We use cookies to try and give you a better experience in Freshdesk.
You can learn more about what kind of cookies we use, why, and how from our Privacy policy. If you hate cookies, or are just on a diet, you can disable them altogether too. Just note that the Freshdesk service is pretty big on some cookies (we love the choco-chip ones), and some portions of Freshdesk may not work properly if you disable cookies.
We’ll also assume you agree to the way we use cookies and are ok with it as described in our Privacy policy, unless you choose to disable them altogether through your browser.
(Note: you can download the Release Notes PDF in the Release Notes PDFs section in Help Center)
For this release, we anticipate the following introductions in your environments. Major features are documented in the Blend Knowledge Base accessible at help.blend.com. If that resource does not answer your question, please reach out to Blend Support.
Announcements (4)
(New) Discover Login Screen Update: Capital One Migration
Mastercard made a small enhancement to the Discover login screen for the July 24 Wave 2 Discover → Capital One account migration.
What changed
An expandable helper text section was added to the existing Discover login screen. The content is collapsed by default and can be expanded by the user if they'd like additional migration-related guidance.
The existing login flow, authentication, and user journey remained unchanged.
Old view: Users saw the standard Discover login screen with no migration-specific guidance.
New view: Users will see an expandable helper text section on the same login screen containing additional migration-related information, collapsed by default.
No action required
This update was applied by Mastercard. No configuration or action is needed on your end.
Why we're sharing this
With the July 24 Wave 2 migration now complete, we wanted to make sure your team had full visibility into what end users may have seen at the point of login, so you're prepared if any questions come in.
mTLS Certificate Update
Blend is transitioning mTLS certificate issuance from DigiCert (a public certificate authority) to Blend's own private certificate authority. This change is driven by DigiCert's planned removal of client authentication support from public TLS certificates, effective March 1, 2027. This transition also eliminates the need for frequent certificate rotations, the new root certificate will only need to be updated approximately every 10 years. Lenders using Blend-issued mTLS certificates will need to update their configuration before August 31, 2026 to avoid disruption.
Who is affected?
This affects mTLS certificates across the following integration categories:
Pricing - client-auth certs for pricing service integrations
Fees - client-auth certs for payment-api-commerce/fees integrations
API / Partner integrations - client-auth certs for partner API connections
Mortgage Origination (MOR) - client-auth certs for MOR integrations
LOS Integrations - client-auth certs for loan origination system integrations
Consumer Banking - client-auth certs for consumer banking integration
Customer Portal - client-auth certs for the Blend Customer Portal
Talkuments - client-auth certs for document integration
Note: If your organization issues its own mTLS certificates and provides them to Blend, no action is required on your part.
What You Need to Do: Add Blend's new security certificate to your system's trusted client certificate list. Please contact Blend Support for the certificate and setup instructions.
Deadline: August 31, 2026
If you have questions or need assistance, please reach out to support@blend.com.
SAML Key Encryption Update Required
We are deprecating support for RSA 1.5 (RSA_PKCS1_PADDING) key encryption for SAML assertions, which will be fully removed by October 1st, 2026. This change is driven by a Node.js 22+ security fix for the Marvin Attack vulnerability (CVE-2023-46809), which removes support for RSA 1.5 padding in the decryption path, meaning any SAML assertions still using this method will fail to decrypt. IdP administrators must update their SAML key encryption method from RSA 1.5 to RSA-OAEP (xmlenc#rsa-oaep-mgf1p) in their Identity Provider's SAML integration or Service Provider (SP) connection settings by October to avoid disruption to borrower SAML-based authentication. This update is typically carried out by your institution's IT team. If you have questions or need assistance, please reach out to your Blend representative or open a support ticket.
Note: Update steps may vary depending on your IdP (e.g., Okta, Azure AD, PingFederate, OneLogin, etc.). Refer to your IdP's documentation or contact their support team for specific instructions.
Encompass Lower Environment Migration
ICE is in the process of migrating customers’ Encompass lower environments over a period of time. If you are scheduled for migration, please be aware of the following important steps to ensure continued connectivity with Blend:
What You Need to Do:
Notify Blend Support at least 10 days in advance of your scheduled migration. This lead time is necessary for Blend to prepare and reestablish connectivity between your Encompass Beta and Blend Beta environments.
If you have received a migration notification from ICE and do not intend to delay the migration, please notify Blend Support immediately to ensure your systems remain connected.
For additional details, please refer to ICE's official documentation here:
R2T to UAT Migration Details
Maintenance Announcements (1)
(New) Production API Gateway Certificate Rotation
Blend will be rotating our production API Gateway certificate.
Will there be downtime associated with this maintenance?
No downtime is expected.
What services or products are affected?
No services or products will be affected.
How will this impact the borrower app?
No impact to the borrower.
How will this impact the lender app?
No impact to the lender.
Maintenance Windows
Beta: This update will not impact beta environments.
Production: Thursday 8/6, 6 PM PST (approximately 5 minutes)
Preview Environments (Test/Dev/Beta) (4)
Production Environments (Prod) (9)
0 Votes
0 Comments
Login to post a comment