> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oleria.com/llms.txt
> Use this file to discover all available pages before exploring further.

# What's new

> New features, integrations, and improvements to the Oleria platform.

<Update label="August 2026" tags={["Integrations"]}>
  ## Integration Studio is now generally available

  Integration Studio has moved from preview to general availability - no longer off by default, and no need to reach out to enable it. Connect any app with a documented API without waiting on an engineering cycle: an AI research agent reads the API, drafts a connector manifest, and hands it to you to review and connect.

  See [Integration Studio](/integrations/integration-studio) for how it works.
</Update>

<Update label="August 2026" tags={["Governance"]}>
  ## Custom access requests

  Not every access request runs through your governance program - an internal tool, an app you haven't integrated, a one-off action nobody built a workflow for. Custom Access Requests close that gap: define the form, choose the webhook that provisions and revokes access, and it runs through the same approval and audit trail as everything else.
</Update>

<Update label="August 2026" tags={["Governance"]}>
  ## Approval chains

  Not every access decision needs the same scrutiny. Approval Chains let you define the right review process for each request - one sign-off, or a chain through a manager, data owner, and security lead - with approvals that are manual, auto-approved by policy, or AI-assisted.
</Update>

<Update label="August 2026" tags={["NHI"]}>
  ## A 360-degree view of NHI governance

  See lifecycle, credential, access footprint, and impersonation data for any non-human identity in one place, instead of piecing it together across separate systems. Privilege levels, scopes, and permissions are visible alongside it, so exposure and impact are clear at a glance.
</Update>

<Update label="August 2026" tags={["NHI"]}>
  ## NHI credential expiry workflow

  Catch NHI credentials before they expire, so the integrations and automations that depend on them don't break. Owners are notified with enough runway to rotate the credential, and if nothing happens the alert escalates to a manager or admin - so an expiring credential never slips through unnoticed.
</Update>

<Update label="August 2026" tags={["API"]}>
  ## The Oleria API is live for customers

  The API Reference is live, covering the full identity and access graph instead of a single endpoint. It documents the core resource types (accounts, employees, departments, roles, non-human identities, and more) along with the relationships between them, plus the TrustFusion query engine and Downloads.

  * Non-human identities are a first-class resource - list and read them the same way as any other identity type, not as a separate bolt-on.
  * Every object and relationship endpoint documents its scope requirements directly, so you can request access with the right permissions the first time.
  * The OpenAPI spec backing this reference stays in sync with the platform automatically, so the docs won't drift from what the API actually returns.

  See the [API Reference](/developer-docs/api-reference/overview) for the full list of resources.
</Update>

<Update label="July 2026" tags={["Governance"]}>
  ## Just-in-time access requests

  Standing access is a standing risk. Access Requests grants access the moment it's approved and automatically revokes it when the request expires, so access no longer lingers after the need is gone. Every request is fully audited.

  See [Access Requests](/governance/access-requests) for how it works.
</Update>

<Update label="July 2026" tags={["Governance"]}>
  ## Access bundle presets

  Deciding how to group employees and what access each group needs is the hard part of an access bundle. Presets do it for you - ready-made bundles built from employee attributes like department, title, and manager, so you can roll out least-privilege access on day one without starting from a blank page.

  See [access bundle presets](/governance/access-bundle-presets) for how it works.
</Update>

<Update label="July 2026" tags={["Posture"]}>
  ## Shadow IT detection workflow

  Unsanctioned SaaS applications are now caught the moment they show up. IT owners get routed visibility - including an auto-created ticket - so unmanaged apps get a decision instead of quietly becoming part of the stack.

  See [Application Hygiene](/governance/application-hygiene-overview) and the [Detect and report Shadow IT workflow](/posture/detect-report-shadow-it-workflow) for how it works.
</Update>

<Update label="July 2026" tags={["NHI"]}>
  ## NHI ownership workflow

  Every non-human identity now gets a clear, accountable human owner, established in a fraction of the time it used to take. Oleria suggests the most likely owner automatically, with human confirmation always required before it's final.

  See [NHI ownership assignment](/posture/nhi-ownership-assignment-workflow) for how it works.
</Update>

<Update label="July 2026" tags={["Integrations"]}>
  ## New integrations: GCP Secret Manager, DocuSign, and more

  Several integrations shipped or expanded this quarter:

  * **Google Cloud Platform** integrations now discover Secret Manager secrets as non-human identities and analyze their access graphs, without ever reading secret values.
  * **DocuSign** moved from generic SCIM coverage to its own dedicated integration, governed under the same workflows and policies as every other connected system.
  * **Atlassian Cloud** and **Slack** now support governance actions (not just read-only visibility) where the connected app's permissions allow it.
  * **GreytHR** and **Cursor** joined the application catalog.
  * SCIM 2.0 provisioning for Oleria workspace users themselves - connect your identity provider to provision workspace users, map groups to roles, and deprovision access automatically as your directory changes.

