Accessibility at the Forefront
We’re excited to announce PAS 6.0.1, a maintenance release that puts accessibility and user experience first while also rolling up security and stability fixes from PAS 6.0.0 and PAS 5.1.8.
Key Improvements
- WCAG-compliant QR codes in mobile authenticators
All QR codes used by BankID, Freja, OneID and SITHS eID now follow BankID’s accessibility guidelines. Administrators can also configure maximum QR-code duration and appearance, making it easier for everyone to scan and authenticate while giving organisations more control over the process. - Flexible mobile authentication flows
New configuration options allow you to skip the QR step entirely or choose between QR-code mode and “same device” mode for an even smoother user experience. - Configurable HTTP header and field sizes
Previously hard-coded maximums are now configurable, giving greater flexibility when deploying PAS in diverse environments. - Rebranding “OneTouch v2” to “OneID”
The working title “OneTouch 2” has been replaced with “OneID” throughout the product, with localisation keys and enrolment components automatically updated.
Stability and Security Enhancements
PAS 6.0.1 also incorporates numerous fixes from 6.0.0 and 5.1.8, including:
- Improved audit logging and metrics for mobile authenticators.
- Updated documentation for SAML SP parameters, including ForceAuthn.
- Resolved issues in NiasAuth, SPBroker discovery service, duplicate
trace_idhandling and more. - Multiple dependency updates to mitigate known vulnerabilities (CVE-2025-52999, CVE-2025-53864, CVE-2024-7254, CVE-2025-7962, etc.).
For the complete list of included bug fixes from PAS 5.1.8, please see the detailed release notes.
Why Upgrade
Upgrading to PAS 6.0.1 gives you the most accessible, secure and stable version of PAS to date. You’ll benefit from WCAG-compliant QR codes, more flexible mobile authentication flows, and the latest security patches — all in one release.
