--- title: Release notes description: Release notes for Ping CLI, including new features, enhancements, and resolved issues for each release. component: pingcli version: 1.4 page_id: pingcli:release_notes:pingcli_release_notes canonical_url: https://developer.pingidentity.com/pingcli/1.4/release_notes/pingcli_release_notes.html llms_txt: https://developer.pingidentity.com/pingcli/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md revdate: August 11, 2026 section_ids: ping-cli-1-4-0-august-3-2026: Ping CLI 1.4.0 (August 3, 2026) pingfederate: PingFederate pingone: PingOne davinci: DaVinci pingone-credentials: PingOne Credentials pingone-mfa: PingOne MFA pingone-verify: PingOne Verify ping-cli-1-3-0-july-20-2026: Ping CLI 1.3.0 (July 20, 2026) general: General pingfederate-2: PingFederate pingone-2: PingOne ping-cli-1-2-0-july-6-2026: Ping CLI 1.2.0 (July 6, 2026) general-2: General pingfederate-3: PingFederate pingone-3: PingOne davinci-2: DaVinci pingone-authorize: PingOne Authorize pingone-protect: PingOne Protect ping-cli-1-1-0-june-22-2026: Ping CLI 1.1.0 (June 22, 2026) general-3: General prevrel: Previous releases --- # Release notes Release notes for Ping CLI, including new features, enhancements, and resolved issues for each release. Subscribe to get automatic updates: [icon: rss-square, set=fa][Ping CLI release notes RSS feed](pingcli_release_notes.xml) ## Ping CLI 1.4.0 (August 3, 2026) ### PingFederate New Added management commands for the following resources: * administrative API CORS settings * audit log settings * authentication policies settings * bulk configuration export * bulk configuration import * CA certificates * CAPTCHA provider settings * CAPTCHA providers * certificate group certificates * cluster settings * config store settings * log settings * OAuth access token manager settings * OAuth access token managers * OAuth authorization detail types * OAuth virtual issuers * signing key pairs * SP adapters * SP connections, including credentials certificates, decryption keys, and signing settings * SP IdP connections, including certificates, decryption keys, and signing settings * SSL client key pairs Improved * Added read-only commands for captcha provider descriptors * Added import, export, CSR, and rotation settings management commands for signing key pairs ### PingOne New Added management commands for the following resources: * Authorize application resources * bill of materials * branding settings * certificates * credential type versions * forms * gateway role assignments * language localization status * notifications settings phone delivery settings * notifications settings SMTP email delivery configuration * organizations, license names, and license active identity counts * population default identity provider * resource attributes * resource client secrets * trusted email addresses * user enabled status Improved * Added read commands for flow policies * Updated polymorphic resources like applications to accept the same JSON shape as that returned by the API from GET calls, rather than a shape that is custom to the CLI. The prior template shape is deprecated. The template command for these resources now supports a --template-type flag to retrieve a template for the desired type (for example: oidc, saml, etc. for applications). If not provided, --template-type will be set to a default for the resource (oidc for applications). ### DaVinci New Added management commands for the following resources: * flow versions Improved * Added `enable` and `disable` action commands for flows * Added clone action for connector instances * Added DaVinci flow-policy/flow-policy-events list command ### PingOne Credentials Improved * Added CLI flags for common request body fields ### PingOne MFA Improved * Added `send-logs` and `update-nickname` action commands to `mfa user-devices` ### PingOne Verify Improved * Added CLI flags for common request body fields [View release on GitHub](https://github.com/pingidentity/pingcli/releases/tag/v1.4.0) ## Ping CLI 1.3.0 (July 20, 2026) ### General Info * Removed the --template output flag and its custom text/template rendering Fixed * Fix some API error detail not being returned by the CLI for PingOne Authorize and PingOne Verify endpoints. Improved * Add support for the `apply` command to all singleton resources as an alias for `replace`. Also add `apply` to the PingFederate data-stores and PingOne application-resource-permissions resources where it was missing. * Renamed several nested subcommands to drop the redundant parent prefix (for example, `group group-nestings` is now `group nestings`, `verify verify-policies` is now `verify policies`, etc), while keeping the previous names available as aliases ### PingFederate New Added management commands for the following resources: * authentication policy fragments * federation info * OAuth client registration policies * OAuth client settings * OAuth/OpenID Connect policies * OAuth/OpenID Connect settings * session quotas * session settings ### PingOne New Added management commands for the following resources: * alert channels * credential issuance rule usage counts and usage details * email domains * identity propagation plans * images * integrations * rate limit IP configurations * reCAPTCHA v2 configuration Improved * Added `gateways gateway-credentials get` command to read a single gateway credential * Added a list command for resource application permissions * Added notifications-settings management commands * Added pingone applications attribute-mappings management commands * Failing paged export read operations now attach the HTTP response so `--debug` renders the response body and JSON error output reports the failing request's status and request ID [View release on GitHub](https://github.com/pingidentity/pingcli/releases/tag/v1.3.0) ## Ping CLI 1.2.0 (July 6, 2026) ### General New * Added `credential-issuer-profile` resource to the PingOne Credentials connector, supporting `get`, `replace`, and `template` commands New | | | | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | * PingOne and PingFederate: Refresh the access token when authentication credentials change so a cached token issued for previous credentials is no longer reused | Fixed * auth: Added a connector section header to each `auth status` block so statuses for multiple services are clearly distinguishable * Fixed template command example text for replace-only resources to show `replace --from-file` instead of `create --from-file` Improved * Updated output schema reference generator with editorial fixes and subfolder restructure ### PingFederate New Added management commands for the following resources: * administrative accounts * authentication API applications * authentication API settings * data stores * extended properties * IdP adapters * local identity profiles * OAuth clients * password credential validators * server settings * virtual host names Info * Removed the `--pingfederate-*` and `--as-pingfederate-*` authentication CLI flags (such as `--pingfederate-client-id`); configure PingFederate authentication via environment variables, the configuration file, or the init wizard instead * The `accessTokenAuth` authentication type is deprecated and will be removed in a future release; use the `basicAuth` or `oauth` authentication type instead Improved * Added management command for version ### PingOne New Added management commands for the following resources: * admin config * credential issuance rules * custom domains * FIDO2 policies * user digital wallets Fixed * Fixed the `--template` flag on `pingone api` so template field traversal works against JSON response data ### DaVinci Fixed * Fixed template for application resources to correctly omit server-set read-only fields (`apiKey.value`, `oauth.clientSecret`) that were previously included in the generated template skeleton ### PingOne Authorize New Added management commands for the following resources: * decision endpoints ### PingOne Protect New Added management commands for the following resources: * risk policy sets [View release on GitHub](https://github.com/pingidentity/pingcli/releases/tag/v1.2.0) ## Ping CLI 1.1.0 (June 22, 2026) ### General Fixed * Both `PINGCLI_PINGONE_*` and bare `PINGONE_*` environment variable names are now fully supported (e.g. both `PINGCLI_PINGONE_ENVIRONMENT_ID` and `PINGONE_ENVIRONMENT_ID` resolve), fixing a silent breaking change for pipelines using the pre-v1 names. `PINGCLI_LOGIN_STORAGE_TYPE` is honoured alongside `PINGCLI_AUTH_STORAGE_TYPE`. * Config migration now correctly relocates PingFederate `clientCredentialsAuth` credentials (client ID, client secret, token URL, scopes) to the canonical `oauth.clientCredentials.*` keys and removes the legacy subtree, including for configs written all-lowercase by older (v0.8.x) Ping CLI versions, which were previously left untouched. * Config migration now preserves PingOne authentication values written by older (v0.8.x) Ping CLI versions: the legacy `service.pingone.*` worker layout (worker client credentials, `regioncode`, `type: worker`) is migrated to the current `service.pingOne.*` schema instead of being silently dropped, with `regioncode` translated to the equivalent `endpoint.rootDomain`. The PingOne environment ID and authorization-code `redirectUri` path/port are also relocated to their canonical keys rather than being lost. Improved * Config migration now removes the deprecated `export.*` configuration subtree, which is no longer persisted to the configuration file (the export command's settings are flag/environment-only). [View release on GitHub](https://github.com/pingidentity/pingcli/releases/tag/v1.1.0) ### Previous releases * [1.0](https://github.com/pingidentity/pingcli/releases/tag/v1.0.0) * [0.8](https://github.com/pingidentity/pingcli/releases/tag/v0.8.0)