App Portal/App Broker 2026 R1 Service Pack 1 Release

We are pleased to announce the general availability of App Portal/App Broker 2026 R1 Service Pack 1.

This service pack extends macOS application fulfillment through the Microsoft Intune integration and introduces dynamic synchronization of Intune users and devices using Windows Authentication. These enhancements help organizations accelerate adoption of Microsoft Intune as an enterprise application-management platform while improving fulfillment accuracy and reducing delays caused by timer-based synchronization.

Support for macOS Applications through Intune

App Portal now extends its Microsoft Intune integration to support macOS application fulfillment.

Administrators can create catalog items for the following macOS application deployment types through the New Catalog Item wizard:

·     macOS App (DMG)

·     macOS App (PKG)

These applications can then be published to the App Portal catalog and fulfilled to Intune-enrolled Mac devices with license governance check in-place. The release also adds deployment-status tracking for macOS applications in My Requests, giving users and administrators improved visibility into fulfillment progress

Note: Uninstall requests are not supported for macOS applications deployed using the PKG package type.

Dynamic Synchronization Using Windows Authentication for Intune

App Portal now supports dynamic synchronization of users and devices from Microsoft Intune when users sign in using Windows Authentication. This enhancement eliminates the delay associated with timer-based synchronization by retrieving and updating user, device, and user-device relationship data automatically.

With this, App Portal maintains more accurate and instant synchronization with Intune, avoiding delay in timer-based and improving data consistency for application targeting and fulfillment.

For the complete details of features in App Portal/App Broker 2026 R1 Service Pack 1, please refer the release notes here.

App Portal/App Broker 2026 R1 Service Pack 1 is now available for download in Product and License Center.

To keep yourself updated with App Portal/App Broker product releases and updates, please subscribe to this release blog!

We love to hear about your experiences and feedback by posting a comment here or in the App Portal Forum. Of course, the friendly Flexera Support team is also always standing by to take your call.

Thanks for being a partner of Flexera on this journey.

App Portal/App Broker 2026 R1 Release

We are pleased to inform the general availability of the App Portal/App Broker 2026 R1 release.

This release adds key enhancements across ServiceNow automation, Security Group lifecycle management, Filtering Intune User Synchronization, Platform resiliency guidance, and ServiceNow Australia version support.

Support Flow Designer ServiceNow Automation

App Portal now supports ServiceNow Flow Designer as an alternative automation engine to the legacy Workflow Editor for driving App Broker capabilities in ServiceNow. Administrators can choose between Flow Designer and Workflow Editor at both the global level and the individual catalog-item level, with catalog-level settings overriding the global default. The chosen automation type is applied during catalog sync so that items synced into ServiceNow use the correct engine automatically.

The integration covers the full App Broker request lifecycle as Flow Designer actions: catalog checkout triggering, request data extraction and validation, license eligibility and availability checks, license reservation and order submission, deployment fulfillment, and deployment status updates back into ServiceNow.

A co-existence model supports two deployment paths. Existing customers can import a patch update set alongside their current Workflow configuration and migrate catalog items gradually — switching individual items to Flow Designer while the rest continue Workflow Editor. New customers can deploy a Flow Designer-only update set that contains no legacy Workflow references. For fresh installations, Flow Designer is selected as the default automation type; for upgrades, Workflow Editor remains the default to preserve existing behavior.

Support Ability to remove targets from groups via Security Group

With this enhancement, App Portal enables administrators to add or remove users, devices, or both to and from Active Directory and Microsoft Entra ID security groups based on catalog item lifecycle events. Along with the existing add functionality, this update introduces support for removal actions, with configurable execution after request, approval or successful installation.

Enable Intune User Synchronization Filtering with Group Object IDs

This capability optionally allows administrators to filter Intune user synchronization based on specific Group Object IDs. When enabled, App Portal retrieves only users belonging to the specified groups, while disabling the option retains the existing synchronization behavior.

Guidance for High Availability, Disaster Recovery and Failover

App Portal now provides the guidance for high availability (HA), disaster recovery (DR), and failover scenarios, helping customers design resilient deployments. This includes detailed information on supported configurations, operational considerations, and recovery approaches for maintaining application availability and restoring service after failures.

Performance Optimizations for ITAM License Check and Reservation

Introduced optional performance optimizations for ITAM license checking and reservation during checkout, including new configuration settings that reduce repeated license-count calls and enable asynchronous license reservation. These optimizations are disabled by default and can be enabled through the backend AppSettings keys EnableFnmpRequestOptimization and AsyncLicenseReservation.

Support for ServiceNow Australia version

App Portal now includes support for the Australia version of ServiceNow. Customers upgrading from previous version of ServiceNow to the Australia version can use all the capabilities on the new versions.

