• Searching in Reconcoliation with equals operator could result in missing entries in suggestions
• In some cases system ID’s are shown in suggested notification variables instead of target system slug when creating an Notification
• Missing report entries in rule mining in some cases around:
• Null or emptry string values of selected attritbutes
• Multiple contracts which generator more than two unique values for a person of a selected attribute.

Provisioning

• Business Rules using permissions from target snapshot

Service Automation

• Manage delegated approver as administrator
• Additional search and filter options for Delegated Form activities
• Beta: UI configuration for Advanced approval step
• Beta: test and validate Advanced approval step

• Product request modal form validation issue with a required comment after switching tabs in request modal
• On high load cloud agent returns “success” for a job that is supposed to fail
• Docs URL in default delegated form task template script no longer works
• Unable to use language and account button in HelloID Admin - Automation task overview
• On agent connected, services retry jobs from years ago (now limited to 72 hours)
• Kendo file upload for certificate crud doesn’t work

The minimum group size for a condition to appear in a Rule mining report is now defined as a percentage of active persons. Any condition that applies to a group smaller than the calculated minimum is excluded from the results. The calculated minimum is rounded up and always at least 2. Watch the feature demo: HelloID Provisioning Product Update January 2026.

In Rule mining reports, fields that have both an ID and a display name now show the display name in the list of conditions. When you hover over the field name, the field ID is shown. This ID is used in calculations, since field names may not be unique. In addition, the Details window (Condition sets tab) now displays both the display name and the ID of each field. See the HelloID documentation for a list of fields to which this applies.

You can now generate a direct link that opens the page to request a specific product for a specific user. This link can be shared with a manager or product owner so they can request the product for that user. Simply navigate to the user’s product request screen via the User dashboard (Management > Managed products or Managed users) and copy the URL. Watch the feature demo in the HelloID Service Automation Product Update January 2026.

Provisioning

• Exclude persongroups based on percentage
• Use combined values id <-> name as attributes
• Deprecate: Built-in Azure AD Target system

Service Automation

• Removed HelloID theme support except HelloID theme
• Change default local SA agent script execution duration to 30 minutes
• Add Required Field Option to Multi-checkbox in Dynamic Forms
• Routing URL to managed users and managed product request
• Show the number of (selected) items in each side of the dual list
• Add Access Groups to product(s) API v1 end-points

General

• Moved external javascript libraries to cdn.helloid.cloud like (cdn.jsdelivr.net) instead of using cdn of third party.

A hotfix has been implemented to correct the HelloID user rights for opening the product request modal using the managed users interface

• Source, target, or notification system names that are unusually long can overflow their designated UI containers in several areas, causing layout issues and reducing readability.

• In the target systems configuration, correlation fields appear duplicated. This can lead to confusion during mapping altough both options lead to the same configuration.

• The Account tab in Active Directory Built-in target systems displays an unnecessary vertical scrollbar at certain screen resolutions, even though there is sufficient space for the content.

Dual lists in forms now show the total number of items on both the left and right sides. These numbers update automatically as items are selected and moved, making large lists easier to work with.

The GET /products and GET /products/{id} API endpoints now also return the groups linked to each product (ID and name), providing a clear overview of group–product relationships. This makes administration, reporting, and audits faster and easier, and reduces the need for manual work, custom scripts, or inefficient API workarounds.

The built-in Azure AD target system is deprecated. It is no longer possible to create new Microsoft Azure AD target systems. For new implementations, use the Entra ID (PowerShell v2) connector, which offers full cloud support and more flexibility. Existing systems will continue to work and remain supported for now. Before deleting any Azure AD target system, review dependencies carefully. Deletion is permanent and cannot be undone.

It is now possible to make an entire Multi Checkbox element required on forms. When enabled, users must select at least one option before submitting.

Watch the feature demo in the HelloID Service Automation Product Update January 2026.

Moved external JavaScript libraries to cdn.helloid.cloud (like cdn.jsdelivr.net) instead of using third party CDNs.

• Improved the datasource deletion confirmation to also check for usage on the right side of dual-list configurations.
• Fixed an issue where custom-entered self-service product SKUs (codes) were not tracked by the user interface.
• Ensured that markdown in product descriptions is rendered correctly within the product card.
• Resolved loading issues for image assets that were still referencing the legacy CDN in Admin screens

The December 2025 release introduces the ability to migrate a PowerShell target system to PowerShell v2. PowerShell v1 target systems were deprecated in March 2025, and this option makes it easier to transition existing PowerShell v1 target systems to PowerShell v2. If you are unsure whether your system is PowerShell v1 or v2, open the target system in HelloID; PowerShell v1 systems display a deprecation message at the top of the page and have a Migrate button on the General tab. The migration process preserves the target system’s configurations, and ensures that business rules granting entitlements in the target system will continue to work. However, to complete the migration, target mappings must be recreated using the PowerShell v2 graphical interface, as v1 scripted mappings are not supported in a v2 system. In addition, all account, permission, and resource scripts must be manually updated to comply with the PowerShell v2 script format. Note that the migration is irreversible and that the system will be temporarily disabled during the process.

Watch the feature walkthrough in the HelloID Product Update December 2025.

A product’s return date is now visible in the request details. An icon indicates when a product is set to expire for a user. Hover over the icon to view the date.

You can now add a comment and tags when excluding an issue from the Reconciliation report. This helps to document the reason for exclusion and makes it easier to find and filter excluded issues later.

New icons on product request timeline entries make it easier to quickly understand the status of a product request and the actions linked to it. Any actions linked to the Approved state will be executed Any actions linked to the Returned state will be executed The product request’s time limit has been set or reset The request was handled outside the configured approval workflow

Rule mining is now available as part of the Governance module, upon request. This feature helps create the most efficient set of Business Rules by automatically identifying shared characteristics among persons in HelloID Provisioning who share the same entitlements in connected target systems. It is especially useful when onboarding new target systems, as it only includes entitlements not yet managed within HelloID. Administrators can configure rule mining by selecting target systems, up to five relevant source data fields, and the minimum group size for matching persons. Next, a rule mining report can be generated. The report lists condition sets ranked by efficiency, showing how many entitlements are shared among persons who meet the condition, as well as the number of exceptions. Potentially redundant condition sets are flagged. For each condition set, you can view entitlement details, the matching persons (starting with those missing any entitlements), and any alternative condition sets. Rule mining is available on the Provisioning dashboard under Business > Rule mining. Watch the feature walkthrough in the HelloID Product Update November 2025.