October 2025 Product Release Notes

Theme: Evolving Your IGA: From Insight to Autonomy This release covers updates to Access Reviews, Lifecycle Management, AppStore, integrations, and the platform, including Albus.

---

​

Access Reviews

​

Agentic UARs [Beta]

AI-powered access reviews are here. Agentic UARs surface recommended decisions with clear rationale, so reviewers can focus only where human judgment is needed. Available to select customers in Beta. Benefits:

• Reduce completion time with guided AI recommendations
• Improve decision accuracy through contextual insights
• Minimize rubber-stamping and reviewer fatigue

Help Center Article

​

Entitlement Tags in UARs

Admins can now tag entitlements to categorize privileged or compliance-relevant access. Tags can be used for scoping Access Reviews or adding context for reviewers. Benefits:

• Faster, clearer review setup
• Reviewers can instantly see which entitlements are privileged or high-risk

Help Center Article

---

​

Lifecycle Management

​

Mover Revocations [Beta]

Lumos now automatically removes outdated access when employees change roles. Revocation workflows evaluate access policies after HRIS attribute changes and remove access no longer needed. Benefits:

• Enforces least privilege automatically
• Reduces audit burden
• Completes the end-to-end Joiner-Mover-Leaver automation loop

​

Improved Onboarding / Mover Visibility

Admins can now view the progress and status of each access request within onboarding workflows - no more digging through Task Center. Benefits:

• Easier troubleshooting of failed or stalled requests
• Transparency for IT and HR teams
• Reduced support load

---

​

 AppStore

​

Flexible Approval Workflows (Early Access mid-November)

Build dynamic, attribute-based, multi-stage approval flows to adapt to any access scenario. What’s new:

• Conditional logic with AND/OR rules using user attributes and custom fields
• Unlimited approval stages
• Reordered or conditional manager approvals

Benefits:

• Enforce risk-based routing (e.g., contractors → extra review)
• Shorten approval cycles by skipping unnecessary steps
• Strengthen compliance alignment

---

​

Integrations

​

New Integrations

New integrations with Dynamics 365, Microsoft Teams (User Management), GitLab Self-Hosted, Jira, and Monday.com are now available. Benefits:

• Broader system coverage for provisioning
• Streamlined access visibility and automation across apps

​

Existing Connector Enhancements

Improvements across key integrations:

• Workday: Sync contingent workers and additional attributes
• Salesforce: Support for account creation/update with custom fields
• Slack: Add users to channels via provisioning
• Snowflake: Added Key/Pair auth
• Entra ID (Azure AD): Read-only mode support

Benefits:

• Greater flexibility in complex environments
• Enhanced visibility and lifecycle automation

---

​

Platform

​

Incremental Syncs (Beta)

Lumos can now sync identity and account data incrementally - refreshing every few hours instead of once per day. Note, only accounts and attributes are synced, not entitlements or activity data. Benefits:

• Real-time onboarding and deprovisioning
• Reduced operational delays
• Minimal performance overhead

​

AI-Generated Expressions

Admins can now write conditional logic in plain English, and Lumos automatically converts it into valid Lumos Expressions syntax. Benefits:

• Faster integration setup
• Fewer configuration errors
• Lower learning curve for new admins