  See the [integrations overview](/integrations/overview) for the full list of supported applications.
</Update>

<Update label="June 2026" tags={["NHI"]}>
  ## AI Gateway (preview)

  AI agents are starting to take real actions across your environment, which means they need the same access controls people do. AI Gateway brokers what an agent can do at the moment it acts, enforcing least privilege for non-human identities in real time instead of trusting standing credentials. Available as a preview - off by default, reach out to enable it.
</Update>

<Update label="June 2026" tags={["Integrations"]}>
  ## Integration Studio (preview)

  Point an AI research agent at an app's API documentation and it ships a governance-grade connector the same day, with you approving every step. These connectors write back, not just read, so you can remove access from day one, and a validator outside the AI checks every draft. Available as a preview - off by default, reach out to enable it.

  See [Integration Studio](/integrations/integration-studio) for how it works.
</Update>

<Update label="June 2026" tags={["Governance"]}>
  ## Access reviews on Active Directory groups

  Nested AD groups hide who can actually reach what. Access reviews now run directly on your AD groups, the same way they already do for your IdP groups, with peer signals surfaced to guide each reviewer's call.

  See [Access reviews](/governance/access-review) for how it works.
</Update>

<Update label="June 2026" tags={["Governance"]}>
  ## Access bundles with adaptive recommendations

  New joiners are now provisioned automatically from your HR system. Instead of building an access list per hire, Oleria recommends a tailored bundle based on comparable peers, and the recommendation sharpens as roles shift - so joiners get least-privilege access from their first login, in minutes rather than weeks.

  See [access bundles with adaptive recommendations](/governance/access-bundles-and-adaptive-recommendations) for how it works.
</Update>

<Update label="May 2026" tags={["API"]}>
  ## Oleria MCP for external AI clients

  The identity intelligence you already rely on now plugs directly into the AI clients your team uses every day - Claude, ChatGPT, Cursor, and any copilot built on the open MCP spec. It's read-only, authenticates through your existing IdP, and inherits the full access graph underneath.

  See [Oleria MCP](/introduction/oleria-mcp) for how to connect it.
</Update>

<Update label="May 2026" tags={["Integrations"]}>
  ## Slack integration

  Slack is one of the most active and most overlooked surfaces in an identity security program. Oleria's Slack integration pairs access data with real usage signals, so over-privileged accounts, dormant users, and behavioral anomalies surface automatically without manual work.

  See the [Slack integration](/integrations/slack) for setup details.
</Update>

<Update label="April 2026" tags={["Posture"]}>
  ## Shadow IT visibility in Governance

  Application Hygiene gives visibility into shadow IT applications - the unsanctioned apps users access outside your approved software catalog. Your security team can see which applications are used without IT oversight, assess their risk, and act before they become a vulnerability. No additional configuration required.

  See [Application Hygiene](/governance/application-hygiene-overview) for how it works.
</Update>

<Update label="April 2026" tags={["NHI"]}>
  ## NHI Posture Overview

  An instant read on the health and risk exposure of every non-human identity in your environment, across service principals, AI agents, PATs, service accounts, and more - surfacing ownership gaps, dormancy, and high-privilege access. Pin and personalize your most-used views, with pre-built options for excessive privileges, broad scope, token credentials, dormant NHIs, AI agent inventory, and unowned identities.
</Update>

<Update label="April 2026" tags={["Posture"]}>
  ## MFA authority and identity provider visibility

  Access Inventory now shows the identity provider used to authenticate each account and the MFA authority enforcing MFA for it, across both SSO and local accounts. Access Inventory also now shows which individuals are designated as owners for each group, so accountability during access reviews is clear and no group is left without an owner.

  See [Using Access Inventory](/posture/learn-access-inventory) for the full list of fields.
</Update>

<Update label="April 2026" tags={["API"]}>
  ## Copilot is now conversational

  Ask follow-up questions, refine your queries, and dig deeper - Copilot remembers the context of your conversation so you don't have to repeat yourself. Powered by the new Oleria MCP, Copilot can answer questions across your entire environment: who has access to what, how they're using it, and what risks to prioritize.

  See [Oleria AI](/posture/oleria-ai) for sample prompts.
</Update>

<Update label="April 2026" tags={["Integrations"]}>
  ## Generic SCIM integration, GCP, Nudge, and Microsoft Teams

  * **[Generic SCIM integration](/integrations/scim)** unlocks identity visibility and governance for any application that supports the SCIM standard, no custom connector required - including Atlassian, Databricks, Intercom, Informatica, Datadog, Zscaler, and over 100 more.
  * **[Google Cloud Platform](/integrations/gcp)** is now supported, extending identity governance to GCP IAM roles and GCS bucket permissions.
  * **Nudge** joined the application catalog.
  * **Microsoft Teams** integration brings governance notifications - pending access reviews and identity lifecycle updates - directly into Teams.
</Update>

<Update label="April 2026" tags={["Governance"]}>
  ## Customizable columns and smarter integration search

  * Every Access Inventory and Governance page now supports customizable columns - choose the fields that matter to your workflow, hide the rest, and arrange them to fit how your team reviews access data.
  * The Integrations page now supports searching by application name and filtering by category (cloud platforms, custom applications, HR systems, identity providers, on-premises applications, and SaaS applications) across the Connected, Available, and Coming Soon tabs.
</Update>

## Contact us

For questions about anything on this page, contact us at [support@oleria.com](mailto:support@oleria.com).