDC ID-token flow; existing provider names such as facebook continue to use classic access-token login. [SDKS-5161]

  • Added configurable Facebook Limited Login for DaVinci Custom HTML and PingOne Forms.

    Set facebookLimitedLoginEnabled on the Facebook collector to choose between the classic accessToken and Limited Login idToken payloads. [SDKS-5162]

Updated

  • Updated the Facebook iOS SDK dependency to 18.1.0. [SDKS-5160]

Orchestration SDK for iOS 2.1.1

September 4, 2026 patch

Updated

  • Updated RecaptchaEnterprise dependency to 18.9.1 for Xcode 27 and iOS 27 compatibility. [SDKS-5306]

Orchestration SDK for JavaScript 2.1.1

August 10, 2026 patch

Fixes

  • Fixed the OIDC client to always include prompt=none on background authorization calls, for both standard and PAR flows.

Orchestration SDK for iOS 2.1.0

July 22, 2026 minor

Key features

Enhancements

  • Added PollingCollector for DaVinci flows. [SDKS-4682]

  • Added QRCodeCollector for DaVinci flows. [SDKS-4680]

  • Added BooleanCollector to support Checkbox and Switch input types in DaVinci forms. [SDKS-4920]

  • Added ReadOnlyTextCollector for DaVinci forms. [SDKS-4928]

  • Added rich text and embedded link support to LabelCollector through new RichContent and RichContentReplacement types. [SDKS-4245]

  • Added support for phone number extensions in PhoneNumberCollector. [SDKS-4668]

  • Added PushError.pushNumberChallengeError to surface a distinct failure for Push Number Challenge responses. [SDKS-5115]

  • Added preferImmediatelyAvailableCredentials option to FIDO authentication to restrict the ceremony to locally-available credentials only, if they exist. [SDKS-5212]

  • Added AuthMigration module for migrating existing sessions from the legacy ForgeRock SDK. [SDKS-4773]

  • Added Page Node description, header, and footer support. [SDKS-4762]

Fixes

  • Fixed permanent authentication failure after iCloud device migration caused by a Secure Enclave key mismatch. [SDKS-5172]

  • Fixed PingFido WebAuthn registration ignoring the configured displayName during passkey creation. [SDKS-5211]

  • Fixed PasswordCollector not handling nested password policies. [SDKS-4695]

  • Fixed PIN verification during device binding registration. [SDKS-5015]

  • Fixed Protect collector being triggered multiple times within a flow. [SDKS-4769]

  • Fixed browser close and reset logic. [SDKS-4717]

  • Fixed device binding authenticators incorrectly reporting as supported on the simulator. [SDKS-4836]

  • Fixed DeviceBindingConfig device name defaulting to the user-assigned name instead of the device model. [SDKS-4850]

  • Fixed DefaultDeviceIdentifier to reuse the legacy device identifier when available. [SDKS-4630]

  • Fixed Swift build failures caused by a platform bump and missing canImport guards. [SDKS-4916]

  • Fixed FIDO ceremony logs not routing through the workflow logger. [SDKS-4924]

Orchestration SDK for JavaScript 2.1.0

July 8, 2026 minor

Key features

Enhancements

  • Added PollingCollector for DaVinci flows.

  • Added QrCodeCollector for DaVinci flows.

  • Added BooleanCollector and ValidatedBooleanCollector to support Checkbox input types in DaVinci forms.

  • Added ReadOnlyCollector rich content support for links in Translatable Rich Text (Forms).

  • Added PhoneNumberExtensionCollector for phone number fields that include an extension.

  • Added ValidatedPasswordCollector for password fields with embedded policy validation.

  • Added ImageCollector for IMAGE form fields in DaVinci forms.

  • Added subscribe method to journey and OIDC client instances.

  • Added WebAuthn conditional mediation (passkey autofill) support.

  • Added user.session() method for silent OIDC session verification (prompt=none).

  • Updated rich-text support of the ReadOnlyCollector to handle links in Translatable Rich Text (Forms).

Fixes

  • Fixed RTK Query cache lookups in cache.getLatestResponse() and cache.getResponseWithId().

  • Fixed resume() to correctly forward redirect query parameters from the authorization response.

  • Fixed JourneyLoginFailure not being returned when the server sends a login failure response.

