(Note: you can download the Release Notes PDF in the Release Notes PDFs section in Help Center)

For this release, we anticipate the following introductions in your environments. Major features are documented in the Blend Knowledge Base accessible at help.blend.com. If that resource does not answer your question, please reach out to Blend Support.

Announcements (2)

SAML Key Encryption Update Required

We are deprecating support for RSA 1.5 (RSA_PKCS1_PADDING) key encryption for SAML assertions, which will be fully removed by October 1st, 2026. This change is driven by a Node.js 22+ security fix for the Marvin Attack vulnerability (CVE-2023-46809), which removes support for RSA 1.5 padding in the decryption path, meaning any SAML assertions still using this method will fail to decrypt. IdP administrators must update their SAML key encryption method from RSA 1.5 to RSA-OAEP (xmlenc#rsa-oaep-mgf1p) in their Identity Provider's SAML integration or Service Provider (SP) connection settings by October to avoid disruption to borrower SAML-based authentication. This update is typically carried out by your institution's IT team. If you have questions or need assistance, please reach out to your Blend representative or open a support ticket.

Note: Update steps may vary depending on your IdP (e.g., Okta, Azure AD, PingFederate, OneLogin, etc.). Refer to your IdP's documentation or contact their support team for specific instructions.

Encompass Lower Environment Migration

ICE is in the process of migrating customers’ Encompass lower environments over a period of time. If you are scheduled for migration, please be aware of the following important steps to ensure continued connectivity with Blend:

What You Need to Do:

Notify Blend Support at least 10 days in advance of your scheduled migration. This lead time is necessary for Blend to prepare and reestablish connectivity between your Encompass Beta and Blend Beta environments.

If you have received a migration notification from ICE and do not intend to delay the migration, please notify Blend Support immediately to ensure your systems remain connected.

For additional details, please refer to ICE's official documentation here:

R2T to UAT Migration Details

Maintenance Announcements (1)

(New) Disclosures Service Database Upgrade

Blend will be upgrading our Disclosure Service database.

Will there be downtime associated with this maintenance?

Yes, the downtime will impact features and services in both the borrower and lender app.

What services or products are affected?

Only the Disclosures Service will be unavailable during the database migration. All other loan platform services will remain operational. 

Any functionality that depends on disclosure documents will be unavailable until the upgrade is complete. Background processes, including audit reports, reminder emails, and signing-status updates from third-party vendors, will not be lost. These items will be queued during the maintenance window and processed automatically once service is restored.

How will this impact the borrower app?

Borrowers will still be able to log in and access the rest of their application. However, they will not be able to view, review, or electronically sign disclosure documents during the maintenance window. Disclosure-related actions may display an error message or appear temporarily unavailable.

How will this impact the lender app?

Lenders will not be able to prepare, send, edit, or view the status of disclosure packages during the maintenance window. Any workflow that depends on disclosure package activity will be temporarily paused.

Signing-status updates and audit reports may be delayed during the maintenance window but will be processed automatically once the upgrade is complete.

Maintenance Windows

• Beta: Tuesday 6/30, 12:00 AM – 2:00 AM Pacific (approximately 15 minutes)

• Production: Tuesday 7/14, 12:00 AM – 2:00 AM Pacific (approximately 20 minutes)

Preview Environments (Test/Dev/Beta) (3)

• (New) Refinance Property Value Field Label Update
• Permissions-Policy HTTP Header: Lender-Configurable Exceptions
• Priority Lien Field Update for New URLA

Production Environments (Prod) (3)

• (New) Non-TRID Appraisal Value Field for Refinance Pricing
• Truework VOI Source Document Suppression
• Truework Marketplace Modal: Pre-Populated Verified Employers

0 Votes