For the complete list of features and resolved issue in App Portal/App Broker 2026 R1, please refer the release notes here.

App Portal/App Broker 2026 R1 is now available for download in Product and License Center.

To keep yourself updated with App Portal/App Broker product releases and updates, please subscribe to this release blog!

App Portal/App Broker 2025 R2 Service Pack 2 Release

We are pleased to inform you of the general availability of the App Portal/App Broker 2025 R2 Service Pack 2 release.

App Portal/App Broker 2025 R2 Service Pack 2 includes the following features and improvements.

Automated Reclamation and Retirement Campaigns for macOS Applications via Jamf Cloud

App Portal/App Broker now extends its powerful optimization automation to macOS applications managed through Jamf Cloud. Administrators can configure reclamation and retirement campaigns for macOS applications using Flexera IDs, bringing the same license optimization workflows already available for Windows environments to the macOS estate.

For reclamation, system-based workflows is supported. When application usage falls below the configured threshold, App Portal automatically identifies the device as a reclamation candidate and uninstalls the application via Jamf Cloud, delivering measurable ROI and reducing software spend.

Retirement campaigns allow administrators to enforce the removal of blacklisted, end-of-life, or unauthorized macOS applications across Jamf-managed devices. Retirement actions are executed automatically via Jamf Cloud. Together, these capabilities give IT and SAM teams full control over macOS application lifecycle management — reducing compliance risk and maximizing the return on software investments.

Automated Upgrade Campaigns for macOS Applications via Jamf Cloud

Building on the macOS automation capabilities introduced in this release, App Portal/App Broker now supports automated upgrade campaigns for macOS applications via Jamf Cloud. Administrators can define upgrade campaigns for macOS applications identified by Flexera ID, setting eligibility-based that drive automated upgrade actions across Jamf-managed devices.

When a device is identified as running an outdated or non-compliant version of a macOS application, App Portal generates an alert and orchestrates the upgrade through Jamf Cloud — ensuring users are seamlessly moved to the latest supported release. This eliminates version sprawl across the macOS estate, strengthens the organization's security posture, and drives consistent adoption of current, supported software.

Non-Indexing Uninstall Support for macOS Applications via Jamf

Jamf has deprecated the Jamf Admin component in Jamf Cloud, which was the primary mechanism previously used for index-based software uninstallation on macOS. To ensure continued compatibility and an uninterrupted software lifecycle management experience, App Portal/App Broker now supports a non-indexing method for configuring and executing uninstall programs for macOS applications via Jamf.

Administrators can configure the uninstall program using the new non-indexing method, which automatically creates the required groups and policies in Jamf Cloud. When a user submits an uninstall request through App Portal, the workflow is executed via Jamf and the resulting status is reflected back in App Portal in real time — delivering a seamless, end-to-end uninstall experience. This enhancement ensures that macOS application uninstallation continues to work reliably with the latest versions of Jamf Cloud.

For the complete list of features and resolved issues in App Portal/App Broker 2025 R2 Service Pack 2, please refer to the release notes here.

App Portal/App Broker 2025 R2 Service Pack 2 is now available for download in Product and License Center.

To keep yourself updated with App Portal/App Broker product releases and updates, please subscribe to this release blog!

We love to hear about your experiences and feedback by posting a comment here or in the App Portal Forum. Of course, the friendly Flexera Support team is also always standing by to take your call.

Thanks for being a partner of Flexera on this journey.

App Portal/App Broker 2025 R2 Service Pack 1 Release

We are pleased to inform you of the general availability of the App Portal/App Broker 2025 R2 Service Pack 1 release.

App Portal/App Broker 2025 R2 Service Pack 1 will add support for Catalog Management, in addition to Incident and Request Management. This update delivers full OAuth 2.0 authentication value with Service Integration across all capabilities that were previously supported with Basic authentication.

Support OAuth 2.0 for ServiceNow Integration

In the previous release, OAuth 2.0 authentication was available for both Incident Management and Request Management. With this release, the ServiceNow integration now also supports OAuth 2.0 for Catalog Management, providing a more secure alternative to Basic authentication. Catalog Management will support all current features available with Basic authentication. This update allows Catalog Management operations to use OAuth tokens for authentication, enhancing security compliance, improving overall security, and making credential management easier.

For the complete list of features and resolved issues in App Portal/App Broker 2025 R2 Service Pack 1, please refer the release notes here.

App Portal/App Broker 2025 R2 Service Pack 1 is now available for download in Product and License Center.

To keep yourself updated with App Portal/App Broker product releases and updates, please subscribe to this release blog!

We love to hear about your experiences and feedback by posting a comment here or in the App Portal Forum. Of course, the friendly

Flexera Support team is also always standing by to take your call.

Thanks for being a partner of Flexera on this journey.

