AuthControl Sentry® 4.3 is here

Version 4.3.0 (build 7415), released October 2026.

New release

Passkeys, OIDC, PINpad2 and more

This release brings FIDO2 passkey authentication, OpenID Connect applications in Sentry SSO, the new PINpad2 method and six supported languages, along with a new look and improvements to logging, provisioning and the Mobile App.

Request a demoRead the full release notes

Four highlights

Passkeys

Sentry now supports FIDO2 passkeys as an authentication method. Users add passkeys through the User Portal, either self-provisioned if enabled, or with a provision code sent by the helpdesk. Passkeys can also be managed through User Administration.

OIDC applications

Sentry SSO now supports the OpenID Connect (OIDC) protocol for authenticating to applications that support it. Administrators can control the acr and amr claims returned in the OIDC token, based on the authentication method used. Sentry validates the id_token_hint parameter from the application, which is a requirement for compatibility with Microsoft Entra ID.

PINpad2

A new and improved variant of our PINpad authentication method. PINs are no longer limited to the digits 0 to 9: icon-based PINs are available, with other character sets possible in future. The one-time code is built from a unique set of strings that changes every time, and a range of backgrounds lets you customise the login experience.

Language support

Sentry Core, SSO and the User Portal are now available in English, Japanese, Korean, Spanish, Portuguese and German. Web pages are localised and logs are written in the chosen language. In Sentry Core, logs are translated on the fly within the log viewer.

Everything else in 4.3

Branding

  • All the apps now use our new branding.
  • SSO and User Portal keep any customisation already applied.

Logging

  • The log viewer can search logs by various criteria, not just a text search.
  • Syslog support is improved, with more control over framing and format, and both JSON and XML layouts.
  • Sensitive information is masked within the log viewer.
  • Logs can be exported anonymised for troubleshooting.

Mobile App and OATH provisioning

  • OATH applications can be provisioned through the User Portal using QR codes, including otpauth format codes for third-party authenticators.
  • Users can be assigned OATH or Sentry tokens by group, rather than all users using one or the other.
  • A new Mobile App supports multiple accounts within the same instance, both OATH and Sentry.

Status and updates

  • The Sentry Core status page now shows whether updates are available for your applications.
  • The status page is more responsive on different screen sizes.

Messaging

  • Improved message queuing avoids dropped messages filling up the disk.
  • An optional CC field copies messages to a secondary email address.

Sentry SSO

  • Certificate management for SAML and OIDC is now in the SSO web administration, with optional automatic renewal and a defined overlap between old and new certificates.
  • The SSO installer now takes responsibility for updating the database.
  • Custom AuthnContextClass values can be defined for SAML applications, alongside the OIDC amr and acr settings.
  • Application icons on the SSO home page adapt better to the display.

User Portal

  • Passkey management, plus support for the new Passkey and PINpad2 methods in Sentry authentication.
  • The Change PIN and Reset PIN pages support changing PINpad2 PINs.

Before you upgrade

Please read the Technical Notes for version 4.3 before attempting to install it. They are part of the documentation, alongside the full release notes.

Read the full release notesDocumentation home

See AuthControl Sentry® 4.3 in action

Tell us about your organisation and our team will be in touch to arrange a demo.