Rublon MFA for Windows Logon and RDP - Release Notes

Last updated on September 5, 2025

Rublon MFA for Windows Logon and RDP integrates with Microsoft Windows client and server operating systems to add multi-factor authentication (MFA) to any Remote Desktop and local logons.

Version 6.1.3 – September 5, 2025

Fixed an edge case during local logons for protected users within Active Directory
Fixed an issue where logons made using TeamViewer could get stuck

Version 6.1.2 – August 26, 2025

Fixed an issue related to networking that led to the Offline Mode being falsely triggered
Fixed an issue that occasionally led to a user being stuck at the login screen after finishing MFA
Minor improvements for communication with Active Directory
Minor improvements in the GUI installer for high-DPI devices

Version 5.2.0 – July 31, 2025

Removed Remote Desktop (RDP) support for Google accounts signed in via Google Credential Provider for Windows (GCPW) and for personal Microsoft accounts (Microsoft account, formerly Windows Live ID). Local Windows logons with these account types are still supported
Added a new RequestTimeout registry config value, which specifies the number of milliseconds after which Fail Mode or Offline Mode will be triggered if the Rublon API cannot be reached
Removed the language selector in Offline Mode. Language is now set automatically based on the system language. If the system language is not supported, English will be used instead
Removed the /keepConfig parameter. The previous configuration is now kept on update by default. Unless you want to change the configuration options, you now only have to append the /verysilent parameter to the installation command during an update
Improved MFA reliability during remote connections
Fixed the handling of usernames with space character(s)
Fixed the installation process for users who have set a custom PowerShell profile
Improved connection handling reliability
Minor fixes for Offline Mode

Version 6.1.1 – July 30, 2025

Fixed the installation process for users who have set a custom PowerShell profile
Improved connection handling reliability

Version 6.1.0 – July 17, 2025

Removed the language selector in Offline Mode. Language is now set automatically based on the system language. If the system language is not supported, English will be used instead
Added a new RequestTimeout registry config value, which specifies the number of milliseconds after which Fail Mode or Offline Mode will be triggered if the Rublon API cannot be reached
Improved MFA reliability during remote connections
Removed Remote Desktop (RDP) support for Google accounts signed in via Google Credential Provider for Windows (GCPW) and for personal Microsoft accounts (Microsoft account, formerly Windows Live ID). Local Windows logons with these account types are still supported
Improved installation process
Minor fixes for Offline Mode

Version 6.0.0 – April 28, 2025

Added support for the WebAuthn/U2F Security Key authentication method during local Windows Logons
Removed the /keepConfig parameter. The previous configuration is now kept on update by default. Unless you want to change the configuration options, you now only have to append the /verysilent parameter to the installation command during an update
Defined the minimal supported OS versions as Windows 10, Version 1809 (October 2018 Update) and Windows Server 2019. When attempting to install on an unsupported OS version, an error message will be displayed at the beginning of the installation
Fixed the handling of usernames with space character(s)

Version 4.3.0 – December 5, 2024

Removed the OfflineBypass configuration parameter. The FailMode parameter will now handle the scenario of no internet connection
Changed the OfflineAuth configuration parameter default value from 0 to 1
Increased the OfflineTOTPTimeBetweenAttempts parameter limit from 60 to 600
Improved the Rublon Prompt loading speed on devices with shared access, ensuring faster and more efficient access

Version 5.1.0 – November 27, 2024

Removed ShouldTryToGetPhoneFromAD and ShouldTryToGetEmailFromAD parameters. If SendUPN is set to 1, the user’s email will continue to be read and sent to the Admin Console, as if ShouldTryToGetEmailFromAD were set to 1
Improved the Rublon Prompt so that it can now be closed during logon without exiting the entire RDP session
Restricted access to the C:\ProgramData\Rublon\Logon directory to admin and system accounts only
Improved reboot requirement detection during installation
Minor fixes related to the installation command arguments for Silent Mode installations

