New features summary
6 min
These are cumulative release notes. If a release does not appear in this section, then there were no associated new features and enhancements.
Product nomenclature: This is cumulative documentation and the product names you encounter in this documentation were accurate at the time of publication. Ivanti updates each new section to reflect evolving product nomenclature, but leaves legacy citations intact to ensure proper frame of reference for the reader.
- Fastlane and SIRP dependency updates: Updated Fastlane and replaced the SIRP dependency with the Fastlane-maintained variant to improve compatibility with current App Store Connect and build tooling requirements, while resolving dependency installation conflicts introduced with the newer Fastlane 2.238.0 version.
- Apple sign-in authentication update: Secure Remote Password (SRP) is now the default Apple sign-in method, and the previous Apple login method has been removed.
- Apple age-rating questionnaire updates: Added support for Apple's new age-rating questionnaire questions, Social Media and Social Media Disabled for Users Under 13, enabling publishers to provide the required responses for apps that include social media capabilities.
- Improved Apple session renewal reliability: Added a fallback widget key to ensure Apple certificate sessions can be renewed when the Apple configuration service is unavailable. The system automatically returns to using the Apple service when it becomes available.
- Apple session proxy support: Added support for configuring a proxy server for Apple sign-in and session validation. Administrators can manage the setting from the admin portal. The proxy applies only to Apple-related requests, validates entered values to prevent configuration errors, and records all changes in the audit history.
- SDK compatibility checks for incapptic Tool - Prevent (IPA) uploads: Added configurable minimum iOS SDK validation for IPA uploads to help prevent app update issues caused by unsupported SDK versions.
- Configurable Team ID validation for IPA uploads: Added support for configuring Team ID validation during IPA uploads. Administrators can now disable Team ID mismatch checks when required, allowing uploads to proceed for both re-signing and non-re-signing apps. The update also improves Team ID mismatch error handling by displaying the correct validation dialog for non-re-signing apps.
By default, the DISABLE_IOS_TEAM_ID_CHECK setting is disabled and can be configured in the admin portal.
Target Management features
- Delegated space support for incapptic publishing: Added support for preserving and applying Space Delegation settings when publishing app versions to Ivanti Neurons for MDM. Users can choose to Delegate this app to all spaces so users in delegated spaces continue to receive app updates without disruption or choose Do not delegate this app so it follows the existing publish behavior. If no option is selected, Do not delegate this app is applied by default.
- Android bundle ID mismatch handling: Improved Android APK upload handling when the uploaded APK bundle ID does not match the app’s registered bundle ID. If no published versions exist, users can now review the mismatch, update the app bundle ID to match the APK, and continue publishing without creating a new app. If published versions already exist, the upload continues to be blocked to protect existing app records.
- VMware AirWatch Organization Group selection enhancements: Added a dedicated Save Organization Groups button to the VMware AirWatch Organization Group selection page, with clear status indicators for unsaved changes, saving, saved, and failed states. The update also improves reliability by preventing accidental saves, preserving confirmation messages during navigation, and allowing users to retry failed saves without losing their changes.
- Google Play supported countries guidance: Added a note in the Google Play app metadata tab to inform users that Supported Countries must be entered manually in the Google Play Console. This guidance is available in the Languages & Countries section and aligns with the existing guidance for Apple App Store apps.
We are currently unable to send this data to Google Play. It needs to be entered manually in the Google Play Console.
General features and enhancements
- OAuth2 support for custom email service accounts: Added support for sending email through custom service accounts using OAuth2 authentication, helping customers meet modern authentication requirements for shared mailboxes.
- OAuth2 and Microsoft Graph support for email notifications: Added support for secure email notification methods in Azure environments, including OAuth2 authentication and Microsoft Graph API delivery. The email method can be configured per environment using EMAIL_AUTH_METHOD, with credentials stored securely in the encrypted vault, while regular SMTP email sending remains the default for existing setups.
Set EMAIL_AUTH_METHOD to smtp, oauth2, or graph to choose the required email authentication mode without code changes.
- Binary Upload API v2 enhancements: Added a dedicated resource-oriented API Upload for programmatic binary uploads. The new API supports upload job lifecycle management, real-time progress tracking, duplicate upload prevention, interrupted upload recovery, retry without re-uploading the binary, and structured error responses for automation and CI/CD workflows. For more information, see Uploading binary files to Ivanti incapptic Connect through an API.
