Torii Product Updates

You can now define words for Torii to ignore when auto-matching expenses to apps, preventing vendor-unrelated terms like acquired company names, cost-center tags, or payment processors from hijacking matches. Configure under Expenses → Matching Rules → Excluded terms.

• Manage your own excluded terms — no support ticket needed
• Whole-word matching so short terms don't swallow unrelated text
• Preview transaction impact before saving any change
• Saving re-matches automatically across affected transactions
• Manually-mapped transactions are never overwritten

Torii now integrates with TeamCity. It syncs a TeamCity server's users along with each user's roles and group memberships.

Read more here

Smart Cost Allocation lets you allocate costs across your entire SaaS portfolio in just a few clicks — define which apps to include and a breakdown dimension, and Torii automatically assigns the right strategy to each app.

• Bulk cost allocation — configure cost allocation across your SaaS portfolio at once.
• Smart strategy selection — Torii automatically picks the right strategy per app based on available data.
• Daily auto-recalculation — allocations stay up to date without manual effort.
• Cost per user for every configured app — apps using Top-down Expenses or Contracts now contribute cost-per-user data to your dashboards.

Note: 'Chargeback' has been renamed to Cost Allocation across the platform, and the Cost Allocation summary has moved from Licenses to Expenses. Existing Chargeback configurations are unaffected and will now benefit from daily automatic recalculation.

Torii now integrates with Alchemer, syncing account users including email, role, status, and license type. Note: Alchemer's API is available on Enterprise plans only.

Read more here

Access Reviews now supports automated remediation, letting IT and security teams turn review decisions into immediate action without leaving the workflow.

• Two steps: Run actions, then Verify compliance — pick users, trigger an action, and Torii resyncs the app so you see real changes before submitting.
• Per-user status: new Actions taken and Actions status columns show the latest run and update live while in progress.
• Audit trail: every run is captured in the Actions log, and the final report gains an Action completed column with action name and completion time.

Read more here

Customers can now connect Octopus Deploy directly from the Integrations page in Torii.

Read more here

Mailgun is now available as a Torii integration. It syncs your Mailgun account's team members, including email, role, and status, giving you full visibility into who has access.

Read more here

Five new fields are now available for any customer with Iru (Kandji) connected: Device Names, Device Models, Device Serial Numbers, Device OS Versions, and Last Check-in Date.

Connect your Sisense analytics instance to Torii to sync users, roles, license state, and last-activity dates. Three new actions are available for managing Sisense users:

• Create user
• Update user
• Permanently delete user

Read more here

Grip Security is now available as an integration in Torii. Connect to sync user data, associated applications per user, and last used dates for those applications.

Read more here

Workday Adaptive Planning is now available in Torii, automatically syncing user data to help you manage users seamlessly. Supported actions:

• Create user
• Update user

Read more here

The new Access Request detail page shows the complete lifecycle of a single request in one place. From approval steps and provisioning status to temporary access grant/revocation, cancellations, and manual admin overrides — all surfaced in a unified timeline. Reachable from the Requests table (eye icon or row click) and from linked tasks.

Planhat is now available in Torii, automatically syncing team member data into the platform.

• Create user
• Delete user

Read more here

Customers can now connect Dovetail to Torii to sync their workspace users.

Read more here

The Torii MCP Server is now available as a native connector in the Claude Connectors directory.

Customers can install it directly from claude.ai/directory/connectors or by navigating to Customize → Connectors → Add → Browse Connections → Search for Torii → Install.

You can now automatically update a user's Figma seat type within Torii workflows, helping streamline access management and license optimization.

• Action name: Change Figma user seat type
• Available seat types: Full, Dev, Collab, and View
• Requires a Figma Enterprise plan

You can now use the Trigger Another Workflow action inside any Torii workflow to chain workflows together. Select the target workflow and supply the required entities (e.g. a user or application) to kick it off — no duplicating logic, no extra API calls needed.

Customers can now connect Drata to Torii to sync user data directly into the platform, keeping access information up to date. This integration helps teams maintain visibility into Drata users across their SaaS stack.

Read more here

Markdown formatting is now supported in more areas of the platform.

• Send browser activation email action
• Export → Share as Report → Share via Email

Use standard Markdown syntax or the formatting toolbar in the editor, with a live preview to see your changes in real time.

Customers can now connect Brex to Torii to automatically sync user data and transaction data into the platform.

• Invite user — invite new users to Brex directly via Torii workflows.

Read more here

Torii now integrates with ConfigCat to sync user data and support automated user lifecycle management.

• Remove members from a ConfigCat organization
• Remove members from selected ConfigCat Products

Read more here

AI editing is now available for integrations built with the Integration Builder — not just at creation time, but for any existing integration. Describe your change in plain language and the AI proposes exactly what to update, with a clear summary of what it changed and what it couldn't apply. Nothing is applied until you approve, and saving remains a separate step.

