> ## Documentation Index > Fetch the complete documentation index at: https://docs.truu.ai/llms.txt > Use this file to discover all available pages before exploring further. # Frontline Access 26.3.0 Release Notes > We are pleased to announce the release of the TruU Frontline Access version 26.3.0. Please review this document in its entirety for details about the release, including known issues. **Date: November 10, 2026** ## Highlights * Passkey SSO That Follows the User Between Workstations * Continuous Presence Detection * Sign-In Follows User * Network-Based Conditional Access for SSO * Credential Provider Filtering * Updates Managed from the Admin Console * Faster, More Reliable Sign-In Window * Bug Fixes *** ## Enhancements ### Passkey SSO That Follows the User Between Workstations * Users can now authenticate to Entra-protected SSO applications with a passkey from any shared workstation they sign in to. At sign-in, the workstation retrieves the user's existing FIDO2 credential or provisions one if they don't have one yet, and the private key never leaves the workstation in plaintext. Signing in at a second workstation reuses the same credential, so only one security key appears in Entra. Administrators can turn the capability on or off with a policy setting. ### Continuous Presence Detection * Shared workstations can now use the camera to detect whether the signed-in user is still in front of the machine, and lock the session or sign the user out when they walk away. Administrators choose between three modes: off, report-only for measuring accuracy before it affects anyone, and enforce. In warn-then-lock scenarios, users see a countdown before the session locks and can cancel it simply by returning. If no camera is available or the camera cannot be opened, the workstation behaves as if the feature were off and no one is locked out because of it. ### Presence Activity in the Admin Console * Presence detection now reports to the platform. The console records when a workstation decides the user has left or returned, and when a session was locked or the user signed out for that reason. Each workstation also reports which mode it is running in once per service start. Workstations with presence detection off report nothing. ### Sign-In Follows User * When a user signs in at one shared workstation, their session on another workstation on the same network can now be locked or signed out automatically, so accounts aren't left open on machines nobody is using. Administrators choose whether the remote session is locked, preserving unsaved work, or fully signed out. The broadcast is signed and protected against replay, and the user's identity is not sent in the clear. The feature is off by default and is enabled per deployment. ### Network-Based Conditional Access for SSO * Frontline Access now shares device and network context with the platform during SSO, so conditional access policies can be evaluated against where the workstation actually is. The workstation reports its asset identity, the signed-in user, and its active networks, and the platform applies the matching workstation or application policy. SSO port assignments are now picked up from the platform and applied without waiting for a restart. ### Credential Provider Filtering * Administrators can now restrict which Windows credential providers appear at sign-in, during RDP, and at UAC prompts, so users get a consistent sign-in experience even on machines with other authentication software installed. Separate allow lists are kept for each of the three contexts, and they can be changed after installation. If no list is configured, nothing is filtered. ### Updates Managed from the Admin Console * Frontline Access can now be updated from the Admin Console through the Updater Service, which is installed along with the product and keeps itself up to date. Update notifications and deadlines work the same way they do for the Windows Authenticator. ### Faster, More Reliable Sign-In Window * The sign-in window now appears as soon as the Frontline Access tile is selected, rather than waiting on a separate detection step, and it steps out of the way when Windows shows one of its own screens. If the window has not appeared after a few seconds, a "Sign-in not appearing? Click here" link is shown on the tile. Resources are now released each time the window closes, so the prompt still appears within a couple of seconds after repeated lock, unlock, and wake cycles. ### More Resilient Sign-In Screen * The sign-in interface now runs outside the Windows logon process. Upgrading a locked machine no longer leaves a black screen with no sign-in interface until the next Ctrl+Alt+Del, and other software on the machine can no longer prevent the Frontline Access sign-in screen from loading. *** ## Bug Fixes * Fixed an issue where SSO and certificate-based authentication sessions failed after the device context was delivered, caused by a missing expiry value in the context sent to the platform. * Fixed an issue where the presence engine was restarted immediately and continuously when it failed to start, generating thousands of restart attempts until the session ended. * Fixed an issue where the sign-in screen could crash or fail to show the Frontline Access window when a user switched between credential provider tiles, particularly while an error message was displayed. * Fixed an issue where a sign-in or unlock in progress could fail because the agent crashed inside the Windows smart card subsystem during rapid, repeated sign-ins. * Fixed an issue where the update notification read "TruU Authenticator Update Available" instead of naming Frontline Access. * Fixed an issue where an update with a passed deadline did not begin installing until the user clicked OK on the notification. * Fixed an issue where the update notification offered "Later" and "Install Now" the first time it appeared after the deadline had already passed, instead of installing automatically. * Fixed an issue where an installation directive for a version equal to or older than the installed one was reported as a successful installation instead of explaining that nothing needed to be installed. * Fixed an issue where the Updater Service did not create its working folder on installation and could not fetch updates until the service was restarted. * Fixed an issue where Frontline Access was intermittently missing from the Control Panel program list after an update and a restart. * Fixed an issue where uninstalling Frontline Access left behind browser certificate-selection policies, which prevented certificate prompts from appearing in Chrome and Edge for software installed afterward. * Fixed a layout issue where the update notification buttons were misaligned when Windows was set to Malay. * Fixed an issue where a failed sign-in event in the Admin Console included a raw status code with no actionable meaning alongside the error detail. * Fixed an issue where a partial log file was written to the root of the C: drive in addition to the expected log folder. * Fixed an issue where log archives created before an upgrade were never pruned, leaving stale archive files on long-lived machines. * Fixed an issue where a proxy block page returned instead of configuration data was logged in full on every retry, obscuring the fact that the request had been blocked. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.