- Duplicate user prevention and login handling: Improved duplicate account prevention for IDM-created users and case-variant email addresses. Login handling has also been improved to return clear responses instead of server errors when duplicate records already exist.
Existing duplicate accounts are not automatically deleted or merged. Administrators must review and clean up duplicate records manually.
- Sync with Apple WWDC 2025 App Store changes: Starting from this release, incapptic Connect aligns with the latest Apple WWDC 2025 updates to the App Store Console. This change includes the following:
- New accessibility configuration screens
- Updated age-rating options (13+, 16+, and 18+)
- Integration of new age-rating questions directly from the Apple Developer Portal.
Although these updates are supported, inline warnings are provided in the interface to help identify potential discrepancies during submission.
- macOS Apple Silicon (ARM) deployment support using Ansible: Ansible now supports automated deployments on macOS Apple Silicon devices (M1, M2, M3, and M4). Ansible automatically detects the underlying architecture for ARM or Intel systems.
- Streamlined Data Migration: Starting from this release, we have enhanced data migration capabilities through Ansible-based installation. You can now seem less migrate databases and critical assets, including iOS and Android setup files, keystores, certificates, and app screenshots.
- macOS Compatibility enhancements: Starting from this release, incapptic Connect fully supports both Apple Silicon and Intel-based systems.
- Apple Silicon devices now support the latest macOS 26, ensuring compatibility with Apple’s newest platform updates.
- Intel-based Mac models now fully support macOS Sequoia (version 15), aligned with Apple’s latest compatibility standards.
- Backward compatibility for Intel upgrade: Starting from this release, we ensure full backward compatibility for Intel-based systems during upgrade path. Application installation and upgrade processes continue to work seamlessly on Intel chipsets, allowing customers to upgrade confidently without impacting existing Intel deployments.
- Updating Fastlane: The Fastlane library must be updated to version 2.228.0 in order to authenticate with Apple ID. For more information, see Ivanti incapptic Connect OS Upgrade to macOS 15.x.
- macOS 15.x Support:: Ivanti incapptic Connect now supports macOS 15.x (Sequoia). For more information, see Ivanti incapptic Connect OS Upgrade to macOS 15.x.
macOS 13.x has reached end-of-life in September 2025. You must upgrade Ivanti incapptic Connect OS to macOS 15.x.
- Updating Fastlane: The Fastlane library must be updated to version 2.225.0 in order to authenticate with Apple ID.
- Enhancement to Renew Session: The Apple ID authentication endpoint is decommissioned by Apple and has resulted in the Renew Session and Modify session to not function. Apple introduced Secure Remote Password (SRP) authentication mechanism and we have integrated it into incapptic Connect in this release. As a result, the session workflow is as follows:
- Renew Session: If the session expires, it needs two-factor authentication for the session renewal.
- Modify: Workflow remains unchanged.
For this enhancement, you must upgrade to Xcode 14.2 or above.
For more information about Xcode Version Update, see Ivanti incapptic Connect OS Upgrade.
- Changes to provision profile expiry notification email: Starting from this release, all Ivanti incapptic Connect users receive provision profile expiry email notifications for unsigned binary file.
- Change in Apps page status column: Starting from this release, the Status column text displayed on the Apps page for applications that are associated with multiple instances of a specific target is now a consolidated summary of actions performed on the targets, rather than displaying the latest action performed. The status message includes the number of targets for which the app was successfully published, failed publishing, and total targets count.
- New internal knowledge base link while adding New app and at Help & Support: The Ivanti incapptic Connect users who have authority to access and configure the Ivanti incapptic Connect Settings page (Administration > Settings) can configure the Display Internal Knowledge Base Link in the given field. This link configured on the Settings page will display in two places on incapptic Connect, as follows:
- While creating a New App, on the Please select platform pop-up window.
- Help & Support pop-up window. This will enable users to refer to knowledge base links and pages. For more information, see Settings.
- New email notification when apps published to targets: Ivanti incapptic Connect now sends out an email to the owners and developers of the application, notifying them whether an app version is successfully published or failed to publish to the specified target.