When a reviewer delegates part of an Access Review to someone else, that person can now decline the review request instead of being required to complete it.

• Decline with a reason: The delegatee clicks Decline request, provides a short reason, and the task closes as declined.
• Users return automatically: Every user in the declined task goes back to the original reviewer, who can review or re-delegate them.

Two new actions are now available in the Microsoft integration for automating alternate email management in workflows:

• Add Alternate Email – assign a new alternate address to a user
• Remove Alternate Email – remove an existing alternate address from a user

Customers can now connect Hive directly to Torii.

• Sync: Users and licenses
• Actions: Invite, update, or remove Hive users, and manage team memberships

Read more here

Customers can now request additional OAuth scopes at connect time, beyond the defaults Torii selects. This is especially useful when a Custom Action requires access to endpoints that standard scopes don't cover — simply enter the exact scope needed and it will be included in the authorization request.

Customers can now connect Base44 to Torii to sync user data directly into the platform, keeping user information up to date and simplifying user lifecycle management.

• Syncs user data from Base44 into Torii automatically
• Supports user lifecycle management workflows
• Requires access to the Base44 Enterprise Monitoring API

Read more here

The Custom Action (HTTP Request) workflow action now supports Use a connected integration's credentials — select an account already connected to Torii and credentials are fetched and refreshed automatically, with no manual token management required.

• Works with any connected integration, including builder integrations
• Especially useful for OAuth integrations with expiring tokens
• All existing settings (method, URL, headers, body, response mapping) are unchanged

Read more here

Access Governance → Policy Deviations now supports per-row remediation actions on hover! This feature enhances Torii's end-to-end governance loop solution by allowing you to take action immediately on any discovered deviation.

• Remediate now — Torii automatically fixes the incorrect access (adds/removes it, or sets the expected role)
• Create task — when automatic remediation isn't possible, opens a task for the app owner
• Actions Taken - A new column that links the resulting workflow execution or task, keeping every remediation fully traceable

You can now use Markdown formatting in emails sent via the Send Email workflow action — including bold, italic, bulleted/numbered lists, and clickable links.

• Use standard Markdown syntax or the new formatting toolbar in the workflow editor
• A live preview shows exactly how the email will render before saving
• Works retroactively on both existing and new workflows

You can now control exactly which users are synced into Torii with new Advanced Settings available for supported user integrations. Access these options from the ⋯ menu on any connected integration.

• Filter users by specific email addresses
• Configure a block-list or allow-list of email domains
• Choose whether to include or exclude users without an email address

You can now use the Create Freshservice Ticket action within your Offboarding Settings to automatically open a Freshservice ticket when an offboarding process starts. Torii will then monitor the ticket's status and automatically reflect its progress throughout the offboarding workflow, making it easy to track tasks and completion in one place.

Employees can now request app access directly inside Microsoft Teams by chatting with the Torii Teams Agent — no need to leave Teams. The agent supports the full App Catalog policies:

• 🔓 Request access to a cataloged app
• ✨ Request a new app be added to the catalog
• ⏳ Check the status of their own requests
• 🔍 Answer questions about catalog apps — owner, description, usage, and more

Requires the Teams integration to be connected in Torii.

Read more here

Customers can now connect StatusGator to Torii to sync their organization's users.

Read more here

Customers can now sync their ShareFile (Progress) employees and license seats into Torii.

Read more here

Employment Hero (HRIS) integration is now available, letting customers sync employees directly into Torii and use their HR system as the source of truth for onboarding & offboarding workflows. Synced employee fields include:

• Job title
• Manager
• Teams
• Start & termination dates

Read more here

Customers can now connect Lattice to Torii and sync employees — along with core HR attributes — directly into the platform. Synced fields include Department, Job Title, Manager, and Start Date.

Read more here

The App Access Catalog — previously in Labs — is now live for all customers, replacing the classic Application Catalog. Your existing configuration carries over automatically. It gives you full control over how employees discover and request access to applications, with automated approvals and provisioning built in.

• Decide who can request what. Use dynamic groups (by department, location, or role) to control eligibility per app.
• Standardize approvals. Auto-approve routine requests or route sensitive ones through a defined approval flow.
• Automate provisioning. Access is granted automatically once a request is approved — zero manual work.
• Grant temporary access. Set a time limit on access; Torii revokes or downgrades it automatically when it expires.
• Tailor access per app. Create multiple access profiles (e.g. standard vs. admin) so users request exactly what they need.
• See every request in one place. Track pending, approved, rejected, and past requests with predefined views, CSV export, and dashboard reporting.
• Request access from Slack. Employees can request apps directly via the Torii Slack Agent.

Read more here

Customers can now connect Chamelio to Torii to sync user data. The integration includes a Create User action to automate user provisioning through Torii Workflows. Note: this integration supports user management only.

Read more here

Managing Temporary Access is now simpler and more powerful than ever.

