Sign-on gateways stayed on the old release after the server was upgraded

Upgrading the identity server does not upgrade the gateways that sit in front of each application. All of them remained on the previous release, and because the fix shipped in the gateway rather than the server, nothing improved after the server upgrade.

Each gateway had to be forced to rebuild before the fix took effect. Gateway and server versions are expected to match; that should be checked explicitly after any upgrade rather than assumed.