MobileID release notes

We have added new functionality to the Signicat Dashboard that allows you to exclude specific devices from MobileID risk evaluations.

We have added the possibility to manage your end-to-end encryption (E2E) keys directly in the Signicat Dashboard.

We have extended MobileID device hash management with new endpoints in the ReuseID API and added new blocking functionality in the Signicat Dashboard.

We have changed the default hardware-protected key validation strategy for the Admin API from REQUIRED_IF_SUPPORTED to REQUIRED.

We have updated the MobileID, ReuseID, and Admin APIs with new device hash management features and device state event generation parameters.

We have added support for the algorithm property to the Add E2E key endpoint in the Admin API.

We have added the possibility to configure the hardware-protected key validation strategy in the Signicat Dashboard.

We have added more options for configuring the hardware-protected key validation strategy in the Admin API.

We have added the possibility to configure the lock scope following failed authentication attempts in the Signicat Dashboard.

We have extended the Admin API with a new resource for Risk indicators configuration, allowing you to retrieve and update your account's risk indicators configuration.

We have added the ability to identify and prevent fraud by reviewing or locking flagged device hashes directly in the Signicat Dashboard.

We have extended the scope of transaction statistics on the MobileID Overview page in the Signicat Dashboard to include device statistics for ReuseID customers and for eID and Wallet Hub customers.

We have extended the Admin API with a new resource for Statistics, allowing you to retrieve data about devices, users, and device hashes, as well as review or lock flagged device hashes.

We have added detailed device statistics in the Signicat Dashboard for your active MobileID devices, including distribution by SDK version, platform, OS version, manufacturer, and model.

We have now completely removed the MobileID passport scan feature.

We have extended the set of device risk attributes that can be collected during a transaction. These attributes give you a deeper insight into the state of the device at the time of use.

We have standardised the naming scheme for the cloud backup recovery method, improved concurrency for device requests, and refactored audit event types.

We have deprecated the Get proofings for user endpoint for the User resource in the MobileID API.

We have removed the Get full final result of the passport scan endpoint for the Passport scan resource in the MobileID API.

The MobileID Passport scan feature that was previously deprecated will be completely removed on 01.11.2025.

We have improved our Account recovery feature by adding support for server-side face authentication, making it more user-friendly and secure.

We have removed the lockReason attribute from the device object in the MobileID API.

We have removed the character set limitations for the device name, allowing for the use of any letters, digits, or special characters.

We have removed the obsolete risk attribute isUnknownSourcesEnabled from the MobileID API, Admin API, and Signicat Dashboard.

We have added a button to the Details page in the Signicat Dashboard that allows you to quickly configure the Authenticator App for your account with a QR code.

We have added functionality in the Signicat Dashboard to try out MobileID directly, including app installation, configurations, and user authentications.

We have added functionality in the Signicat Dashboard to test out MobileID as an eID with the Authorization Code Flow.

We have simplified how you configure the Face authentication feature for MobileID in the Signicat Dashboard.

The Admin API has been extended with a new resource for End-to-end (E2E) keys.

The signature request parameter signedJwtCertificateOption now no longer supports the values SINGLE or CHAIN in the MobileID API.

You can now access MobileID features using the OpenID Connect (OIDC) protocol with the Authorization Code Flow.

The new Face authentication feature introduces a new authentication method that uses server-side biometrics.

The MobileID Passport scan feature is now deprecated, and is replaced by our ReuseID solution.

We have added a new MobileID event which you can subscribe to, called account-recovery.state.change.

Risk data is now also returned when the operation completes with an error status or is expired.

The MobileID API has been extended with a new resource for Account recovery.

We have also added a new MobileID event which you can subscribe to, called device.state.change.

MobileID is updated with transaction statistics in the Signicat Dashboard, allowing you to view and visualise key statistics for your MobileID account.

We have extended the operationProperties of registration, authentication and signature requests with a new field called requestedUserAttributes.

We have added a new claim called mobileid_user_segment, allowing you to segment end-users and corresponding transactions, as well as use it for statistics.

We have extended all requests and responses containing user data with a new field called segment to allow you to segment end-users and corresponding transactions.

The Accounts resource is extended with a new endpoint that allows you to change the state of your account.

We have implemented cleanup of inactive devices after a default of 365 days, and updated the minimum and default values for the activation code length.

We have updated MobileID with many new features in the Signicat Dashboard, allowing you to configure Account recovery, App attestation, Geofencing, and more!

The User resource has been updated to remove the previously deprecated Resolve external reference endpoint, which used the HTTP GET method.

The Device management resource has been extended with endpoints to manage geofencing settings.

Responses for successfully completed MobileID authentication and signature operations have also been extended with a new client data field.

MobileID is now available in the Signicat Dashboard. You can create accounts, view info, and manage certificates directly in the portal.

The new Geofencing feature enables you to strengthen security for transactions by evaluating the current location of a device against a list of allowed regions.

We now collect a set of default risk attributes for debugging purposes.

The Admin API has been extended with new resources for Application configuration and APNs tokens.

The User resource has been improved with a new POST endpoint to resolve the user ID based on an external reference, replacing the deprecated GET endpoint.

The User resource has been extended with a new endpoint that allows you to get device transactions for all of the end-user's devices.

The Device Management resource has been extended with a new endpoint for retrieving device transactions. Device name length and character set validation has also been added.

The new Admin API allows you to manage and administer your MobileID account.

The new Passport scan feature allows you to validate the authenticity of an end-user's passport and collect passport attributes.