• Dedicated deprovisioning workflows — a purpose-built workflow now manages revocation, giving you a cleaner, more reliable way to end access
• Full control over durations — decide which duration options employees see, globally and per policy
• Active Temporary Access view — see every active temporary grant across your org at a glance

Read more here

The OAuth authorization flow has been redesigned to give customers full visibility into every permission requested during integration setup. You can now see each OAuth scope alongside an explanation of why it's needed, and for supported integrations, choose which optional scopes to grant.

• View all requested scopes with plain-language explanations
• Selectively enable optional scopes — for example, grant Create User without enabling Delete User
• Redesigned authorization screen makes the entire flow clearer to navigate

Optional scope selection is available for integrations like GitHub Teams and Linear today, with availability depending on whether the external service supports granular OAuth scopes.

Customers can now connect Sumo Logic to Torii to sync user data directly into the platform. The integration includes workflow actions to automate user lifecycle management:

• Create User
• Delete User
• Add User to Roles
• Remove User from Roles

Read more here

Customers can now connect Frame.io to Torii and sync account members directly into the platform, giving teams visibility into who has access to their Frame.io video review workspace and at what role.

Read more here

Customers can now add a Calculate value action to any workflow to run an Excel-style formula on workflow data and produce a reusable result — a number, text, boolean, or date — for use in later actions or If/Else branch conditions.

• Write an Excel-style formula and pull in workflow data with the @ token picker
• Or describe the calculation in plain language and let AI generate the formula for you (Create with AI)
• Choose a return type and error-handling behavior, then reuse the result anywhere downstream

Read more here

Adobe Enterprise now supports three new workflow actions alongside the existing Delete User action:

• Create Adobe Federated ID User
• Add Adobe User to Product Profiles
• Remove Adobe User from Product Profiles

Together, these make it easier to automate Adobe user provisioning and access management directly from Torii Workflows.

The Mural integration now supports a Change User Type action. Use it in workflows to automatically update a user's type in Mural as part of your onboarding, offboarding, or access management processes.

Bitrise is now available as an integration in Torii, syncing user data directly into the platform. The integration supports two workflow automation actions:

• Create User
• Add User to Groups

Read more here

dbt can now be connected to Torii to sync user data directly into the platform. The integration includes a Create User action to automate user provisioning through Torii workflows.

Read more here

Torii now integrates with Certinia to bring in expense data. The integration syncs payable-invoice expense line items, giving better visibility into software spend.

Read more here

Customers can now connect Windsurf to Torii to sync their organization's members, roles, and license assignments directly into the platform. This gives teams full visibility into who has access to Windsurf's AI coding tools and how seats are allocated.

Read more here

Merge Users is fully felxible!

You can now merge users who share the same value in any single-value field from any connected app — beyond the existing Google Workspace and Microsoft Entra ID options. Pick an app, pick a field (e.g. a SailPoint Workforce ID), and Torii consolidates all users matching on that value into one.

You can find Merge Users under Settings → Users & Employees → Merge users

Merge Branch lets you connect the end of an If/Else branch into a shared next action, so multiple branches converge on one step instead of duplicating that step in each branch.

Read more here

Reviewers can now hand off specific users in an access review to the person who knows their access best — without redoing the whole review. You now can:

• Reassign one or many users: Move a single user or bulk-select and reassign a whole group at once, right from inside the access review.
• Pick a person or an attribute: Reassign to a specific reviewer, or to an employee field like BambooHR manager — Torii routes each user to the right reviewer automatically.

Employees can now see and complete their pending offboarding tasks directly in the Employee Portal — no more relying solely on email reminders and one-off links.

Torq is now available as an integration in Torii. Connect Torq to sync user data directly into the platform and simplify identity and access management.

Read more here

Connect Snyk to Torii to sync user data directly into the platform, giving IT and Security teams better visibility into Snyk users and simplified user lifecycle management.

Read more here

Customers can now connect Jasper to Torii and sync their workspace users.

Read more here

Runbook actions can now be used with the Microsoft Entra ID App Registration (App-only authentication) method, enabling more automation without requiring an admin sign-in. Note: one additional setup step is required — see the updated guide for details.

Read more here

Automatic Remediation is now available for governance policies! By selecting this option, Torii can now auto-fix discovered governance deviations so that you're always secure and that correct access is always provided. Feature highlights:

• Automatically resolve policy deviations, falling back to opening tasks for the relevant app owner in case of unavailable actions.
• Torii always takes the least destructive action possible (e.g. disabling access before deleting) so that there's no loss of data.
• For each policy, you can see exactly which action will run for every deviation type.
• Actions taken by Torii are recorded in the Workflows Actions Log and can be accessed directly from the Access Governance page.

With this, Access Governance has graduated from Labs and is now available by default to all customers with the Torii Identity module.

You can now duplicate workflow actions with a single click, making it faster to build similar actions without starting from scratch.

Customers can now delete applications from Torii. Hide has also moved out of the State dropdown into a new Remove menu, so Hide and Delete live together in one place.

