Rock Core v17.1 includes updates to how Rock handles external authentication for Microsoft Entra and Auth0 in mobile applications.
Rock now uses server-side token validation to streamline and standardize identity handling. This is a breaking change that will eventually require Rock Mobile shell v7 or later.
To help with transitions from previous versions of the mobile shell, a new block setting has been added:
Enabled Enhanced Authentication Security
This setting is enabled by default and ensures the updated authentication flow is enforced. When enabled, external authentication will only work with mobile shells v7.0 and above. If you're still supporting older versions of the shell, you can temporarily disable this setting to allow legacy authentication to continue functioning.
This setting is intended as a transitional aid and is expected to be removed in a future release. To continue supporting external authentication, you need to upgrade your mobile shell to version 7 or later.