• The rule mining evaluation excluded certain individuals (excluded persons) from its calculations. As a result, report entries that were fully covered by the business rules may not have been represented as such.
• In the rule mining report, the number of active persons in the configuration was previously refreshed only when the page was reloaded in the browser (F5). This value is now refreshed automatically when the page is visited, without requiring a reload.
• In the rule mining report, the number of persons shown in the entry details was capped at 100 whenever the actual number exceeded 99. This behavior was incorrect and has been corrected so that the actual number is now displayed. In addition, the summary view now shows results up to 999 instead of being limited to 99.
• In some situations, open actions could become stuck in a waiting state and appeared to hang. This issue has been addressed.

Starting with this release, product request deletions are included in audit logs (Elastic). This prevents gaps in the audit trail when user accounts and related product requests are automatically removed. The full product request lifecycle is now traceable for compliance and investigation purposes.

Provisioning

• Create Business Rule from report entry
• An audit log record is now created when a rule is created or cloned, not only when it is published.
• Entitlement overview with assigned business rules

Service Automation

• Audit log for deleted product requests

A new overview shows all entitlements in all target systems, the business rules where each entitlement is configured, and the persons who currently have the entitlement. This helps you quickly find and replace entitlements, remove them from business rules, and answer audit questions about when an entitlement is granted. The overview also indicates whether an entitlement still exists in the target system. If entitlements are still referenced in business rules but no longer exist in the target system, a warning badge is shown. The overview can be found under Business > Rules > Entitlements. Toxic policy is now available on a separate tab (the button has been replaced).

We’ve released a hotfix to address an issue where some requests were not visible in the approval inbox. This impacted a small number of HelloID tenants and specific product requests. The root cause has been resolved, and all new requests will now appear as expected.

We have released a hotfix to resolve an issue where no Exchange actions were executed for the built‑in Active Directory connector when Exchange integration was enabled. This occurred when a PowerShell session without the Exchange module imported was reused for Exchange actions after previously being used for Active Directory actions.

• Source Import process stays by canceling and never ends
• Reconciliation issues could be excluded twice (when using bulk) which causes an error when creating a new reconciliation report.
• Entitlement import report icon rendering issue
• Entitlement import actions like manage account are all marked with system type Active Directory in audit logging
• In Reconciliation if you first add tags before filtering the data the select box will show nothing but if you perform the bulk actions the tags will be shown
• Improved and fixed stability of agent connections and action excution

• Requesting a product via Managed Users may trigger the activity twice, potentially causing unintended behavior
• Allow setting an approval workflow as the default when none is configured yet
• Fix incorrect sorting in the Activity Overview (currently sorted by the wrong column)
• Resolve issue where delegated forms cannot be edited when more than 45 access groups are assigned
• Improve usability of the dual list component, particularly for drag-and-drop interactions

A new Include variables tab in the editor for advanced approval steps allows you to select built-in system variables and user-defined variables. Only the selected variables are available for use in the script. Note: The advanced approval step for approval workflows is currently available as a technical preview. While the step can be configured and validated, its results are not yet applied to live approval workflows. The feature is hidden behind a feature flag and requires a HelloID Governance module license.

When a permission’s display name is changed in the target system, HelloID now updates the name after the next permission import/sync, so the new name is shown consistently across Provisioning. Audit logs and process logs keep the original name for historical accuracy. Tip: If you want the new name to appear immediately, trigger a permission import - for example, edit any business rule and click Sync.

Backend optimizations have improved the performance and reliability of the end-user inbox for messages about the product request lifecycle. The tabs now rely on stored data that is periodically updated and refreshed with each approval. This results in faster loading times, particularly in environments with a high volume of product requests. Previously, changes to the workflow configuration or a user’s manager, attributes, or group memberships could affect the product request history displayed on the Completed tab. The Completed tab now displays the stored state at the time of completion.

We’ve released a hotfix to address an issue where the loading spinner in the approval inbox could continue indefinitely, and results were not displayed. This occurred in very few cases and has now been resolved.

Important

• Provisioning requires the newest agent for communication

Provisioning

• Rename of entitlement in target system should be reflected in HelloID

Service Automation

• Inbox performance and accuracy improvements
• Controlled variable selection for Advanced approval step

Rule Mining reports now display an icon for conditions that are already used by draft or published business rules to grant identical permissions to the same group. These conditions can be filtered out to provide a better overview of candidates for additional business rules.

• Create AD Account results in empty proxyaddresses in person accounts when store in account option is enabled in target system mapping.
• A audit log message is missing when a person was automatically merged in some situations
• An timing error which could cause the rule mining report to fail during generating in the grouping stage.
• Some processing logs appear to have empty lines on source imports, action execution and target imports.
• Although the AD target import snapshot completes successfully, the membership process remains in a running state. Additionally, the issue can cause discrepancies in the reported membership counts.

The interface for testing an advanced approval step has been enhanced. The Lookup results tab now displays which users match the data returned by the script, helping to verify that the approval logic behaves as expected.

Note: The advanced approval step for approval workflows is currently available as a technical preview. While the step can be configured and validated, its results are not yet applied to live approval workflows. The feature is hidden behind a feature flag and requires a HelloID Governance module license.

We deployed a hotfix that caused a limited number of actions to execute significantly slower than normal. The issue was introduced after the February 2026 release and was only triggered when multiple tenants had a large volume of slow‑running actions. This made the problem difficult to detect and reproduce.

A hotfix has been implemented to resolve the underlying issue that caused the error message “Something went wrong” after requesting a product. This issue also prevented the product request modal from closing correctly.

In PowerShell scripts for target systems, you can write custom messages to the audit logs and specify the type of action. The list of available action types has been extended with UpdateResource, which can be used in Resource scripts.

• Fixed a bug where very old (< july 2022) delegated form submissions were shown as “not submitted” in activity overview