AppStore
Flexible Approvals (GA)
Approval workflows in Lumos now match how real organizations make decisions. Flexible Approvals introduce attribute-based, multi-stage routing logic so customers can express complex policies without workflow sprawl. What’s new:- If / Else-If / Else logic for deterministic approval routing
- Attribute-based conditions using department, location, role, risk, permissions, custom fields, and expressions
- Multi-stage approval chains that are easy to sequence and reorder
- Manager selectable as an approver at any stage
- Transparent activity logs showing which conditions matched and why
- Automate governance based on real-world org logic
- Reduce approval delays for low-risk requests
- Eliminate duplicated workflows and manual exceptions
- Improve auditability with clear, explainable routing decisions
Integrations
New Integrations with Provisioning Actions
New ICS-style integrations are now available with direct provisioning capabilities, expanding SaaS coverage and supporting pre-IDP workflows. New integrations: Note: Existing customers will need to reconnect using the new integration to enable provisioning capabilities.Existing Connector Improvements
Enhancements across existing integrations continue to deepen flexibility and support real-world use cases. Updates include:- PowerShell: Expanded group and mailbox management actions
- Salesforce: Added profile and permission set descriptions
-
SCIM:
- Sync and provision custom attributes
- Improved schema flexibility
- OAuth 2.0 authentication support
- Snowflake: Added Personal Access Token (PAT) authentication
Platform
Delegation (GA)
Delegation ensures approvals never stall by allowing tasks to route to trusted delegates — temporarily or indefinitely — with full governance and auditability. What’s new:- Admin-managed delegation rules with start/end dates or indefinite duration
- Automatic routing of approval tasks to delegates
- Built-in protections against self-approval and approval loops
- Full audit trail with clear attribution (“X on behalf of Y”)
- Faster approvals during PTO, leave, and holidays
- Reliable EA-driven workflows for executives
- Stronger governance with consistent attribution
- Fewer IT escalations and manual task reassignment
Branded Notifications (GA)
Lumos notifications can now be fully branded so emails feel company-owned, trustworthy, and consistent across workflows. What’s new:- Configure logo, colors, and typography presets
- Apply branding consistently across supported notification templates
- Customize sender name, from, and reply-to with authenticated domains
- Preview branded emails before publishing
- Reduce phishing concerns with recognizable, on-brand emails
- Deliver consistent communication across access workflows
- Configure once and apply branding in minutes
Lifecycle Management
Re-Hire Provisioning Improvements Lumos now handles re-hires more intelligently, ensuring returning employees regain appropriate access without manual cleanup or over-provisioning. What’s new:- Improved detection of re-hired identities
- Cleaner re-provisioning aligned to current policies
- Reduced reliance on manual intervention
- Faster re-onboarding for returning employees
- Lower risk from stale or excessive access
- Stronger lifecycle accuracy and audit confidence
Analytics
AppStore Dashboard: Access Request Analytics

- A complete access request data model spanning submission → approval → provisioning
- Metrics for Time to Approval (TTA), Time to Resolution (TTR), error rates, and expiration rates
- Automation insights including pre-approval, auto-provisioning, and full automation rates
- A pre-built AppStore dashboard template with headline KPIs, trends, and breakdowns
- Identify bottlenecks in approval and provisioning workflows
- Quantify the impact of automation and pre-approval rules
- Forecast request volume and plan IT staffing more effectively
- Share insights with Finance, Security, and business leaders
AI-Powered Fields in the Apps Table (Beta)

- AI-generated app classifications using custom prompts or templates (e.g., Essential, Use Cases)
- Support for single-select, multi-select, and text fields
- Fast generation across hundreds or thousands of apps
- Manual overrides preserved until regeneration
- Eliminate hours of manual app categorization work
- Ensure consistent, defensible classifications across teams
- Improve filtering, reporting, and dashboard accuracy
- Power better insights across analytics and governance workflows