Version 4.2.3 – November 15, 2024

Further improvements and fixes for MFA over RDP
Improved the Rublon Prompt so that it can now be closed during logon without exiting the entire RDP session
Minor fixes related to the installation command arguments for Silent Mode installations

Version 4.2.2 – November 12, 2024

Further improvements for MFA over RDP
Restricted access to the C:\ProgramData\Rublon\Logon directory to admin and system accounts only
Minor improvements of version 4.2.1

Version 5.0.1 – November 7, 2024

Corrected the scaling of the Rublon Prompt to align with the monitor’s resolution and DPI settings.
Changed the application log directory from C:\Program Files\Rublon\Logon\Logs to C:\ProgramData\Rublon\Logon\Logs

Version 4.2.1 – November 7, 2024

Fixed an issue with connecting via Windows RDP when Rublon was installed on the initiating PC
Fixed autofocus for OTP-related methods when set as the default MFA method in the Rublon Admin Console
Corrected the scaling of the Rublon Prompt to align with the monitor’s resolution and DPI settings.
Changed the application log directory from C:\Program Files\Rublon\Logon\Logs to C:\ProgramData\Rublon\Logon\Logs

Version 5.0.0 – August 30, 2024

Added support for logins with Windows Hello as the first factor (facial recognition, fingerprint, PIN)
Added support for Pre-Logon Access Providers (PLAP)
Added support for logins with picture passwords as the first factor
Added support for logins with a security key as the first factor
Added support for logins with smart cards as the first factor
Added support for Google Workspace accounts
Added support for Microsoft Live Accounts
Removed the OfflineBypass configuration parameter. The FailMode parameter will now handle the scenario of no internet connection
Changed the OfflineAuth configuration parameter default value from 0 to 1
Removed the GetLocalUserEmail configuration parameter, which used to determine whether to retrieve the email address assigned to the local user account. From now on, email addresses will always be retrieved for local accounts
Increased the OfflineTOTPTimeBetweenAttempts parameter limit from 60 to 600
Fixed an issue where the Rublon Prompt appeared blank or blurred during login, blocking PC access when users had no password assigned (e.g., using only a PIN)
Fixed an issue with connecting via the Windows RDP client when Rublon was installed on the PC initiating the connection
Fixed login using credentials in the UPN username format (e.g., Entra ID) in offline mode
Improved autofocus for the Passcode method when set as the Default Authentication Method in the Rublon Admin Console

Version 4.2.0 – June 13, 2024

Added a secure MFA login method that can be used if there is no internet access (Offline Mode)
The installation process on Windows Server 2008 R2, Windows 7 SP1, and Windows Server 2012 systems now requires PowerShell version 4.0 or higher
Removed unused SetLastLogged configuration option
Installation logs will from now on also be saved in an installation.log file located in the main folder (the /log parameter for Silent Mode has not been changed and can still be used)
Fixed an issue where login credentials, stored in the browser and protected by Windows Hello, could only be unlocked using a password, instead of a fingerprint
Fixed an issue in Version 4.1.0 that caused the installation progress bar to freeze at the beginning
Fixed an issue occurring on some systems that caused Rublon API credentials not to be verified during installation, even though they were correct, which blocked further installation process
Fixed incorrect deletion of files during uninstallation. In previous versions, empty directories or registry keys were sometimes left unremoved after uninstallation

Version 4.0.2 – February 14, 2024

Fixed the issue with missing PIN text box on Microsoft prompts related to Smart Card signing
Blocked login and password field editing during RDP logons after the Rublon Prompt was displayed
Improved the installer view to make it more readable
Added support for x64 arch emulated on ARM systems

Version 4.0.1 – November 23, 2023

Improved validation of Active Directory user phone numbers that contain dashes and space separators
Fixed compatibility with external applications interfering with the logging process
Improved the connector so that the Authentication Logs tab in the Rublon Admin Console shows proper public IPs for local logons instead of 0.0.0.0

