Release Notes April 15, 2026

Enhancements & Connectors

Dynamic Workflows for LCM

Introducing a new orchestration engine that lets administrators design, visualize, and automate the full identity lifecycle without writing code. Joiner, Mover, and Leaver scenarios are now fully configurable through a graphical workflow builder that supports branching logic, conditional execution, approvals, scheduled waits, notifications, and provisioning actions across the applications Clarity already manages.

Please note: rollout is gated behind a feature flag so customers can adopt it on their own timeline. Please let your customer support rep know if you’d like to start working in the new experience.

• Workflow authoring. A refreshed configuration UI makes it easier to assemble multi-step automations from a library of reusable actions — including Provision User, Provision Entitlement, Provision Specific Application, Provision All Remaining, Deactivate All Accounts, Send Email, Wait, Request Submission Approval, Identity Creation Approval Request, Store Identity, and Jira-in-a-Box. Workflow templates give teams a curated starting point for the most common lifecycle patterns, and workflow URLs resolve by name so bookmarked links always open the latest version.

Embed Image: https://drive.google.com/file/d/1uluXyE-rT3tcLyWLFW3ypyeiDEBFPVRS/view?usp=sharing 

• Powerful branching. The Branch action (renamed from Match) now supports date comparisons, value interpolation, array-field matching, and multi-path execution so a single event can drive every applicable path rather than stopping at the first match. Condition skip actions correctly bypass downstream steps, and identity approval outputs cover both approval and denial paths for precise routing.

Embed Image: https://drive.google.com/file/d/1Jxv92kdQJs-5vDbVssILU--9aUBHx7RS/view?usp=drive_link 

• Reliable triggers. Joiner workflows run automatically when identities are created through app syncs, onboarding submissions, or manual admin creation. Mover workflows now fire only on material identity changes, with improved detection for attribute changes and ABAC-driven updates. Leaver workflows execute every configured termination action end to end, including deprovisioning across archive states, and contractor expiration handling is tuned so leavers trigger only when appropriate.

• Better execution visibility. Execution details include email context for easier troubleshooting, workflow failure alerts route correctly, Lifecycle Management alerts complete in a single action, and step-level failure messages surface clearer error context. Child action failures no longer terminate the parent workflow, and Create User, Provision User, Deactivate All Accounts, and Send Email steps all received substantial reliability improvements.

Embed Image: https://drive.google.com/file/d/19SDG5KVgil-zrOz41R7G3fcCZSVhHXur/view?usp=drive_link 

• Builder quality-of-life. Zoom and pan position are preserved when adding actions, dependency lines can be adjusted after creation, mandatory fields are enforced before save, the Entitlements picker and Application filter behave predictably, email and step-name fields render in full, and the trigger event UI is clearer. ABAC-aware provisioning integrates directly into Provision User and Provision Entitlement steps.

Dashboard EnhancementR

Identity type count widget is now available on the main dashboard for at-a-glance population insights.

Connector Improvements

• ClarityConnect Scripts: Added Exchange username and password configuration on SSH script hosts for Exchange automation.

• ClarityConnect Scripts: Added prebuilt Convert to Shared Mailbox script accepting lists of delegated users.

• ClarityConnect Scripts: Added prebuilt Reassign Shared Mailbox script.

• ClarityConnect Scripts: Added prebuilt Scramble Active Directory Password script for offboarding.

• ClarityConnect Scripts: Improved SSH connection handling and test-connection reliability on Windows hosts.
  

Minor Bug Fixes

What Was Fixed: Improved ABAC reassessment to trigger correctly when attribute construction changes.

What Was Fixed: Entitlement-based deprovisioning now attempts deprovisioning regardless of the archive status for more reliable offboarding.

What Was Fixed: The tag builder column sorting now works as expected.

What Was Fixed: Column reordering now works consistently across ABAC tables.

Date of Release: April 15, 2026
Version: 1.7.6.0