Orgs now get a ready-made Access Requests Dashboard out of the box, providing a single view into the health of your access request flow with no setup required. Available for orgs with the App Access Catalog feature enabled.

Microsoft 365 now supports App Registration (App-only authentication) as an alternative connection method, eliminating the need for an interactive admin sign-in during setup or sync. All standard actions are supported except Change user password.

Read more here

Customers on Retool Enterprise plans can now connect Retool to Torii to sync user data and automate access management. The integration fetches Status, Role, Last Visit Time, and Groups, and includes four user actions:

• Create user
• Delete user
• Add user to groups
• Remove user from groups

Read more here

Customers can now connect n8n to Torii and sync their users — including roles (Owner / Admin / Member) and status — directly into the platform. This gives teams visibility into who has access to their n8n automation workflows across both n8n Cloud and self-hosted instances.

Read more here

Customers can now connect Thinkific to Torii with support for 2 new user actions:

• Create user
• Delete user

Read more here

Factorial HR is now available as an HRMS integration in Torii. Connect Factorial HR to sync employee data directly into the platform for better workforce visibility across your organization.

Read more here

Employees can now discover and request app access directly from Slack — without leaving the tools they use every day.

With Torii's new Slack Agent, employees can interact with the App Catalog through a simple conversational experience, making access requests faster and reducing friction across the organization:

• Request access to a catalog app
• Request a new app
• Check request status
• Answer questions about catalog apps — owner, description, "which apps do I use?", and more

Requires the Slack integration connected in Torii and the New App Access Catalog labs feature enabled. Install via App Catalog → Settings → Slack agent.

Click here for more details

The Transactions API is now publicly available, allowing transaction data to be read directly via the Torii API. This is also supported on the Torii MCP, enabling users to retrieve and analyze expense information through chat. Read more here

In addition to groups created in Torii, you can now select any IdP group as the eligible group when building access policy rules in the Access Governance page, and in access request policies in the App Catalog.

Supported identity providers include Okta, Entra ID, Google Workspace, OneLogin, JumpCloud, and PingOne.

Building custom integrations just got dramatically easier. Provide an application name — and optionally any API docs, endpoints, or auth details — and the AI Integration Builder will automatically research the app, analyze available APIs, and generate the integration configuration for you.

• No more starting from a blank page
• No more digging through endless API documentation
• No more manually configuring every integration from scratch

You can now set a Primary app owner and Additional app owners directly from the Update application field workflow action. Two ways to pick the owner:

• Specific user — choose any specific user, or smart options like the first user discovered in app or their manager.
• User from related field — pull the owner from another employee field in the app or it's last active contract (i.e. budget owner).

For Additional app owners, you can append to or overwrite the existing owner list.

Customers can now connect Clockify to Torii and sync their workspace members.

Read more here

Customers can now connect Toggl to Torii and sync their organization users.

Read more here

Customers can now connect Elastic Cloud to Torii and sync their organization members.

Read more here

The Gong integration now supports two new workflow actions for automating user lifecycle management:

• Create User
• Deactivate User

To use these actions, provide a SCIM Provisioning Token in the integration settings. Read more here

Microsoft Entra ID now supports App Registration (App-only authentication) as an alternative connection method, removing the requirement for an admin user sign-in. All standard actions are supported except Change user password and runbook actions.

Read more here

Customers can now connect Coda to Torii and sync users.

Read more here

Customers can now connect Motion to Torii and sync users.

Read more here

Customers can now connect Pinterest to Torii and sync their business members.

Read more here

Mural users are now synced into Torii, bringing in key details like Roles, Status, and Last Used Date. Available for Mural Enterprise customers only.

Read more here

Customers can now connect SignNow to Torii and sync users from a SignNow workspace directly into the platform.

Read more here

Any integration can now be connected multiple times — not just those with native multi-account API support. Each connection is assigned an Account Name at connect time, serving as its unique identifier so multiple accounts can be managed within the same org.

Access Profiles lets you configure multiple access request policies on a single app — each with its own name, approval flow, provisioning workflow, and eligibility groups. End users pick the right profile from a dropdown in the request modal; admins manage everything from one place.

• Multiple policies per app — create, duplicate, and delete them (every app always keeps at least one)
• App page management — the "Appears in catalog" box shows a per-policy table with approval flow, provisioning workflow, groups, and request counts
• End-user profile picker — approval chain is previewed before submitting
• Workflow integration — use the requested profile as an if/else branching condition or personalization token in provisioning workflows
• Filter, sort & report — new Access Profile column on the Requests page and dashboards; Approval Flows and Provisioning Workflows tabs show which profiles each is wired to

Available now for customers with the new App Catalog enabled in Labs.

Using Access Governance policies, you can now monitor and control app access using IdP group membership. Organizations can enforce governance policies on non-integrated apps based on data provided solely through an Identity Provider like Okta or Google Workspace.