Version 4.0.0 – July 13, 2023

Standardized the username format stored in the Rublon Admin Console (This may require account re-enrollment for users if you do not have Username Normalization enabled.)
- Local Windows accounts are now always stored in Rublon Admin Console along with the device name
- When logging in with a username without any domain or with a ‘.\’ prefix to an AD-managed account, the NetBIOS domain will be the username prefix in the Admin Console when the SendNTLM option is specified
- So, if you update to 4.0.0 and you didn’t have Username Normalization enabled, user bob or user .\bob will turn into user DESKTOP-1235\bob. Because of that DESKTOP-1235\bob will have to enroll their mobile devices again and bob or .\bob will become phantom accounts.
Improved login GUI for a better experience (default LogonUI view)
Added support for Azure AD credentials
Improved logging in to Active Directory accounts
Added Rublon MFA support for accounts with empty/undefined passwords
Fixed LogonUI view for password change scenario
Fixed Windows native credential provider bug that caused the user login box to not be visible in the Other User tab
Fixed VC redist displaying GUI during installation despite /silent and /verysilent flags being set
Fixed installer layout in case restart was required
Fixed Rublon MFA QR code step crash on some Intel-based devices
Fixed credentials forwarding during RDP connection. Sometimes it was required to enter them twice, but not anymore
Fixed no MFA issue for users without Allow log on locally GPO rights
Fixed handling international UTF-8 characters

Version 3.4.3 – April 13, 2023

Improved debug logging
Fixed developer window issues

Version 3.4.2 – April 5, 2023

Improved the GUI installer to increase user experience
Made it possible to run the GUI installer in Silent Mode, creating a one-for-all installer file
Changed the way options are defined in the installation command for the Silent Mode (e.g., -token ABCD → /token=ABCD)
Added a new Silent Mode option keepConfig

Version 3.4.1 – March 16, 2023

Fixed a login issue when SendUPN was set to 1 but the UPN didn’t contain the username
Fixed a login issue for users who used their email addresses to log in
Changed the DebugMode parameter to support values 0, 1, 2, 3, where the higher the value, the more detailed the debug logs
Fixed other minor issues in 3.4.0

Version 3.4.0 – March 1, 2023

Added MFA for User Account Control (UAC) Elevation prompts
Added parameter UserAccountControlProtect to enable MFA for UAC
Increased the speed of user logon time
Fixed memory leaks which could potentially lead to undefined behavior during user logon with domain
Fixed the issue where bypassed users could get stuck at the loading circle during logon
Adjusted the Rublon MFA window so that starting from this release, closing the Rublon MFA window using the ‘X’ button will reset the current login session

Version 3.3.0 – January 30, 2023

Fixed the issue with missing login credentials text box on various Microsoft prompts
Fixed the incompatibility between Rublon’s credential provider and YubiKey’s verification process for other websites, tools, and applications
Improved support for FIDO on older systems

Version 3.2.1 – December 19, 2022

Allowed user enrollment via the user’s predefined email
Removed Rublon legacy registry keys (emailDomain, skipUsername)

Version 3.2.0 – November 18, 2022

Added parameter failMode

Version 3.1.0 – June 15, 2022

Added parameter sendUPN
Added parameter sendNTLM
Added focus on password field during login

Version 3.0.0 – April 2, 2022

Adapted to Usernames

Version 2.4.3 – February 18, 2021

Fixed adding non-existent Windows users to the Rublon Admin Console

Version 2.4.2 – November 23, 2021

Fixed issues with the Rublon Prompt when VMware Tools is installed

Version 2.4.1 – November 4, 2021

Added extractUsernameFromEmail registry value, which removes the domain part from a user name before sending the user name to the Rublon API
Added shouldTryToGetPhoneFromAD registry value, which pulls the user’s phone number from Active Directory and sends it to the Rublon API
Changed the log file directory to C:\Program Files\Rublon\Logon\Logs\rublon-credential-provider.log
Improved logging (added time zone and system version information)
Minor fixes and improvements