App Portal/App Broker 2025 R2 Release

We are pleased to inform you of the general availability of the App Portal/App Broker 2025 R2 release.

App Portal/App Broker 2025 R2 includes the following features and improvements.

Support OAuth 2.0 for ServiceNow Integration

A new OAuth 2.0 authentication type has been added under Site Management > Settings > ServiceNow Integration for Incident Management and Request Management. This option allows administrators to configure OAuth using a Client ID and Client Secret and migrate existing ITSM Operations from Basic to OAuth authentication while preserving the catalog item bindings, ensure seamless functionality without manual reconfigurations.

This enhancement provides a secure modern authentication method for connecting App Portal/App Broker with ServiceNow, replacing or complementing existing Basic authentication.

Note: If the Administrator configures the ServiceNow Integration with OAuth 2.0 the Incident & Request Management will work with OAuth authentication and Catalog Management will be using the Basic authentication. The support for OAuth authentication for Catalog Management will be available in the upcoming release.

Question Panel Enhancement

With this enhancement the Respond to Questionnaire Panel / Checkout Wizard now features a refreshed, modern user interface designed to enhance the usability while maintaining the familiar layout, menu options, and their placement. This update delivers a cleaner and more intuitive experience for end users, helping them navigate questionnaires more effectively and ensuring that no questions are missed during the checkout process.

Enhanced Image Search in Catalog Item Properties

The catalog item properties dialog now includes an enhanced Image property allowing administrators to efficiently search and select image icon for the catalog items. This enhancement introduces a keyword-based search capability, enabling users to enter relevant terms in a text box to quickly locate matching image icon displayed in a grid with paginations control. Administrators can then select the desired image icon from list and associate with catalog item.

Data Sync Improvements

This configuration-based enhancement allows App Portal to synchronize usernames from Intune/Entra AD using the OnPremisesSamAccountName (Active Directory login name) when available and configured. This improves identity accuracy and ensures better compatibility for hybrid or on-premises Active Directory environments.

This will allow the use of both ConfigMgr and Intune for syncing user data, including computer and user-computer relationship details.

Support for ServiceNow Zurich

This release also includes the support for the newer Zurich version of ServiceNow.

For the complete list of features and resolved issue in App Portal/App Broker 2025 R2, please refer the release notes here.

App Portal/App Broker 2025 R2 is now available for download in Product and License Center.

To keep yourself updated with App Portal/App Broker product releases and updates, please subscribe to this release blog!

We love to hear about your experiences and feedback by posting a comment here or in the App Portal Forum. Of course, the friendly Flexera Support team is also always standing by to take your call.

Thanks for being a partner of Flexera on this journey.

App Portal / App Broker integration with ServiceNow Zurich (Patch_2) Release

We are delighted to announce the App Portal/App Broker 2025 R1, and earlier versions* support the integration with ServiceNow latest version “Zurich (Patch_2)”.

Customers can use all the capabilities as supported today with the latest ServiceNow Zurich (Patch_2) version.

There is no impact or changes to the existing App Portal update set (Flexera Software App Broker Update Set For ServiceNow.xml) which customers can continue to use, this is available in the Product and License Center.

We love to hear about your experiences and feedback by posting a comment here or in the App Portal Forum. Of course, the friendly Flexera Support team is also always standing by to take your call.

Thanks for being a partner of Flexera on this journey.

* This does not include end-of-life App Portal/App Broker versions.

App Portal/App Broker 2025 R1 SP1 Release

App Portal 2025 R1 Service Pack 1 focuses on resolving important issues and introducing enhancement to help users get the most out of the features available in App Portal 2025 R1.

App Portal/App Broker 2025 R1 Service Pack1 includes the following important resolved issues and improvements.

Data Sync Improvement:

This data sync improvement will allow the user of both ConfigMgr and Intune for syncing user data, including computer and user-computer relationship details. The UniqueName value will be constructed as UserDomain\UserName utilizing OnPremisesSamAccountName and OnPremisesDomainName for the respective components in the WD_User table for Users.

Important issues addressed:

IOK-1826371 Authorization failing when invoking ServiceNow via REST API.

IOK-1428451 User records are not built appropriately when both ConfigMgr and

Intune Sync are enabled.

IOK-1840981 Intune User computer relationships do not get synced when both

ConfigMgr and Intune Sync are enabled.

IOK-1828409 Visibility Conditions not working for Hybrid user.

IOK-1843880 Manager Approval does not work for Hybrid user.

IOK-1324817 Default Category is not Set correctly when API used to create catalog

For the complete list of important resolved issues and improvements in App Portal/App Broker 2025 R1 Service Pack1, please refer the release notes here.

App Portal/App Broker 2025 R1 Service Pack1 is now available for download in Product and License Center.

