A hotfix has been implemented to resolve the error “Approval workflow could not be found” while modifying a instant approval workflow

The way permissions are retrieved and saved has been significantly improved: names of available permissions on a target system are now stored in the target snapshot, and the timeout for the permission retrieval script has been increased from 30 seconds to 15 minutes. These changes resolve issues that occurred when retrieving permissions from systems like Microsoft Exchange, where the previous timeout was frequently exceeded. The use of cached permission names also results in faster load times during business rule configuration. Available permissions are retrieved in the following situations, provided the cache is older than 24 hours:

• During enforcement, whether scheduled or started manually.
• When importing permissions from a target system for an Import target system entitlements report.
• When creating a Reconciliation report.

To update permissions at any time, click the Sync button on the Entitlements tab of a business rule.

A hotfix has been implemented to fix the error “Argument out of range” when displaying the request timeline of a recertification request using a instant approval workflow

• Searching in Reconciliation with equals operator could result in missing entries in suggestions
• In some cases system IDs were shown in suggested notification variables instead of target system slug when creating a Notification
• Missing report entries in rule mining in some cases around:
• 1. Null or empty string values of selected attributes
• 2. Multiple contracts which generated more than two unique values for a person of a selected attribute.

HelloID introduces a technical preview of the Advanced approval step for product request approval workflows. This new step allows you to use a PowerShell script to determine approvers, enabling more advanced and flexible approval logic alongside existing user scope filters. This release includes a new user interface for configuring and testing the Advanced approval step. From the Approval Workflow configuration, you can define a name for the step, configure a PowerShell script, and choose whether it will run on a local agent or the HelloID cloud agent. You can also test and validate the script using realistic request data. The interface provides tabs to define input variables, view returned data, and review log messages. This helps ensure the approval logic behaves as expected. Note: This feature is released as a technical preview: the step can be configured and validated, but its results are not yet applied in live approval workflows. It is hidden behind a feature flag and requires a HelloID Governance module license.

Administrators can now assign a delegated approver (or responder) for a user to temporarily handle product requests on their behalf. This ensures that product requests continue to be processed even if a user is away and forgot to set up a backup themselves. To use this feature, administrators must have the new Users – Manage Delegated Approvers permission.

A hotfix has been implemented to ensure that entitlement actions for PowerShell systems work correctly when the account reference is empty. Additionally, a warning is no longer displayed in the target snapshot when the correlation value is empty or null.

A hotfix has been implemented to resolve the broken search option in the Recertification Administration overview

The Delegated Form Activities page now provides improved filtering options to help you find activities more easily.

• The search bar at the top of the page now supports searching by the delegated form name or the user’s first name, last name, username, or email address.
• New Submission and Task status buttons allow results to be filtered based on the current state of an activity.

Provisioning

• Business Rules using permissions from target snapshot

Service Automation

• Manage delegated approver as administrator
• Additional search and filter options for Delegated Form activities
• Beta: UI configuration for Advanced approval step
• Beta: test and validate Advanced approval step

• Product request modal form validation issue with a required comment after switching tabs in request modal
• On high load cloud agent returns “success” for a job that is supposed to fail
• Docs URL in default delegated form task template script no longer works
• Unable to use language and account button in HelloID Admin - Automation task overview
• On agent connected, services retry jobs from years ago (now limited to 72 hours)
• Kendo file upload for certificate crud doesn’t work

It is now possible to make an entire Multi Checkbox element required on forms. When enabled, users must select at least one option before submitting.

Watch the feature demo in the HelloID Service Automation Product Update January 2026.

You can now generate a direct link that opens the page to request a specific product for a specific user. This link can be shared with a manager or product owner so they can request the product for that user. Simply navigate to the user’s product request screen via the User dashboard (Management > Managed products or Managed users) and copy the URL. Watch the feature demo in the HelloID Service Automation Product Update January 2026.

Moved external JavaScript libraries to cdn.helloid.cloud (like cdn.jsdelivr.net) instead of using third party CDNs.

The built-in Azure AD target system is deprecated. It is no longer possible to create new Microsoft Azure AD target systems. For new implementations, use the Entra ID (PowerShell v2) connector, which offers full cloud support and more flexibility. Existing systems will continue to work and remain supported for now. Before deleting any Azure AD target system, review dependencies carefully. Deletion is permanent and cannot be undone.

The minimum group size for a condition to appear in a Rule mining report is now defined as a percentage of active persons. Any condition that applies to a group smaller than the calculated minimum is excluded from the results. The calculated minimum is rounded up and always at least 2. Watch the feature demo: HelloID Provisioning Product Update January 2026.

Dual lists in forms now show the total number of items on both the left and right sides. These numbers update automatically as items are selected and moved, making large lists easier to work with.

Provisioning

• Exclude persongroups based on percentage
• Use combined values id <-> name as attributes
• Deprecate: Built-in Azure AD Target system

Service Automation

• Removed HelloID theme support except HelloID theme
• Change default local SA agent script execution duration to 30 minutes
• Add Required Field Option to Multi-checkbox in Dynamic Forms
• Routing URL to managed users and managed product request
• Show the number of (selected) items in each side of the dual list
• Add Access Groups to product(s) API v1 end-points

General

• Moved external javascript libraries to cdn.helloid.cloud like (cdn.jsdelivr.net) instead of using cdn of third party.

A hotfix has been implemented to correct the HelloID user rights for opening the product request modal using the managed users interface

In Rule mining reports, fields that have both an ID and a display name now show the display name in the list of conditions. When you hover over the field name, the field ID is shown. This ID is used in calculations, since field names may not be unique. In addition, the Details window (Condition sets tab) now displays both the display name and the ID of each field. See the HelloID documentation for a list of fields to which this applies.