• Non-integrated app support: Create governance policies for apps without a direct integration using data provided by your IdP.
• Flexible governance methods: For integrated apps, choose between Direct Integration (role-based) or Via IdP Group (membership-based) when configuring a policy.
• IdP-driven rules: Select an IdP group instead of app roles when governing via identity provider.

Note: grace periods and automatic remediation are not yet supported for IdP-managed policies and will be introduced in a future release. This capability is automatically available to all organizations with Access Governance enabled in Labs.

Customers can now connect Make to Torii and sync users from a Make organization directly into the platform. The integration fetches key user details including Roles, Status, and Last Used Date.

Read more here

incident.io is now available as an integration in Torii. Connect your account to sync user data directly into the platform and maintain visibility into who has access to your incident management workflows.

Read more here

Customers can now connect their AWS account to Torii to gain visibility into expenses from AWS Marketplace purchases, including third-party applications, associated spend, and AI model usage through Amazon Bedrock (e.g., Anthropic Claude).

• Surfaces third-party apps acquired via AWS Marketplace
• Tracks associated spend data
• Detects AI model usage through Amazon Bedrock

Note: This integration does not sync expense data for native AWS services and is currently in beta.

Read more here

You can now mark your favorite dashboards for easy access!

Favorite dashboards will always appear at the top of the dashboard switcher menu, and can be set or unset as favorite directly from the dashboard page or in the dashboard switcher menu itself. Each user maintains their own favorite dashboard list.

Employees can now view and track all of their app requests directly from the App Catalog, from submission through completion.

• See all app requests in one place
• Track the status of open requests in real time
• Review completed requests and their outcomes

Customers can now connect Discord to Torii to sync server data directly into the platform. Multiple servers are supported — one integration per server.

• Server members (humans + bots) → Torii users
• Per-member roles

Learn how to connect Discord here

The Product Updates page has been redesigned with a fresh modern look, dark mode support, improved search and filtering, and a new Product Replay experience that lets you quickly catch up on recent changes by timeframe and product area.

The Google integration now ingests Gemini in Workspace activity, giving visibility into how users exercise Gemini across Workspace apps — no new permissions required.

• Tracks direct Gemini app usage (chat/conversation) and embedded Gemini in Gmail, Docs, Sheets, Slides, Meet, Drive, and more
• Gemini users surface on the Google Gemini application page with accurate Last Used dates and usage charts

You can now build dashboard widgets powered by Assigned Licenses data, making it easier to visualize, slice, and aggregate license usage in one place. Use these widgets to:

• Surface savings by summing the annual cost of inactive licenses, grouped by application
• Break down annual cost by app, account, or license
• Identify past users who still hold licenses and are candidates for removal
• Slice by any custom user field such as Department
• Find licenses unused for a long time using the Last Used date field

You can now automate your access review campaign launches by scheduling recurring reviews to meet your compliance requirements. Mark any campaign as recurring, and Torii will automatically relaunch it on the schedule you choose - no more manual kickoffs every quarter.

Connect Vercel to Torii to manage access and automate workflows across your development environment.

• Sync Vercel users and access data
• Automate user provisioning and deprovisioning tasks
• Support access management workflows for Vercel

Learn how to connect Vercel here.

Connect Livestorm to Torii to manage access and automate user workflows across your webinar platform.

• Sync users with Livestorm
• Automate access-related workflows
• Manage user permissions and lifecycle tasks

Learn how to connect Livestorm here.

Connect Google Cloud Platform to Torii to sync user data and gain deeper visibility into cloud access and permissions.

• Sync data at the Organization level
• Sync data at the Project level
• Improve visibility into cloud access and permissions

Learn how to connect Google Cloud Platform here.

Connect Lumin to Torii to sync user data across multiple accounts per workspace.

• Support multiple Lumin accounts in a single workspace
• Sync key user details including roles, status, and last used date
• Keep application data current for better visibility and management

Learn how to connect Lumin here.

Connect Mesh Payments to Torii to sync user and transaction data across the platform.

• Sync user data from Mesh Payments
• Sync transaction data from Mesh Payments
• Create users in Mesh Payments

Learn how to connect Mesh Payments here.

Connect Fireflies.ai to Torii to sync user data and improve visibility into adoption trends and access-discovery insights for AI meeting tools.

• Sync user data into Torii
• Track adoption trends across the organization
• Surface access-discovery insights for AI meeting tools

Connect Typeform to Torii to sync user data and improve visibility into app ownership and access-discovery insights.

• Sync user data from Typeform
• Improve visibility into app ownership
• Strengthen access-discovery insights

Connect Apollo to Torii to sync user data and improve visibility into access-discovery insights across the organization.

• Sync user data from Apollo
• Improve access-discovery visibility
• Centralize insights across the organization

Connect Payhawk to Torii to sync expenses and user data across your organization.

