DigiCert ONE Platform

DigiCert accounts now support client certificate authentication as a form of two-factor authentication. When client certificate authentication is enabled as a 2FA method, the user will be redirected in the sign-in workflow to generate and install their client authentication certificate in their browser.

We fixed an issue where users signing in with SSO for the first time were not shown the Service Level Agreement (SLA) dialog after setting up OTP. Instead, they were redirected back to the login screen. This flow now works as expected.

We updated the Link your DigiCert services email template to clarify that action is only required if your account has more than one DigiCert service, based on user feedback.

We resolved an issue where some users saw a non-progressing spinner after entering their username and clicking Next, preventing them from reaching the password page.

Previously, changing your DigiCert ONE environment required manual edits to the config.json file. With version 1.1.0, you can now select your preferred production environment directly within the app interface. To select or change a production environment:

To change to a demo environment, you still need to update the config file, refer to Switch your environment for more information.

In earlier versions, an Account Manager user role was necessary to access account details, licensing information, and user permissions. With version 1.1.0, this requirement has been removed.

Depending on your DigiCert ONE services, you only need one or more of the following:

When you sign in to your account using SSO with OIDC, if your Identity Provider (IdP) enforces two-factor authentication (2FA), DigiCert now recognizes the 2FA confirmation from your IdP. This prevents DigiCert from prompting for 2FA again, even if it is enabled on your account. This behavior is also recorded in the audit logs.

The Update user API now returns the services assigned to a user, enabling updates to both user details and service assignments.

To provide more granular control, the following new permissions have been added to Document Trust Manager:

The system now correctly blocks the creation of users with duplicate usernames.

We resolved an issue where clicking Create user caused the system to hang and allow the user to click the button multiple times, creating duplicate user accounts.

We fixed a bug that prevented account migration when a user's first or last name contained Japanese characters.

We adjusted font sizes across the interface for a more consistent user experience.

We have improved translations across the platform. This includes updated text on pages where Applied filter and Clear all appear at the top of tables, along with other minor translation corrections to enhance consistency and clarity.

We resolved an issue where an organization with multiple accounts could only add a company domain for the Onboard user via SSO flow to one account. The same domain can now be added to multiple accounts within the same organization.

We have improved translations across the platform. This includes updated text on pages where Applied filter and Clear all appear at the top of tables, along with other minor translation corrections to enhance consistency and clarity.

We refreshed the DigiCert account interface to improve usability and workflow efficiency. Instead of navigating away, a contextual side rail (drawer) will open on the right-hand side when you:

To enhance your support experience, DigiCert support agents can now:

As an account admin, you now have greater control and visibility. You can:

As an account user, you can now better understand and manage your account. You can:

Resolved an issue where CertCentral transitioned to a DigiCert​​®​​ account and then purchased DigiCert​​®​​ KeyLocker were incorrectly prompted to enter their DigiCert ONE password to access DigiCert​​®​​ KeyLocker. Since the accounts are linked, this prompt should not have appeared.

Fixed a bug where users who signed in using methods other than username/password and 2FA (e.g., SSO) were locked out after entering an incorrect OTP five times. Admins were not shown the option to unlock these users. This option is now visible and functional.

Fixed an issue where users signing in with SSO (OIDC) and 2FA were redirected to the DigiCert ONE sign-in page after their 2FA was reset and they clicked the link in the email. These users will now be correctly redirected to the 2FA setup page after completing IDP authentication.

Resolved an issue where users received a federatedAccountError when admins tried to change the user role of an account-scope user assigned to multiple accounts, where at least one account had been transitioned to a DigiCert account.

DigiCert​​®​​ account improved two-factor authentication (2FA) by adding support for one-time passcodes (OTP) via email. Previously, you could only authenticate using an authenticator app. Now during sign-in, when 2FA is enabled, users can choose to receive an OTP through either an authenticator app or email to sign in.

DigiCert ONE now supports both POST and REDIRECT bindings, ensuring broader compatibility with different Identity Providers.

CA Manager:

Trust Lifecycle Manager:

Added the View SSP Portal Config permission.

Device Trust Manager:

Fixed an issue where the Allow user creation via SSO section was missing the field to add new domain names. The field now appears correctly.

Fixed an issue where searches failed when an organization name filter contained the special character "&" in the Users tab.