- New last login field added to CSV file: Starting with this release, you can now see the user’s last login field in the user report CSV file downloaded from the Users page. The field contains the following details: Date - DD MM YYYY Time - HH: MM in a 24-hour UTC time zone
- Support for publishing iOS apps using Perform Resigning drop-down: Ivanti incapptic Connect now allows you to publish iOS apps by selecting No in the Perform Resigning drop-down. For more information, see Perform resigning.
- Enhancement to incapptic Connect macOS 13.x: Ivanti incapptic Connect instances (host and VM) macOS can be upgraded to version 13.x (Ventura) from 12.x (Monterey). For more information, see Ivanti incapptic Connect OS Upgrade to macOS 13.x.
- Enhancement in the Google data safety form: Google updated the data safety form and included new questions under the security and data collection sections. To accommodate these new questions, Ivanti incapptic Connect updated the Google Play Target data safety form with new questions and changed the CSV download feature. For more information, see Data Safety.
- Change in advance tab name: The Advanced tab name in the incapptic header menu is changed to Administration.
- New Retry button in the 3rd Party Audits: The 3rd Party Audits now has a Retry button to re-trigger the scan in case of a previous failure.
- Enhancement in App Content: Starting with the 1.47 release, the Google Play content rating declarations contain Financial Features and Advertising ID. These declarations need to be filled out while creating the first version of the application in Google Play Target.
- Enhancement in the content rating category: Ivanti incapptic Connect is aligned with the new changes to the Google Play content rating declaration and related forms. The content rating category that was previously selected will be present in Google Play apps that are already available, and apps that are generated going forward must use one of the new categories. For more information, see Content Rating.
- Change in Provision profile expiry notification email template: The Provision Profile Expiry Notification email now contains a Note as follows:
- If your application has reached its end of life, kindly submit a request for deactivating the app.
- If you are planning a new app version, please submit new app version.
- If you plan to use existing app, please clone the existing app version.
- New Filters and actions added to the app dashboard: The app dashboard now has the provision to filter the apps using the Filters button. Using the filter button, the platform, target type, environment, application status, certificate expiration, and last activity are filtered. Admin users have the provision to perform actions on selected apps, such as retire and delete. For more information, see Filters in App dashboard.
- Enhancement in role assignment to customize role type: When you invite a new user, the system automatically assigns the invited user to the developer role by default. Now, incapptic Connect allows setting customized role types for new users invited through the existing application permissions tab.
- Support for upload attachments in the reject version window: Ivanti incapptic Connect now supports uploading attachments while rejecting any specific app version. For more information, see Rejecting an application.
- Enhancement in target connection check for all targets: Starting from the current release, users who have the CAN_EDIT_TARGETS permission will receive an email regarding unauthorized connections to targets due to expired credentials.
- New column added on the Target page: The Target page now contains a new column – Platform Enabled. The Platform Enabled column displays whether the application supports iOS, Android, or both.
- Capability for incapptic users to set a threshold limit: Ivanti incapptic Connect users can now set a threshold limit for system free disk space from the Ivanti incapptic Connect: Advanced tab > Settings.> Disk Space Settings. If the system free disk space is less than the threshold limit, the admin user receive an email once a day, and a banner message appears on the Ivanti incapptic Connect. The banner message and email can be disabled as follows:
- The incapptic user can increase the value in System Overview and Licenses
- The incapptic user can increase free disk space by deleting unwanted files, directories, and so on.
- The System Overview and Licences page also displays disk usage information such as Total, Used, and so on.
Enhancement in the user role list: You can view user roles on the User List page in the incapptic portal. If the number of characters in a string for each entry in the table exceeds 30, the incapptic portal truncates the string. You can view the complete information in the form of a tooltip when you mouse over every entry.
- Capability for users to delete audit logs: The incapptic portal now lets you delete audit logs from Advanced > Settings > Audit log setting. The incapptic portal automatically deletes audit logs that range from 30 to 365 days. The admin page has the follow new tags:
- MAX_DAYS_LOGS_RETAINED: Specify the number of days to delete the audit logs.
- Range: 30 to 365 days.
- Audit logs older than the number of days specified in the tag are deleted. The daily deletion of audit logs occurs at 1:30 p.m of system time.
- Support to publish iOS apps on TestFlight:The incapptic portal now lets you publish iOS apps on TestFlight. For more information, see https://help.ivanti.com/mi/help/en_us/cnct/1.x/dvlpr/Userguide/process_for_appstore_testFlight.htmAppStore TestFlight .
