Skip to main content

[Feature]: Optional session-id header for session management

  • This release introduced an optional header parameter called session-id which will help manage the sessions better.

Additional details can be found in the session documentation.

Bug Fixes

  • VC Session Recovery After Browser Back Navigation
    Fixed an issue in the Variant Configuration UI where navigating away with the browser back button could leave an orphaned SAP session. Returning to the configurator could then fail with a session-related error. The application now closes and recovers sessions correctly so VC can be reopened reliably.

Get it here: v9.6.29

🚀 arnold™ 0.7.3

enosix arnold™ Plugin for Microsoft 365 Copilot Cowork

What it is

The enosix arnold™ plugin is now available for Microsoft 365 Copilot Cowork, enabling users to securely access live SAP ERP data and execute SAP business workflows directly from the Microsoft 365 Copilot experience. Users can install the plugin from Microsoft AppSource, authenticate with their arnold environment, and interact with SAP using natural language—all without leaving Microsoft 365.

What you can do

Using the enosix arnold plugin together with Microsoft 365 Copilot Cowork, users can:

  • Retrieve real-time SAP business data using natural language
  • Search sales orders, deliveries, invoices, quotes, customers, inventory, and other SAP business objects
  • Update supported SAP business transactions through governed approval workflows
  • Automatically draft customer emails from Cowork using live SAP information
  • Generate Excel worksheets populated with SAP data for analysis and reporting
  • Create Word documents, summaries, or customer reports using real-time SAP data
  • Prepare PowerPoint presentations using the latest SAP business data
  • Share updates directly in Microsoft Teams without manually copying information between systems

Why it matters

Microsoft 365 Copilot Cowork works across Outlook, Teams, Word, Excel, PowerPoint, SharePoint, OneDrive, Calendar, and other Microsoft 365 services, allowing users to combine enterprise SAP data from arnold with the Microsoft applications they use every day. Instead of switching between SAP and Microsoft 365, users can complete end-to-end business tasks from a single AI-powered workspace—for example, retrieving a sales order from SAP, creating an Excel report, drafting a customer email with the latest order status, and sharing updates with the sales team in Teams. All actions remain governed by Microsoft 365 approval, security, and compliance controls.

Watch the demo: Arnold + Microsoft Copilot Cowork Demo

Microsoft 365 Copilot Cowork

🔗 Improved Client App & Connection Management

What it is

Client Apps can now only be associated with active connections. Disabled or inactive connections are automatically excluded during Client App configuration, preventing unsupported or invalid assignments.

Why it matters

  • Eliminates configuration errors before deployment
  • Simplifies Client App administration
  • Prevents integrations from referencing unavailable connections
  • Reduces support and troubleshooting effort

👤 Smarter Authentication & User Validation

What it is

Authentication has been refined to better distinguish between active users, inactive users, and unknown users. arnold now applies the appropriate authentication flow for each scenario, providing clearer portal behavior while eliminating incorrect warnings generated during sign-in.

Why it matters

  • More accurate user validation
  • Improved security and audit accuracy
  • Cleaner system logs
  • Better administrator visibility into actual authentication issues

🚀 arnold™ 0.7.2

arnold™ 0.7.2 focuses on improving security, operational reliability, and enterprise readiness. This release strengthens authentication and authorization workflows, improves distributed infrastructure support, and delivers more resilient deployment and maintenance operations.


🔒 Stronger Security & Access Controls

What it is

Security has been enhanced across credential management and authentication workflows. Access to the My Credentials page is now restricted to authorized users, credential actions are automatically disabled when a connection is inactive, and Dynamic Client Registration (DCR) consistently requests User Consent during onboarding.

Why it matters

  • Prevents unauthorized credential access
  • Eliminates invalid credential operations on inactive connections
  • Ensures consistent consent and authorization during client registration
  • Improves compliance with enterprise security requirements

🚀 Enhanced Scalability with Distributed Caching

What it is

arnold now supports multiple arnold application instances.

Why it matters

  • Improved scalability for multi-node deployments
  • More consistent user sessions and application behavior
  • Better performance under higher workloads
  • Increased resilience in cloud-hosted environments

Bug Fixes

  • VC message ignore filtering now applies correctly Fixed an issue where configured VC message numbers to ignore were still appearing in logs. Matching messages are now filtered correctly in VC-UI.

  • Finalize stays disabled until debounced VC updates complete Fixed an issue where Finalize could become available before the last debounced VC request/response cycle completed, which could allow premature finalization.

  • Radio selections no longer trigger duplicate VC Process calls Fixed an issue where selecting a radio option triggered VC Process twice and could clear the selected value.

  • Reset no longer clears SAP-calculated values Fixed an issue where Reset could erroneously clear SAP-calculated values.