Version 2.4.0 – September 9, 2021

Added debugRublonRequests registry value, which enables detailed log file entries
Added an optional -getLocalUserEmail parameter to the Silent Mode Installer
Fixed retrieving email addresses for usernames and full names that contain a space character
Improved messages displayed in the connector and installers
Improved formatting of log file entries
Adapted to future versions of the Rublon API

Version 2.3.1 – April 29, 2021

Added retrieving email address from Description field for local system users
Added scripts that allow enabling/disabling Rublon Bypass on a selected machine
Added Email Domain validation in installers (checks if only a domain name is provided, not a whole email address)
Added logs for the scenario, in which the user logs in locally with onlyRDP enabled
Improved U2F support
Signed installers
Changed the -userDomain parameter to -emailDomain
Changed the -domain parameter to -emailDomain (Silent Mode installer)
Minor GUI improvements

Version 2.3.0 – February 5, 2021

Moved configuration to Windows Registry
Added proxy support
Improved installers

Version 2.2.0 – January 14, 2021

Improved installer (fixed an issue with a missing dll error message)
Additional logs at the application start

Version 2.1.9 – December 17, 2020

Added setting the last logged in user in the login window
Improved the uninstallation process

Version 2.1.8 – December 11, 2020

Added support for usernames in the form of email addresses
Fixed various security issues

Version 2.1.7 – December 8, 2020

Added an option which makes Active Directory not query email addresses, which shortens the login time when the system is first started
Added displaying user graphics at the login stage. The icon assigned to the user in the system will be displayed after the user provided correct credentials
Extended the duration of the RDP login session from 60 seconds to 10 minutes
Fixed some labels in the installer

Version 2.1.6 – December 1, 2020

Improved support for disk mapping
Improved support for RDP mode

Version 2.1.4 – October 28, 2020

Improved user experience

Version 2.1.3 – September 23, 2020

Added support for Windows Server 2012 and 2012 R2
Added Silent Mode installer (CLI)
Fixed various security issues

Version 2.1.2 – August 24, 2020

Improved detection of IP addresses of users logging in via RDP
Improved retrieval of email addresses from the user configuration in Active Directory

Version 2.1.1 – August 12, 2020

Added detection of the IP address of users logging in via RDP
Added retrieval of an email address from the user configuration in Active Directory by default
Visual changes related to bypass mode
Authentication session timeout extended to 10 minutes

Version 2.1.0 – July 24, 2020

The module’s graphics engine has been updated
Added security fixes for domain login
Modification of the visual elements of the application

Version 2.0.1 – June 10, 2020

Improvements in the default installer settings
Event logs are now saved to rublon-credential-provider.log

Version 2.0 – May 5, 2020

UX improvements for RDP logons reduce user workload during Rublon authentication
Added support for standard system scenarios, e.g. password change
Added new credential provider GUID

Version 1.3.2 – April 13, 2020

Fixed issues with filtering events related to the system login process

Version 1.3.1 – March 23, 2020

Fixed issues that had an impact on Rublon authentications with domain account

Version 1.3 – February 3, 2020

Added support for Windows Server 2016
Added support for Windows Server 2019

Version 1.2 – January 13, 2020

New graphical installer automates the installation and configuration of Rublon MFA for Windows Logon and RDP

Version 1.1.1 – December 16, 2019

Added offlineBypass mode to bypass Rublon authentication of Rublon’s service is unreachable
Added onlyRDP mode to enable Rublon authentication only for RDP logons

Version 1.1 – December 2, 2019

Added support for Remote Desktop (RDP) logons

Version 1.0 – November 18, 2019

First version of Rublon MFA for Windows Logon that enables multi-factor authentication for local logons on Windows 10

Rublon MFA for Windows Logon and RDP

Rublon MFA for Windows Logon and RDP – FAQ