Skip to main content

v2026.10

· 12 min read
Marius Nergård
Marius Nergård
Product owner Breeze @ Sotera

Card Templates now keep a full change history with versions you can restore, and production sites can lock an approved design so it only changes with a recorded reason. Duo ID emails can be written per Domain and Tenant, and the Duo ID registration is clearer and meets WCAG 2.2 AA.

A new Tenant access audit answers the question auditors ask most: who can reach this Tenant, and with which roles.

What this release gives you​

Card Templates you can trace and protect. Every change to a Card Template is recorded, and any earlier version can be brought back. A template that is in use is archived instead of deleted, so Credentials already made with it stay intact. Production sites that turn on publication know that an approved design only changes with a reason on record, and that a draft can't reach production by accident.

Duo ID in your own words. Domain administrators write the Duo ID invitation, rejection and reminder emails themselves, and Tenants can adjust the text for their own people. The person registering sees each step clearly, including the photo background being removed.

A straight answer to "who can access this Tenant?" The Tenant access audit lists every member and inherited administrator with their roles. Its export can go straight to the Tenant.

Summary of Changes​

New Features​

Improvements​

Security Enhancements​

Bug fixes​

New Features​

Card Template History and Versions​

Every Card Template now has a History tab with its complete change history: who changed what and when, including the encoding settings behind the template.

Highlights:

  • Each change keeps its own version. Click Restore Version to bring an earlier one back.
  • If something a version depends on, such as an encoding file or a Number Range, has changed since it was saved, Breeze warns you before you restore.
  • A Card Template that is in use can no longer be deleted outright. Breeze shows what is using it before you confirm and offers to archive it instead. Archiving keeps every Credential made with it intact and stops new orders. You can bring an archived template back at any time.
  • The History tab also shows when the template was created and last changed, so the separate Information tab is gone.

Why it matters:

A wrong edit is no longer permanent, and nobody loses track of Credentials by deleting the template they were made with.

Learn more: Card Template history

Card Template Publication​

Production sites can now turn on Card Template publication. Once a customer has approved a design and a test card, you mark the template Published.

Highlights:

  • Any change to a published template requires a short reason, which is kept in its history. That covers editing, restoring a version, archiving, changing which organizations it's shared with, and changing how it looks up identities.
  • A template marked Draft isn't offered when you order a Credential, so an unapproved design can't reach production.
  • The people who publish templates can turn on Show drafts to order a test card from a Draft. Each test order is recorded in the template's history.
  • The setting applies to every Card Template produced at the site, including those of the organizations it produces for.
  • Existing templates keep working and show as Not published, so you can publish them in your own time. New templates start as Draft.

Sites that don't turn the setting on see no change.

Learn more: Publication, Production Site

Duo ID Email Settings for Domains and Tenants​

Domain administrators can now write the Duo ID emails for every Tenant under a Domain: the sender name and address, and the subject and text of the invitation, the rejection email and both reminders.

Highlights:

  • A Tenant's Super Administrators can override the subject and text for their own Tenant, under Approvals settings → Duo ID email settings.
  • Start from a Friendly or Short and formal template in the Domain's language, from a blank email, or, for a Tenant, from the Domain's text.
  • Bold, italic and bullet lists, a Duo ID link button, and Insert detail for values such as the Tenant name or expiry date.
  • A live preview shows the email as people receive it, on a computer or a phone. You can send yourself a test copy before saving.
  • Each email is written once, not per language. Breeze's built-in text is still translated and follows the Domain's language until you customize it.

The sender address must be on a domain verified for sending email; the Domain screen reminds you of this.

Learn more: Duo ID email settings for a Domain, for a Tenant

Card Templates on Another Production Site​

A Card Template can now send its cards to a different Production Site than the Tenant's own. Use it when a Tenant has one Production Site but one type of card has to be made somewhere else.

A System Administrator sets it on the Card Template's Approvals tab, under Production site. For now it applies to Tenants that use On-the-Fly Checkout. Tenants that order through the cart keep their own Production Site.

Learn more: Production site on a Card Template

Manual Entry When a Person Lookup Fails​

When a person lookup fails while you order a Credential, Breeze now says in plain words what went wrong: the lookup service isn't responding, it rejected Breeze's sign-in, it's set up incorrectly, or no person matches the number.

Highlights:

  • Administrators can let operators enter the person data themselves when the lookup service is unavailable. The setting is per external data source and off by default.
  • A Credential ordered this way is marked as entered manually.
  • Applies to Folkeregisteret (FREG), Infotorg NPR, SPAR and Breeze ID Connector.
  • A System Administrator can turn it on, or a Domain Administrator for sources that belong to a Domain.

Why it matters:

Ordering doesn't stop when a lookup service is down, and organizations that require a verified lookup for every Credential keep that rule.