Orchestration SDK for Android 2.1.0

July 7, 2026 minor

Key features

Enhancements

  • Added PollingCollector for DaVinci flows. [SDKS-4681]

  • Added QrCodeCollector for DaVinci flows. [SDKS-4679]

  • Added BooleanCollector to support Checkbox and Switch input types in DaVinci forms. [SDKS-4919]

  • Added ReadOnlyTextCollector for DaVinci forms to support Terms of Service and agreement displays. [SDKS-4927]

  • Added support for links in Translatable Rich Text (Forms). [SDKS-4246]

  • Added support for phone number extensions in PhoneNumberCollector. [SDKS-4669]

Fixes

  • Fixed OATH and Push URI parsers to propagate typed InvalidUriException for structural URI parse errors. [SDKS-5074]

  • Fixed Ktor CIO engine dropping repeated Set-Cookie headers with mixed casing (KTOR-8614 workaround). [SDKS-4742]

  • Fixed Push Number Challenge not surfacing a distinct failure for wrong-number responses. [SDKS-5116]

  • Fixed PasswordCollector not handling nested Password policies. [SDKS-4694]

Orchestration SDK for React Native 1.0.0

June 29, 2026 major

Key features

Orchestration SDK for Android 2.0.1

June 1, 2026 patch

Fixes

  • Upgraded bcpkix-jdk18on from 1.81 to 1.84 to address a security vulnerability (CVE-2026-5588).

Orchestration SDK for Android 2.0.0

April 15, 2026 major

Key features

Enhancements

  • Added new network module. [SDKS-4505]

  • Added new mfa-commons module. [SDKS-4106]

  • Added new auth-migration module. [SDKS-4716]

  • Added new device-binding-migration modules. [SDKS-4115]

  • Added new device-id module. [SDKS-4120]

  • Added new device-root module. [SDKS-4365]

Orchestration SDK for iOS 2.0.0

April 15, 2026 major

Key features

Enhancements

  • Added new PingNetwork module. [SDKS-4496]

  • Added new PingDeviceId module. [SDKS-4122]

  • Added new PingTamperDetector module. [SDKS-4366]

  • Added new PingJourneyPlugin and PingDavinciPlugin modules. [SDKS-4492]

  • Added new PingCommons module. [SDKS-4104]

  • Added support for core callbacks in the PingJourney module. [SDKS-4060]

  • Added support for native social login to Facebook, Google, and Apple in Advanced Identity Cloud and PingAM journeys. [SDKS-3898]

  • Added migration mechanism for existing device binding data from the ForgeRock SDK to the Orchestration SDK for iOS. [SDKS-4495]

Fixes

  • Updated PingStorage module to allow multiple DaVinci/Journey instances to have separate cookies, sessions, and token storage. [SDKS-4588]

Orchestration SDK for JavaScript 2.0.0

April 15, 2026 major

Key features

Enhancements

  • Added well-known OIDC endpoint discovery support.

    The journey client can now fetch configuration from the .well-known/openid-configuration endpoint. The realm path is automatically inferred from the well-known issuer URL.

    Learn more in Configuring the Journey module in JavaScript.

Fixes

  • Fixed error handling in the storage client and davinci-client.

    • Added isGenericError type guard to sdk-utilities for runtime error validation.

    • Fixed storage client to properly catch errors from custom storage implementations, honoring the errors-as-values contract.

    • Improved davinci-client error handling to use explicit error checks instead of try-catch.

DaVinci client for Android 1.3.0

November 28, 2025 minor

Enhancements

  • Added support for PingOne Protect, by using the new PingProtect module. [SDKS-4069]

    Learn more in Evaluating risk with PingOne Protect.

  • Added support for Android 16 and updated compileSdk to version 36 and minSdk to 29. [SDKS-4278]

Fixes

  • Enhanced form handling in the DaVinci SDK to automatically reset form values after submission. [SDKS-4511]

  • Improved SDK storage configuration to simplify overrides. [SDKS-4109]

  • Enhanced Storage module with cache strategy support. [SDKS-4112]

  • Refactored logger initialization for session and cookie configurations. [SDKS-4358]

  • Updated PhoneNumberCollector to support new JSON format. [SDKS-4198]

  • Upgraded datastore library to version 1.1.7. [SDKS-4207]

DaVinci client for JavaScript 1.3.0

November 25, 2025 minor

Enhancements

DaVinci client for iOS 1.3.1

November 25, 2025 patch

Updated

  • Updated all targets to use the Swift 6 compiler. [SDKS-4499]

Fixes

  • Fixed an issue in the PingProtect module causing a crash on iOS 17+ due to an incorrect actor executor assumption. [SDKS-4494]

DaVinci client for iOS 1.3.0

October 23, 2025 minor

Enhancements

Updated

  • Updated to handle the country code format in the PhoneNumber collector. [SDKS-4199]

  • Redesigned and improved the PingExample app. [SDKS-4104]

DaVinci client for Android 1.2.0

July 8, 2025 minor

Enhancements

  • Added support for native social login with Google and Facebook. [SDKS-3449]

