Scalefusion June 24th, 2025 Release Notes

Version Information:

• Dashboard: v59.01.0

• Scalefusion Windows MDM Agent: v15.16.0

• Scalefusion Linux MDM Agent: v3.1.0

• Scalefusion ProSurf iOS Browser: v1.7.0

Release Notes:

Windows

Keycard Enhancements

1. Secure Offline or Local Account Login with 2FA

   IT Admins can now enforce Two-Factor Authentication (2FA) for offline logins or logins using local accounts via Keycard. This requires:

   1. Keycard to be deployed on managed devices.

   2. The OTP enforcement setting to be enabled in Keycard settings.

   Supported OTP Methods:

   1. Third-party authenticator apps

   2. Scalefusion Authenticator on another managed device

2. Support for PIN, Biometrics, and Picture Password: Keycard now supports login via:

   1. Windows Hello PIN

   2. Biometrics

   3. Picture Password

   Users must pre-configure these options in their Windows settings to use them for login.

3. Password Change Behavior Enhancements: Admins can now configure how password changes affect biometric settings:

   1. Save User Password (Recommended): Retains biometric settings during password changes.

   2. If Disabled: Users will need to enter the old password every time the password changes.

   3. Force Login Option: Forces re-authentication, causing loss of biometric settings after each password reset.

Enhanced User Interface for MDM Agent

The MDM agent interface has been redesigned with modern UI elements and improved user flows for a smoother experience.

iOS ProSurf

1. Block Copy/Paste: Admins can now block copy/paste to and from the ProSurf browser, enhancing data loss prevention—especially between ProSurf and other managed apps.

2. Safari 16.0 User-Agent Support: ProSurf now uses a Safari 16.0-based User-Agent, ensuring better compatibility with modern websites and native app scheme launches.

I/O Device Access Control Enhancements for Linux

1. USB Access Restrictions: Admins can define access policies for USB devices based on:

   1. Time of day

   2. Day of the week

   3. IP address

2. Extended USB Peripheral Reporting: The USB peripheral report for Linux now includes all USB devices connected to Linux endpoints.

MultiDirectory User Handling

1. Support for Multiple Directories: OneIdP now supports user creation across multiple directories (e.g., Microsoft and Google) when SSO and user management are enabled. This is ideal for environments where users exist in more than one identity provider.

Team:

• Team Scalefusion