Get it here: v9.6.22

🚀 arnold™ 0.7.1

🔗 Simplified Connection Management

A new dedicated Connections tab has been added to Arnold Portal, providing a centralized location for managing SAP and application integration connections — including OAuth configuration, callbacks, and connection validation.

Why it matters

  • Simplifies administration and onboarding with a single place to manage all connections
  • Reduces time spent configuring and validating integrations
  • Improves visibility into connection health and OAuth settings
  • Helps organizations scale AI initiatives more efficiently

🧪 Enhanced MCP Tool Testing

The MCP Tool Tester in Arnold Portal has been improved with a cleaner tool selection experience, making it faster to validate and troubleshoot AI integrations.

Why it matters

  • Tool selection now uses a dropdown instead of a full list, reducing clutter and improving usability
  • Accelerates testing and deployment of MCP tools
  • Improves visibility into tool behavior before production rollout
  • Helps teams deliver AI-powered experiences with greater confidence

🔐 Security Improvements

This release includes critical security enhancements to protect your data and integrations.

Why it matters

  • Inactive users are now properly denied access to Arnold Portal and all MCP endpoints
  • PDF download requests now require valid OAuth credentials — if credentials are missing, users receive a clear prompt to authorize in the portal rather than a silent failure
  • Your integrations are better protected against unauthorized access

📄 Document Download Reliability

PDF document downloads have been refactored to behave consistently and provide clear feedback when a document is unavailable.

Why it matters

  • PDFs are now always fetched before determining how to deliver them (inline or via URL), ensuring consistent behavior regardless of the configured download mode
  • A clear error is returned when a document cannot be found, eliminating silent failures that could mask configuration issues
  • Improves troubleshooting and reduces support burden

🛠️ Admin & Integration Enhancements

The portal includes several improvements for administrators and integrators.

Why it matters

  • An OAuth authorization server metadata link now appears next to Client Credentials, giving administrators quick access to endpoint details needed for manual client registration and configuration
  • All MCP tools are now explicitly marked as read-only or write operations, helping AI agents and integration clients distinguish safe queries from operations that modify data
  • System information can now be retrieved using user-level credentials alongside tenant credentials, improving flexibility in mixed-credential environments
  • The Test Connection button is now only enabled when the appropriate credentials are configured, reducing confusion during setup
  • Inactive clients are no longer shown on the Dashboard, keeping the admin view accurate and uncluttered
  • Client creation validation now correctly checks the user's original input before trimming, ensuring names are validated as entered

Bug Fixes

This release corrects the behavior of the sanity-check URL for two scenarios:

  • The endpoint must be enabled in the API proxy with the SanityCheckEnabled variable with the value of true.

  • The endpoint now correctly handles the SAP client value.

Read more about the SAP client feature at the feature documentation.

Enhancements

  • VC-UI read-only mode support for variant materials Added support for automatically loading VC-UI in read-only mode when SAP indicates a variant context, plus the Force Read Only AppSetting to force read-only mode under display settings when needed.

Bug Fixes

  • VC reset button visibility consistency Fixed VC item behavior so the Reset button is consistently available.

Get it here: v9.6.12

The enosix team has completed testing to ensure compatibility of the latest enosix apps with the Salesforce Summer ‘26 release. Below are the key details of the testing process and outcomes:

Testing Highlights

  • Regression Testing:

    • Tests were executed to validate functionality and compatibility.
  • Products Tested:

  • Mobile App Compatibility:

    • The Surface app was tested in the latest version of the Salesforce Mobile app.

Testing Scope and Outcomes

  1. Sync for Salesforce v1.3.4:

    • Validated real-time data synchronization between Salesforce and SAP.
    • Ensured consistent performance across core use cases, including object synchronization and data accuracy.
  2. Surface v2.8.1:

    • Confirmed compatibility with the Salesforce Sales app.
    • Verified Lightning components function in the Salesforce Mobile app.
  3. SDK v1.7 + Cloud-UI:

    • Verified the ability to configure a material/product and update the price on a quote line item using Cloud-UI in CPQ.

Results

  • Compatibility Confirmed: All tested products are fully compatible with Salesforce Summer ‘26.
  • No Critical Issues Identified: Testing revealed no blockers or critical issues.

The enosix team remains committed to ensuring our solutions deliver seamless integration and superior performance. For any questions or support, please contact our team.

Support portal: https://go.enosix.com/support

[Feature]: Swagger API Testing Security and Usability Improvements

  • This release introduces API testing using a secured API key in Swagger API documentation.

  • Swagger now supports API key authentication. Users can authenticate in Swagger using the API key flow. This aligns interactive documentation with how protected APIs are actually secured.

  • Swagger “Try It Out” can be controlled by configuration. Teams can enable or disable Swagger’s live testing capability per environment. This helps keep production documentation visible while preventing unauthorized test execution.

Detailed documentation can be found here: Swagger UI