December 2025

Who this is for

Admins and developers tracking monthly changes.

Understand what changed in December 2025 and how it affects setup.

You can identify relevant changes and update your workflows if needed.

Request activity timeline with comments — Added a first-class activity timeline for access requests that records lifecycle events (creation, status changes, ticket/step actions, fulfillment outcomes, and errors) and supports user comments with edit/delete controls for the original author.

Mobile swipe actions for ticket triage — Improved the mobile ticket experience with swipe actions and confirmation overlays to approve, reject (with optional comment), or reassign tickets quickly from the end-user dashboard.
End-user profile menu with My Access and My Profile — Added an end-user profile menu with dedicated pages to view assigned resources (My Access) and identity details/group memberships (My Profile), plus quick navigation to settings and logout.
Mobile-optimized request list and request detail pages — Added mobile-friendly layouts for viewing requests, including an updated request detail experience with expandable per-resource phase details and an in-app option to cancel an in-progress request.

Rate limiting for authentication flows — Added Cloudflare Rate Limiting protection for authentication flow endpoints to reduce brute-force and credential-stuffing risk while failing open safely if rate limiting is unavailable.

Review this month's changes before enabling a new workflow in production.