• Sync expenses and user data
• Create user
• Update user
• Delete user

Stacked Bar Charts are available in Dashboards for visualizing data across multiple categories in a single bar. They help break down totals by dimension and spot composition trends at a glance.

• Visualize multiple categories within a single bar
• Break down totals by dimension
• Spot composition trends in dashboard data

You can now send a generic task to any user from a workflow — they perform the work, click a button when done, and the workflow continues. What’s configurable:

• Task name, title & message — fully templated with placeholders
• Button text & feedback message — what the assignee sees and clicks
• Wait for completion — toggle whether the workflow waits for the task to be marked done (async), or fires-and-forgets (sync)

Employees can now request any app via the App Catalog by simply typing its name and adding a few details. Torii will create a custom app and route the request through the selected workflow - keeping IT in control while capturing every need. Admins can choose whether to enable this capability via app catalog settings, ensuring flexibility and governance. App Catalog settings —> Request new application —> Allow requesting unrecognized apps

Security teams can scope access reviews to the users and permissions that matter most, reducing review fatigue and improving risk coverage.

• Review admin and elevated permissions at a higher cadence than standard users
• Scope campaigns to non-human identities, teams, departments, or identity groups
• Build custom review scopes using user attributes such as role, license, usage, and status

OR logic is available for filters across tables and dashboards, making it easier to build views that match any of several conditions. This expands filtering flexibility beyond AND-only combinations.

Connect Torii to AI assistants through the hosted MCP server and extend automation workflows across supported tools.

• Connect Torii to AI assistants through MCP
• Support assistants such as Claude, ChatGPT, and others
• Access the hosted MCP setup documentation in the help center

Learn how to connect Torii MCP here.

Integration Builder supports OAuth 2.0 Authorization Code authentication for custom integrations. This expands the range of APIs that can connect to Torii and provides a more secure, flexible authentication flow.

• Connect to APIs that require user-approved OAuth access
• Build custom integrations with app-specific permissions
• Sync data securely through OAuth-based authentication

Workflow actions can be reordered directly in the editor by dragging and dropping nodes into a new position. Actions can be moved up and down a flow, or between, into, and out of branches. Branch nodes are not draggable.

Escalation flows support auto-declining approval request tasks. Task notifications include a clear indicator when a task is automatically declined due to escalation.

• Auto-decline approval request task types during escalation
• Display an escalation indicator in task notifications
• Improve visibility into automated task outcomes

Access governance policies now support a configurable grace period for users who change role, department, or team. This helps employees transition immediately to new roles, responsibilities and app access, while giving them time to wrap up their previous work before access is reviewed.

• Configure a policy-wide grace period that suits your organization’s transition processes.
• View all users in a grace period in one central location
• Extend or revoke grace periods for individual users on demand

Access reviews now support separate ownership for review and remediation tasks, helping teams split approval and removal responsibilities with a cleaner handoff. You can define a dedicated assignee for remediation when creating a campaign, and they will be assigned with a remediation task when access review step is completed by the reviewer. You can read more about it here

A new SCIM action is available for managing user profiles in Miro. This action supports updating account status, roles, identity fields, and enterprise attributes.

• Activate or deactivate users
• Upgrade licenses to Full
• Update display names and email addresses
• Add or remove admin roles
• Edit enterprise fields such as department, employee number, cost centre, organization, division, and manager

Connect NinjaOne to Torii to sync user, app, and device data in one place.

• Create users as end users or technicians
• Update users as end users or technicians
• Delete users as needed
• Sync operating systems, device serial numbers, device models, and last device contact fields

Added 5 new actions to the ManageEngine MDM integration:

• Delete user
• Add user to groups
• Remove user from groups
• Lock user's devices
• Wipe user's devices These actions are now available to use in workflows and provide better control over user offboarding and device security.

Learn more here.

App and contract ownership transfer can be customized through workflow actions, giving organizations control over when reassignment happens, who receives ownership, and which conditions trigger the change.

• Reassign app stakeholders through Workflows
• Reassign contract stakeholders through Workflows
• Route ownership based on offboarding, org changes, or custom conditions

You can now add if/else branching based on the output of a custom actions, making workflows more flexible and responsive to dynamic results.

User lifecycle tracking is more flexible and easier to review across offboarding and profile pages.

• Offboarding pages can display a custom termination date alongside the Torii Detected Departure Date
• User profile pages include a full timeline of lifecycle events in one view

The integration syncs both user and device data, including:

• User Groups
• Device Serial Numbers
• Device Models
• OS Versions

Learn more on here.

Easily organize and analyze your data with the new Grouping Records feature. You can now group records by any field to quickly uncover insights and trends, making it easier to understand your data at a glance and take action faster. For example:

• Cost by department
• New apps grouped by category
• Expenses by source Learn more about it here.