  • Added support for PingOne Forms one-time passcode (MFA) components DEVICE_REGISTRATION, DEVICE_AUTHENTICATION, and PHONE_NUMBER. [SDKS-3562]

  • Added access to the previous ContinueNode node from an ErrorNode. [SDKS-3890]

  • Added access to the key attribute of LabelCollector. [SDKS-3957]

  • Added support for StrongBox when generating keys. [SDKS-4098]

DaVinci client for iOS 1.2.0

July 8, 2025 minor

Enhancements

  • Added support for native social login with Apple, Google, and Facebook. [SDKS-3450]

  • Added support for PingOne Forms one-time passcode (MFA) components DEVICE_REGISTRATION, DEVICE_AUTHENTICATION, and PHONE_NUMBER. [SDKS-3563]

  • Added access to the previous ContinueNode node from an ErrorNode. [SDKS-3891]

  • Added access to the key attribute of LabelCollector. [SDKS-3956]

Fixes

  • Resolved an issue where cookies were incorrectly cleared from in-memory storage when requests contain a Set-Cookie header [SDKS-4189]

Changes

  • Renamed the PingExternal-idp module to PingExternalIdP. [SDKS-3958]

    You must update the module name in your code if you are using the previous module name and upgrade to DaVinci client for iOS 1.2.0.

DaVinci client for JavaScript 1.2.0

July 8, 2025 minor

Enhancements

  • Added support for PingOne Forms one-time passcode (MFA) components DEVICE_REGISTRATION, DEVICE_AUTHENTICATION, and PHONE_NUMBER.

DaVinci client for Android 1.1.0

April 17, 2025 minor

Enhancements

  • Added support for additional PingOne Form fields. [SDKS-3649]

    • Label

    • Checkbox

    • Dropdown

    • Combobox

    • Radio list

    • Flow link

  • Added an external-idp module to support social sign on with supported external IDPs by using browser redirects. [SDKS-3662]

    Supported external IDPs:

    • Apple

    • Facebook

    • Google

  • Added Accept-Language header to support localization. [SDKS-3622]

  • Added ability to validate PingOne Form fields. [SDKS-3649]

  • Added support for default values in PingOne Form fields. [SDKS-3649]

  • Added an interface to access ErrorNode and validation errors. [SDKS-3649]

  • Added a browser module. [SDKS-3662]

  • Added dynamic environment switching in the test sample app. [SDKS-3642]

Fixes

  • Fixed an issue affecting the global logger when configuring a logger in DaVinci client configuration. [SDKS-3616]

DaVinci client for iOS 1.1.0

April 17, 2025 minor

Enhancements

  • Added support for additional PingOne Form fields. [SDKS-3671, SDKS-3672]

    • Label

    • Checkbox

    • Dropdown

    • Combobox

    • Radio list

    • Flow link

  • Added an external-idp module to support social sign on with supported external IDPs by using browser redirects. [SDKS-3720, SDKS-3920]

    Supported external IDPs:

    • Apple

    • Facebook

    • Google

  • Added Accept-Language header to support localization. [SDKS-3623]

  • Added ability to validate PingOne Form fields. [SDKS-3671, SDKS-3672]

  • Added support for default values in PingOne Form fields. [SDKS-3674]

  • Added a PingBrowser module. [SDKS-3920]

  • Added Swift 6 support. [SDKS-3728]

DaVinci client for JavaScript 1.1.0

April 17, 2025 minor

Enhancements

  • Added support for additional PingOne Form fields.

    • Label

    • Checkbox

    • Dropdown

    • Combobox

    • Radio list

    • Flow link

  • Added support for social sign on with supported external IDPs.

    Supported external IDPs:

    • Apple

    • Facebook

    • Google

  • Added the ability to call start with query parameters which the DaVinci client appends to the /authorize call.

  • Added request middleware to amend outgoing HTTP requests, for example to override Accept-Language headers.

  • Added ability to validate PingOne Form fields.

  • Added support for default values in PingOne Form fields.

Updated

  • Updated dependency on @forgerock/javascript-sdk to 4.7.0.

  • Updated error node to now be submittable to help the app recover from an error state.

  • Updated the checks to determine what node state the DaVinci Client is in based on the response from PingOne.

DaVinci client 1.0.0

December 16, 2024 major

Enhancements

  • Initial release of the DaVinci client for Android.

DaVinci client 1.0.0

December 16, 2024 major

Enhancements

  • Initial release of the DaVinci client for iOS.

DaVinci client 1.0.0

December 16, 2024 major

Enhancements

  • Initial release of the DaVinci client JavaScript.