To keep yourself updated with App Portal/App Broker product releases and updates, please subscribe to this release blog!

App Portal/App Broker 2025 R1 Release

We are excited to announce the general availability of App Portal/App Broker 2025 R1 release.

App Portal/App Broker 2025 R1 includes the following features and improvements.

Unified view to manage multiple Identity Access Management

 A new Identity Management view has been introduced to the App Portal menu. This view provides a streamlined interface to set up and manage user authentication through AD, Microsoft Entra ID, or both. It supports simultaneous use of AD and Entra ID users and groups. This is beneficial for customers transitioning from AD to Entra, allowing a smooth migration. The setup ensures seamless login access to the App Portal for both AD and Entra users, with the flexibility to choose one or multiple identity providers based on organisational needs.

Ability to Provide Permissions to Users/Groups

The App Portal now supports seamless integration with both Active Directory (AD) and Entra ID, allowing administrators to search and select users or groups from either identity source or both. If a user is not found in the primary identity source during login, App Portal will automatically fall back to the secondary source for authentication.

Permissions can be assigned at:

• Admin Security — Administrators can now search and select users or groups from both AD and Entra ID when configuring Admin Security. They can assign, edit, or delete permissions with ease. The system also provides a visual indicator of the identity source (AD or Entra), helping admins quickly identify where the user or group belongs.
• Catalog Security — Administrators have the ability to assign permissions to users or groups from both AD and Entra ID. Permissions can be granted, modified, or removed based on catalog requirements. The system also provides a visual indicator of the identity source (AD or Entra), helping admins quickly identify where the user or group belongs.

Ability to Leverage Active Directory / Microsoft Entra ID Attributes

The following capabilities can leverage attributes from Active Directory / Microsoft Entra ID:

• Visibility Condition — App Portal administrators can now add AD and Entra ID users/groups, along with Organizational Units (OUs) or Administrative Units (AUs), simultaneously streamlining configuration and access management. Catalog items are displayed to end users based on AD or Entra ID attributes evaluated through defined visibility conditions.

• Category Security — App Portal administrators can now add AD and Entra ID users/groups, along with Organizational Units (OUs) or Administrative Units (AUs), simultaneously streamlining configuration and access management. Catalog categories are displayed to end users based on AD or Entra ID attributes, enabling a personalized experience aligned with each user’s identity type.

• Approval Condition — App Portal administrators can now add AD and Entra ID users/groups, as well as Organizational Units (OUs) or Administrative Units (AUs), simultaneously. Approval workflows are automatically initiated based on AD or Entra ID attributes configured in the approval conditions.

Ability to Add Targets via Security Groups into Active Directory / Microsoft Entra ID

App Portal administrators can now configure users, devices or both into the specified groups in both AD and Entra ID groups at the same time, simplifying configuration. Targets are automatically added to their respective groups in AD and Entra ID based on the Security Group configurations and User Type.

Support Entra ID in Workflows

App Portal administrators can now create workflows using Entra ID users/groups. Entra users can be assigned as approvers and are enabled to perform approval actions, such as approving or rejecting incoming requests.

Ability to Submit Request

Hybrid, AD, and Entra users can now submit requests with enhanced flexibility, including options for submission without approval, basic approval workflows, license position checks and reservations, and the ability to request on behalf of other users.

Synchronization Support for Users and Computers

Basic support has been introduced to enable the simultaneous synchronization of Users and Computers from both Microsoft Configuration Manager (ConfigMgr) and Intune.

In Site Management > Settings > Deployment view, under the Intune tab, two new check boxes have been added to provide enhanced control over synchronization:

• Sync Users — Enables synchronization of user data from Intune.
• Sync Computers — Enables synchronization of computer or device data from Intune.

Installer Now Supports Configuring Multiple IAM

The App Portal installation and configuration experience has been enhanced to support flexible combinations of Authentication Types and Identity Providers. With this update, users now have the ability to select the desired authentication type during installation, allowing for configured identity management based on deployment needs.

App Portal supports the following configurations under the Identity Management settings:

• Windows Authentication + Active Directory Forest
• Single Sign-On + Active Directory Forest
• Single Sign-On + Active Directory Forest and Microsoft Entra ID
• Single Sign-On + Microsoft Entra ID

Support for ServiceNow Yokohama

This release also includes the support for the newer Yokohama version of ServiceNow.

For the complete list of features and resolved issue in App Portal/App Broker 2025 R1, please refer the release notes here.

App Portal/App Broker 2025 R1 is now available for download in Product and License Center.

To keep yourself updated with App Portal/App Broker product releases and updates, please subscribe to this release blog!

We love to hear about your experiences and feedback by posting a comment here or in the App Portal Forum. Of course, the friendly Flexera Support team is also always standing by to take your call.

Thanks for being a partner of Flexera on this journey.