Only iOS apps that have AppStore as their target store can use this functionality.
- Support for incapptic administrators to disable file size checks: Starting from the current release, the Ivanti incapptic Connect lets administrators use the following configurable switch to disable the upload file size check for users: DISABLE_GOOGLEPLAY_BINARY_SIZE_CHECK
- The switch has the following values and is set to False by default:
- False - When set to false, Ivanti incapptic Connect users can upload files with the following limit:
- AAB files up to 150 MB
- APK files up to 100 MB
- True – If set to True, Ivanti incapptic Connect users can upload the following files:
- AAB files larger than 150 MB
- APK files larger than 100 MB
- Support to upload Google play CSV data safety form: Starting from the current release, users can upload the downloaded CSV data safety form from Ivanti incapptic Connect to Google Play without errors.
- Extended ping status API: The ping API used by admins to get status on the file system, database, and disks of the device on which the Ivanti incapptic Connect is running has been improved. After logging in to Ivanti incapptic Connect, change the browser URL to http://<Target_IP_Address>:8000/ping-me.
- Zimperium scan improvement: Ivanti incapptic Connect now supports AAB for Zimperium scans. A consolidated report with scan results is available in the app version details under the 3rd Party Audits section.
- Zimperium reports: A Zimperium report issue was fixed and the scan report is now available for download in the Ivanti incapptic Connect.
- Google Play app versions: Google Play targets that use the Managed Google Play option will no longer cause an API level validation error.
- Disk space check: Added a precondition that can check for available disk space before uploading new applications. These two switches can be found under "CONNECT -> Configurable settings" on the admin page. Use the "ADD CONFIGURABLE SETTING+" button to add these switches.
- CHECK_SYSTEM_MINIMUM_SPACE switch info: Value : "True" or "False" Description: To enable or disable a system disk space check before trying uploading application binary/metadata.
- SYSTEM_MINIMUM_SPACE_IN_GB_TO_UPLOAD_BINARY switch info: Value : Can be from 1 to the max limit of the system's disk space Description: This value will be used to check if the system has free space greater than or equal to the amount specified before uploading binary/ metadata. This value must be an integer, i.e., 1, 4, 8, 15, 20, 100, etc.
There is no need to include "G" or "GB" in value field of this switch.
- Neurons MDM assignments: For apps with a Neurons for MDM target, the assignments are now copied automatically after publishing when the app setting Auto distribution on publish is set.
- Rebranding: incapptic Connect has been re-branded to Ivanti incapptic Connect.
- Target options: Targets can now be added, edited, and deleted in the incapptic Connect user interface. These options require the can_edit_targets permission.
- When adding targets, you can update the credentials on the target details page.
- When editing target details, you can also modify options for iOS enabled and android enabled features.
- The target to be deleted should not be associated with any apps, otherwise a list of apps associated with it are displayed and an option to retire them is given.
- New report columns: The app overview report now contains Target Type and Target Name columns when downloaded from the Reports tab in the user interface.
- Automatic device assignments: Device assignments done to an app version in Neurons for MDM are automatically populated to the upcoming versions uploaded through incapptic. This is enabled through the "automatic distribution" switch present in the Neurons for MDM settings in the app details page.
- Email notifications: App owners will now receive an email when an app is retired.
- Support for 6.7" screenshots: This release supports uploading and publishing 6.7” screenshots for iOS apps. A new tab (iPhone 6.7") was added in incapptic DEV Connect page > 3rd Party Audits > Localizable Metadata > Graphic Assets.
- Rebranding: In the user interface, references to "MI Core" and "MobileIron Core" were rebranded to "Ivanti EPMM", and references to "MI Cloud" and "Mobileiron Cloud" were rebranded to "Ivanti Neurons for MDM".
- Support for Failed publishing entry: This release supports the display of Failed publishing entries in the Google Play apps logs.
- App Overview page enhancements: The App Overview page > Apps menu now displays the Target Name and Bundle Identifier. To change the column display or hide columns, contact incapptic Connect Support.
- Support for VMware Workspace ONE enhancements:
- Seamless app publishing and app status display.
- Verification that an app is fully published before allowing the app to be retired.
- More robust information in log files (problem analysis, API call failures).