Take control of how access to applications is requested, approved, and managed across your organization. This powerful addition brings structure and governance to the access request process, enabling you to define clear policies, streamline approvals, and gain full visibility into access activity—all in one place. ✨ What’s new

• Control who can request access using groups
• Define approval flows for access requests
• Manage all requests in a centralized Requests tab
• Automatic notifications for better visibility
• Gain insights with reporting and dashboards

🧪 This feature is currently available in Labs

🔧 Enable it - Go to Settings → Labs and turn on App Access Catalog.

Learn more about it here

Integration Builder is here! Giving you the power to create custom integrations in Torii without engineering support. Enterprise customers can now connect to any API, define how data is pulled, map it to Torii fields like users, roles, and licenses, and seamlessly sync everything into Torii. All you need is a basic understanding of APIs to bring any app into your workflow.

Learn how to build your own integration here.

The Copy Widget has graduated from labs and is now accessible to all enterprise users, enhancing the flexibility and efficiency of dashboard customization.

Elevate your security posture with the new Access Governance feature. Now, you can define and automatically monitor access governance policies across all users and integrated applications. This transformative feature shifts Torii into a governance engine, enabling proactive management of access rights and immediate detection of policy deviations. Here's what you can do:

• Define expected access levels for users based on any attribute across integrated apps
• Configure access types for each group (allowed, expected by birthright, or denied)
• Automate monitoring and receive alerts for any deviations from established policies

If you’d like to try it out, be part of the early access, and provide feedback that can help shape the future of this feature, you can turn it on in Settings → Labs → Access governance.

You can also read more about this feature here and here.

Task Escalation helps prevent important work from being missed by automatically taking action when a task has had no activity for a configured period of time. You can configure Task Escalation per task type, and choose what happens when the escalation threshold is reached. Additionally, escalation actions will be logged in the task activity feed. For more details visit this Help article

Bar chart widgets in Torii now support an additional line chart view, giving you more flexibility in how you visualize trends over time. With a single click, you can seamlessly switch between bar and line presentations—making it easier to analyze patterns, compare data, and choose the format that best fits your workflow.

Connect your Shapes account to Torii and seamlessly sync HR user data into the platform. For more details, refer to the Shapes Integration Guide.

torii-cli is now available on npm, giving you a fast way to interact with Torii’s API from the command line. It supports discovery, read and write operations, dry runs, uploads/downloads, and structured JSON output, making it ideal for automation and tools like Claude Code. Learn more how to use it here.

The 1Password SCIM Bridge integration is now available to all customers. Learn how to connect it here.

New integration with action for: Canny, Port.io, SysAid, Cal.com and Slite.

Added the ability to schedule criteria-based workflow triggers, including:

• User meets criteria
• Application meets criteria
• Contract meets criteria
• License not in use You can now enable Schedule and define when the workflow should evaluate entities (Daily, Weekly, Monthly, or Once). This enhancement enables recurring governance use cases such as monthly ownership confirmations, weekly contract renewal reminders, periodic license reviews, and scheduled offboarding. Learn more about it here.

Torii introduces Data Agents, AI-powered fields that automatically research and populate application data for you. Instead of manually tracking app details across spreadsheets and vendor pages, Data Agents continuously gather and update information — keeping your application records accurate and up to date. Learn more about this here

Introducing Security Grade, a standardized, AI-powered scoring system that enhances visibility into the security posture of every SaaS application. This feature automates the grading of applications, aiding in the prioritization of security efforts and the mitigation of high-risk Shadow IT. Here's what you can do:

• View standardized scoring (A–D) for apps based on their security health.
• Benefit from AI-powered evidence gathering for SSO, MFA, Data Encryption (in transit and at rest), HIPAA, and AI Privacy concerns.
• Access a new Security Grade tab on the app page for a detailed breakdown of security signals and direct links to vendor documentation. Learn more about it here.

We are excited to announce the internal release of Torii Sheets, a powerful enhancement for managing user data in custom integrations.Torii Sheets provide a brand new interface to view, edit, and sync data directly to Torii for your custom integration, without any dev work needed. Torii Sheets offers several strong capabilities:

• Universal application: Torii Sheets acts as a universal bridge, allowing you to manage custom user data for any app in a spreadsheet-like experience.
• Immediate Time-to-Value: No installation, no new accounts, and no backend configuration. If you are logged into Torii, you are ready to use Sheets.
• Custom Integration, Simplified: Gone are the days of manual, multi-step processes to push data into Torii. You can now pull data for any custom integration, edit, and sync it back in seconds.
• Seamless Data Upload: With support for up to 50,000 rows and smart drag and drop import capabilities, you can move data from Excel/CSVs into Torii with intelligent auto-mapping.
• Advanced Data Validation: Built-in detection for duplicate emails and invalid formats, a visual change tracker, and a dedicated validation sidebar to squash errors before they reach Torii. Read more about uploading user data with Torii Sheet here

Here's what you can do:

• Invite members to your organization
• Update member organization roles
• Add members to specific workspaces
• Remove members from workspaces
• Remove members from your organization
• Recommendations: Reclaim past user licenses for better resource management

