Skip to Content

IdStory IdM product roadmap

Last modified by Zdeněk Burda on 2026/09/27 12:55
Information

This roadmap may change. Items for 2026 and 2027 are planned by quarter. If only the year is given, we will add the quarter later. Items for 2028 and later show the direction. We will specify scope and timing in later updates.

We release new versions of IdStory IdM regularly. In 2026 we released a new minor version about every month. Released versions: IdStory versions portal. Support periods: Maintenance Policy (CZ).

Roadmap at a glance

2026 - delivered
  • New approval engine with default approval setup by role criticality (IdM 16.1)
  • Technical assets for managing technical accounts under NIS2 (preview)
  • PAM module for CyberArk (early access)
  • Scheduled recertification
  • Automatic replacement of role guarantors (role owners) and approvers
  • Improved MS Graph API connector for Entra ID
  • In progress for Q4:// recertification of roles on other personal (secondary) and technical accounts
2027 - planned
  • IdM 16 general availability (Q1) and LTS (Q4)
  • Post-quantum encryption (Q1)
  • Automated health checks (Q1)
  • MCP server for internally hosted AI models (Q2)
  • Send a request back to the requester (Q2)
  • Connector catalogue and development kit (Q3)
  • AI-assisted operations (Q4)
  • Segregation of duties and approval of role model changes
  • Compliance reports for NIS2 and ISO/IEC 27001
2028 - 2029 - direction
  • Management of AI agents and other non-human identities
  • AI-assisted configuration
  • Detection of unused accounts
  • Reference configuration and role analytics
  • Access requests in natural language
  • Next LTS version (2029)

Versions and support

VersionStatusKey dates
IdM 14LTS, maintenance onlyPatches every 3 months, security fixes as needed. Last planned patch January 2028. Support until 1.1.2028. Status of IdM 14
IdM 15Current version, active developmentNew minor versions released continuously
IdM 16Early release: 16.0 (July 2026), 16.1 (September 2026). For pilot deployments, not yet for general production use.General availability Q1 2027. New LTS in Q4 2027, replaces IdM 14. IdM 16 overview
Next LTSDirection2029

Detailed roadmap

Click a column header to sort. Use the fields below the header to filter.

AreaCapabilityReleaseTimingStatus
ApprovalsReminders for open approval tasks15.112026 Q1Delivered
ApprovalsAutomatic replacement of a role guarantor (role owner) who leaves or is deactivated15.172026 Q3Delivered
ApprovalsAutomatic replacement of approvers of open tasks15.182026 Q3Delivered
ApprovalsDefault approval setup by role criticality, ready after upgrade16.12026 Q3Delivered (early release)
ApprovalsOld approval processes removed. All approvals use the new workflows.162027 Q1Planned
ApprovalsSend a request back to the requester for completion162027 Q2Planned
ApprovalsSegregation of duties (incompatible roles) as a condition in the new workflows. Four-eyes principle without custom scripts. 2027Planned
ApprovalsApproval of role model changes: role definitions, automatic roles, business role composition and role removal. Default processes included. 2027Planned
ApprovalsGraphical overview of running approvals 2028 H1Direction
Privileged and technical accountsPAM module for CyberArk (early access)PAM 15.02025 Q4Delivered
Privileged and technical accountsBetter support for other personal (secondary) accounts15.6 - 15.92026 Q1Delivered
Privileged and technical accountsBetter audit of roles assigned to other personal and technical accounts152026 Q2Delivered
Privileged and technical accountsMore automation in the lifecycle of other personal (privileged) accounts152026 Q3Delivered
Privileged and technical accountsTechnical assets: technical accounts grouped as an identity, to support NIS215.14, Technical accounts 15.22026 Q2Delivered (preview)
Privileged and technical accountsTechnical assets: final version 2027 Q1Planned
Privileged and technical accountsBetter audit of privileged and technical accounts 2027 Q1Planned
Privileged and technical accountsManagement of AI agents and other non-human identities: owner, lifecycle, access scope, recertification. Builds on technical assets. 2028Direction
Compliance and recertificationScheduled recertificationRecertification 15.02025 Q4Delivered
Compliance and recertificationRecertification of roles on other personal and technical accounts, manual and scheduled15, 162026 Q4In progress
Compliance and recertificationCompliance reports mapped to NIS2, national laws based on NIS2, and ISO/IEC 27001 controls 2027Planned
Compliance and recertificationDetection of unused accounts, based on last activity in connected systems 2028 H1Direction
Roles and configurationReference configuration in the product: lifecycle, approvals and recertification ready after installation 2028 H2Direction
Roles and configurationRole analytics: role usage, roles often assigned together, business role suggestions 2028 H2Direction
AI and automated operationsAutomated health checks 2027 Q1Planned
AI and automated operationsMCP server for internally hosted AI models162027 Q2Planned
AI and automated operationsAI-assisted operations: stuck tasks and anomalies in synchronization and provisioning, with suggested fixes162027 Q4Planned
AI and automated operationsAI-assisted configuration 2028Direction
AI and automated operationsAccess requests in natural language, built on the MCP server 2028 H2Direction
IntegrationImproved MS Graph API connector for Entra IDMS Graph API connector 2.02026 Q2Delivered
IntegrationConnector catalogue and development kit for customers and partners. Guided connection of new systems. 2027 Q3Planned
Platform and securityIdM 16 early release: Spring Boot 4, Java 21, PostgreSQL only16.0, 16.12026 Q3Delivered (early release)
Platform and securityIdM 16 general availability (GA)162027 Q1Planned
Platform and securityPost-quantum encryption162027 Q1Planned
Platform and securityIdM 16 becomes LTS and replaces IdM 14162027 Q4Planned
Platform and securityNext LTS version 2029Direction

Status

  • Delivered: released, see the versions portal.
  • In progress: in development for the given quarter.
  • Planned: planned for the given quarter or year.
  • Direction: intended direction. Scope and timing will follow.

Terms

  • Role guarantor: the role owner. The person responsible for the role.
  • Other personal accounts: secondary accounts of the same person, often privileged (for example admin accounts).

Under consideration

Topics we are evaluating for the roadmap. No timing yet. When we schedule a topic, it moves to the tables above.

TopicWhy we consider itBuilds on
Self-service connection of systemsMid-size customers want to connect systems and change part of the setup themselves.Connector catalogue and development kit (2027 Q3), reference configuration (2028)
Guided deploymentThe product guides the administrator through deployment. Customers go live sooner.Appliance, reference configuration (2028)
Custom user interfaceCustomers want the interface to match what their users are used to.Form projections, REST API used by the frontend
Maintenance-free applianceLess work for the customer. Updates and self-monitoring without special skills.Appliance, health checks (2027 Q1), AI-assisted operations (2027 Q4)