1Password SaaS Manager

New

• AI Assistant (public beta): You can now ask questions about app risk levels.
• Access policies: You can now create policies that provide temporary access only, without requiring an unlimited access duration.
• App catalog: You can now assign a team as the owner of an application.
• People: You can now set or clear custom person fields directly from a person’s profile, including number fields with a value of 0.
• Workflows: You can now create a person or update an existing person with the same email address in a workflow.
• Workflows: You can now trigger a remediation workflow when another workflow step fails.
• Public API: Contract responses now include the main application associated with each contract.
• Kolide: You can now connect to Kolide’s EU region.

Improved

• AI Spend and Consumption: Added a time increment picker to the consumption chart, making it easier to switch between different levels of detail.
• AI Spend and Consumption: Added automatic usage-data retention. Daily usage data is retained for one year, and monthly usage data is retained for five years.
• Access policies: Policies for specific people and teams now take priority when SaaS Manager orders matching policies.
• Workflow runs: Added row-selection checkboxes to make multi-edit actions easier to use.
• Workflow runs: Added the external ID that triggered a workflow to the corresponding workflow step.
• Workflows: The Set account groups step can now use values from custom text fields on a person.
• Dayforce: Employee start dates now use the hire date, with the original hire date available for organizations that need it.
• Employment Hero: Updated the connection flow to use PKCE with S256, as required by the provider.
• BambooHR: Division values can now be mapped to the Team for Later app.
• Reftab: Improved validation and handling of purchase date and net price values.

Fixed

• AI Assistant: Fixed contract expiry filtering. Questions about contracts expiring within a relative date range now return matching results, and “View contracts” applies the requested date filters.
• AI Assistant: Fixed an issue where access request date filters could be lost when navigating from search results. Links now open the relevant access request with the selected filters preserved.
• Contracts: Fixed an issue that prevented contracts with tax from being saved.
• Access requests: Requests for people who have been deleted are now canceled instead of failing when someone tries to process them.
• Access requests: Custom fields now appear when they’re available for the selected access level.
• Access request tasks: Replies to Slack notifications now generate follow-up task notifications instead of being ignored.
• Workflows: API request steps now handle responses with UTF-8 character set values correctly.
• Workflows: API request steps now correctly use values from fields when the field ID isn’t the default.
• Workflows: The App Name field is now populated for deprovisioning task triggers.
• Workflows: Fixed an issue where new on-demand context selections weren’t saved.
• Workflows: Fixed the “List current person’s apps loop” step.
• Workflows: Deprovisioning steps now retain their application or integration association when edited.
• Workflows: Validation errors for invalid email addresses now provide clearer feedback and preserve line breaks.
• Exports: File names are now escaped correctly when downloading exported files.
• Slack: Provisioning now handles usernames that exceed Slack’s length limit and provides a clearer error message.
• WPS Office: Fixed activation failures caused by request validation and response parsing. Long job titles are now handled correctly.
• 1Password Audit Log: Fixed jobs that failed with an “Invalid URL” error.
• Reftab: Fixed an issue where an empty net price value could cause integration processing to fail.