Introducing AI Filters, a new way to streamline your workflow. Simply describe your desired filter outcome, and let the AI configure the optimal filters for you. Here's what you can do:

• Use natural language to specify filter criteria
• Enjoy faster, more accurate filter setup
• Improve data visualization and analysis with minimal effort

Torii now supports Non-Human Users, giving customers a clear and built-in way to manage bots, service accounts, automations, and AI agents separately from human users. As AI and automation rapidly expand across SaaS environments, these non-human identities increasingly hold powerful access — yet have very different risk, ownership, and lifecycle characteristics than employees. Torii now automatically distinguishes humans from non-humans, ensuring these identities are visible and governed. With this new capability, you can:

• Improve access governance by separating human and non-human actors in your systems, which may need to be treated differently.
• Keep non-human identities out of human-centric workflows like license optimization, while still maintaining full visibility and accountability. Read more about it in our help center.
• Configurable Expense Field Mapping for Coupa 🛠️ We've introduced per-organization configurable field mapping for Coupa expenses, enhancing the reliability of expense-based app matching. Here's what you can do:
  • Select which Coupa field to use as the transaction description
  • Choose fields to concatenate into extra information
  • Specify which field should be used as the transaction ID

Contact Torii support to tailor Coupa to your needs. Existing configurations remain unaffected.

Introducing the Scheduled Trigger, a feature that allows you to automate workflows based on a specific frequency. This addition enhances the flexibility and efficiency of managing tasks and reports. Here's what you can do:

• Schedule workflows to run daily, weekly on a specific day, or monthly on a specific day
• Opt for a workweek schedule from Sunday–Thursday or Monday–Friday
• Configure one-time runs for precise task timing

A modernized, redesigned UI to make it easier for users to navigate your application catalog and request access.

Expand your control over Google integration with two new actions, enabling you to assign and unassign user roles more efficiently. Here's what you can do:

• Assign user roles to streamline access management
• Unassign user roles to maintain security and relevance Please note, these new actions require an additional scope. You'll need to reconnect your Google integration to take advantage of these capabilities.

Empower your admins to assign access reviews to anyone within your organization, even without Torii platform access. This update streamlines the review process, making it more inclusive and efficient. Here's what you can do:

• Assign access reviews to any member of your organization
• Notify reviewers via email, Slack, or Microsoft Teams
• Reviewers can complete tasks in the Torii Employee Portal, without having access to Torii platform
• Seamless SSO sign-in for reviewers, or easy account creation for those without SSO

Learn how to connect Workwize Integration here.

Tasks data has been added to Torii dashboards! You can now create dashboard widgets showcasing tasks data, giving you instant visibility into what’s happening and what needs attention. Task-related widgets you can now create include:

• Get a high-level view of task progress across org
• Track tasks creation/completion over time
• Break down open tasks by assignees
• Highlight open tasks that haven’t been completed in a long time.

You can now change the trigger of an existing workflow without losing its actions or configuration. With this update, you can safely update the trigger of an already configured workflow while keeping:

• All workflow actions
• Conditions and logic
• Existing configuration and structure In some cases, changing a trigger may cause the workflow to become invalid, for example:
• If the triggered entity changes (e.g., switching from a User-based trigger to an Application-based trigger)
• If existing filters or conditions are no longer relevant to the new trigger When this happens, the workflow will require adjustments before it can run successfully.

You can now reassign active access reviews directly from the Access Reviews page or the Tasks page. If the app owner has left, or the review was assigned to someone who isn’t familiar with the app, simply click “Edit assignees” and choose a new reviewer. The access review task is reassigned immediately, and the new owner is notified to complete the review.

Dashlane, Metabase, Claude Developer, OpenVPN, and Grafana are now available in Torii. Learn how to connect each integration:

• Dashlane Integration
• Metabase Integration
• Claude Developer Integration
• OpenVPN Integration
• Grafana Integration

Users can now control who can view or modify specific workflows. This new capability allows admins and users to restrict workflow editing to relevant team members, ensuring sensitive or domain-specific automation remains secure. Additionally, we’ve introduced a new Torii scope - Create Workflows, which allows users to create and duplicate workflows, even if they don’t have the Workflow Take action scope.

Users can now use AI to auto generate a name for their workflow. The user will be presented with 3 suggested names that are based on the entire workflow configuration.

Launching access reviews now automatically creates tasks in your team’s preferred channel—Slack, Microsoft Teams, or email—making reviews easier to start and act on. Automatic reminders keep assignees on track, while admins receive completion notifications in the same channel, ensuring faster reviews and better visibility without switching tools.

Learn how to connect AWS Identity Center Integration here.

Added new device actions to the Microsoft Intune integration—Remote Lock, Delete User’s Devices, Wipe Devices, and Bypass Activation Lock, now available for use in workflows.

Learn how to connect PingOne Integration here.