Release notes Digital Access component 6.14.1

Release date: 2026-09-30

For installations using docker-compose (that is, not Swarm or Podman), please contact support for instructions on how to proceed with this upgrade.

Database backup recommended before upgrade:
This release introduces schema changes (OAuth 2.0 JWT access-token support and widened id_token columns for ML-DSA-signed tokens).

Also, if upgrading from a version below 6.13.0, password hashing will be carried out which also strongly suggests database backup of the databases. Rollback requires restoring the pre-upgrade database state.

Oracle-specific note:
id_token column widening is performed by dropping/recreating the column (Oracle does not support in-place conversion for this case). Existing id_token values are intentionally not preserved. These values are short-lived/single-use, so practical impact is limited to users mid-login during upgrade.

TLS protocol changes:
TLS 1.0/1.1 options were removed from Access Point inbound TLS configuration and admin UI. Existing TLS 1.0/1.1 settings are removed on upgrade. Validate legacy-client compatibility before enforcing quantum-safe TLS posture.

Corrected bugs/improvements

Jira ticket number	Description
DA-2896	Third-party library updates Third-party libraries and the base container images bundled with the product have been updated to address vulnerabilities reported in those components. The reported vulnerabilities do not affect the product directly. No configuration changes are required.
DA-2898	OpenID Federation Relying Party token exchange Fixed the token exchange when Digital Access acts as a Relying Party in an OpenID Federation. Digital Access now always authenticates to the OpenID Provider with a signed client assertion (private_key_jwt), and verification of the federation trust chain handles providers that publish several keys. Existing OpenID Connect authentication methods that use a client secret are not affected.
DA-2954	Reporting database fixes Fixes to the reporting database have been carried out.

Last updated: October 01, 2026