Learn more: External data sources, External data lookup

Improvements​

Clearer Duo ID Registration​

The Duo ID registration has a clearer look. Each step shows where the person is ("Step 2 of 5"), the photo step has new example photos that match the ID photo requirements, and the pages meet WCAG 2.2 AA.

When the photo background is removed automatically, the preview shows the progress and updates by itself. If it takes longer than usual, the person can submit without waiting. If the background can't be removed, they see the original photo with a short explanation and can still submit.

Learn more: Background Removal settings

Duo ID Auto-Approval on Card Templates​

Duo ID auto-approval, which sends a submitted Duo ID straight to production, is now available on Card Templates as well as Mobile Credential Templates. Only a System Administrator can turn it on, and only for a Tenant that uses On-the-Fly Checkout.

The approver you pick must be able to approve Duo ID requests. If they lose that role or are deactivated, the template shows a warning and new requests go to manual approval.

Learn more: Duo ID Auto-Approve Settings

Faster Bulk Photo Approval​

Approving or rejecting many photos at once in Photo verification is now fast. If some requests can't be handled, the rest still go through, and you see which ones failed and why. Photos are larger, with a bigger preview on hover and a button to enlarge them.

Learn more: Handling Duo ID requests

Logos and Product Images Stored in the EEA​

All logos and product images, including the logos in emails sent from Breeze, now come from Sotera's own storage in the EEA. Existing images are moved over after the release. Logos and product photos look and upload exactly as before.

Cloudinary is no longer used, and the sub-processor list and compliance documentation are updated to match.

Learn more: Compliance and data protection

Warnings Shown in Amber​

Warning messages across the portal are now amber instead of red, so a warning is no longer easy to mistake for an error.

Security Enhancements​

Tenant Access Audit​

Users with the new Access Auditor role, such as Sotera staff and partner administrators acting as auditors, can now answer "who can access this Tenant?" from the portal. Open it from Tenant access audit on the Tenant's Security tab.

Highlights:

  • Lists every direct member and every inherited administrator from parent Tenants, with their roles and account status.
  • People from parent Tenants you can't normally see appear as stable pseudonyms: you learn that they exist and which roles they hold, never who they are.
  • Exports to Excel. By default the export pseudonymizes all inherited users, so it can go straight to the Tenant.
  • The export also counts machine access: OAuth clients, AMR integrations, API-enabled members and external data sources.
  • Every run and export is logged.

Tenant administrators don't hold the Access Auditor role in this release. They get the answer through the shareable export from their Sotera or partner contact.

Learn more: Tenant Access Audit, Authentication and access

Bug fixes​

Protected Duo ID Values Stored Correctly​

Saving the Duo ID preview more than once could scramble a protected value, such as a personal number, so approvers saw a long string of characters. Affected values are repaired with this release; a value that can't be recovered is reported so it can be entered again.

Duo ID links now open for Credentials built on a Credential Template shared from another Tenant in your Domain. Links already sent work again without being reissued.

Duo ID Reminder Emails​

Both Duo ID reminder emails now show the reminder text instead of an internal field name. They follow the Domain's language, including the subject line, and state the date the link expires.

Duo ID Registration Shows Preview Errors​

If saving the Duo ID preview fails, or a detail fails a check the person can't fix on the form, the person now sees why, and Submit stays off until the preview is saved.

Background Removal for Photos Added by the Requester​

When the person registering keeps a photo uploaded by whoever started the request, its background is now removed, just like a newly uploaded photo.

Duo ID Approval View and Email Button​

Long values in the approval view stay inside their column instead of running under the card preview. The button in Duo ID emails now stays visible in dark mode on phones.

Approving a Photo After Checkout​

Approving a Duo ID photo after its order was checked out now puts the Credential in a new order instead of the one already placed.

Editing a Partly Hidden Value​

Changing only the visible part of a partly hidden protected value, such as ******1234, is now refused with a request to enter the whole value. Before, the save looked successful but the old value was kept.

Credential List Speed, Sorting and Filtering​

The Credential list opens and filters quickly for Tenants with many Credentials, including the domain-wide list. Date and number columns now sort in order, and number, yes/no, template number, order status and order ID filters now work.

Signature Shape​

Signatures captured with a signature pad now come out in the shape set on the Card Template, padded with white space instead of stretched or cut off. To correct a signature captured earlier, capture it again.

Signing In to a Deactivated Account​

Signing in with an e-ID such as BankID to an account that is deactivated in that Tenant now returns you to the login page instead of never finishing.

Email Subjects with Special Characters​

An email subject or Tenant name containing &, < or >, such as "Ben & Jerry's", no longer produces a malformed email.

Checkout and Selection Wording​

Checkout's delivery text no longer names a specific carrier. In Norwegian and Finnish, the options that clear your selection no longer read as if they delete the Credentials. Formula fields for the third Number Range now appear with the rest of their range.