Enhancements​

• Configurable pricing simulate API for VC-UI Added a new PricingSimulateApi AppSetting in VC-UI so pricing simulate requests can be routed to either the Opportunity Pricing API or the Sales Document simulate API. This makes it easier to test against SAP environments that expose pricing through different RIOs while preserving the existing Opportunity Pricing behavior by default.

Get it here: v9.6.35

🚀 Arnold™ 0.7.4 Release​

Arnold™ 0.7.4 introduces enhanced monitoring, more flexible custom tools, and improvements to OAuth authentication and Microsoft Copilot connectivity.

🔍 Enhanced Monitoring & Troubleshooting​

What it is​

Webhook logs now include Correlation IDs, making it easier to trace requests across arnold, external applications, and SAP.

Why it matters​

• Trace requests across end-to-end workflows
• Speed up troubleshooting
• Improve operational visibility

⚡ More Flexible Custom Tools​

What it is​

Custom Jint tools can now use named connections, allowing a single custom tool to connect to different SAP systems other than the Client App.

Why it matters​

• Support multi-system integrations
• Build more flexible custom tools
• Simplify complex integration scenarios

🔐 Improved Authentication & Copilot Connectivity​

What it is​

Improved OAuth and Dynamic Client Registration (DCR) with better re-authentication, XSUAA identity provider pre-selection, consent handling, and more reliable chat session initialization.

Why it matters​

• Simpler Microsoft Copilot onboarding
• Faster authentication setup
• More reliable sign-in and connection flows

[Feature]: Swagger API Testing Security and Usability Improvements

• This release introduces API testing using a principal propagation destination and OpenID Connect (OIDC) configured in Swagger API documentation.

• Swagger now supports OAuth2 authorization. Users can authenticate in Swagger using the OpenID Connect flow.

Detailed documentation can be found here: Swagger UI

[Feature]: Optional session-id header for session management

• This release introduced an optional header parameter called session-id which will help manage the sessions better.

Additional details can be found in the session documentation.

Bug Fixes​

• VC Session Recovery After Browser Back Navigation
  Fixed an issue in the Variant Configuration UI where navigating away with the browser back button could leave an orphaned SAP session. Returning to the configurator could then fail with a session-related error. The application now closes and recovers sessions correctly so VC can be reopened reliably.

Get it here: v9.6.29

🚀 arnold™ 0.7.3​

enosix arnold™ Plugin for Microsoft 365 Copilot Cowork​

What it is​

The enosix arnold™ plugin is now available for Microsoft 365 Copilot Cowork, enabling users to securely access live SAP ERP data and execute SAP business workflows directly from the Microsoft 365 Copilot experience. Users can install the plugin from Microsoft AppSource, authenticate with their arnold environment, and interact with SAP using natural language—all without leaving Microsoft 365.

What you can do​

Using the enosix arnold plugin together with Microsoft 365 Copilot Cowork, users can:

• Retrieve real-time SAP business data using natural language
• Search sales orders, deliveries, invoices, quotes, customers, inventory, and other SAP business objects
• Update supported SAP business transactions through governed approval workflows
• Automatically draft customer emails from Cowork using live SAP information
• Generate Excel worksheets populated with SAP data for analysis and reporting
• Create Word documents, summaries, or customer reports using real-time SAP data
• Prepare PowerPoint presentations using the latest SAP business data
• Share updates directly in Microsoft Teams without manually copying information between systems

Why it matters​

Microsoft 365 Copilot Cowork works across Outlook, Teams, Word, Excel, PowerPoint, SharePoint, OneDrive, Calendar, and other Microsoft 365 services, allowing users to combine enterprise SAP data from arnold with the Microsoft applications they use every day. Instead of switching between SAP and Microsoft 365, users can complete end-to-end business tasks from a single AI-powered workspace—for example, retrieving a sales order from SAP, creating an Excel report, drafting a customer email with the latest order status, and sharing updates with the sales team in Teams. All actions remain governed by Microsoft 365 approval, security, and compliance controls.

Watch the demo: Arnold + Microsoft Copilot Cowork Demo

​

🔗 Improved Client App & Connection Management​

What it is​

Client Apps can now only be associated with active connections. Disabled or inactive connections are automatically excluded during Client App configuration, preventing unsupported or invalid assignments.

Why it matters​

• Eliminates configuration errors before deployment
• Simplifies Client App administration
• Prevents integrations from referencing unavailable connections
• Reduces support and troubleshooting effort

---

👤 Smarter Authentication & User Validation​

What it is​

Authentication has been refined to better distinguish between active users, inactive users, and unknown users. arnold now applies the appropriate authentication flow for each scenario, providing clearer portal behavior while eliminating incorrect warnings generated during sign-in.

Why it matters​

• More accurate user validation
• Improved security and audit accuracy
• Cleaner system logs
• Better administrator visibility into actual authentication issues

🚀 arnold™ 0.7.2​

arnold™ 0.7.2 focuses on improving security, operational reliability, and enterprise readiness. This release strengthens authentication and authorization workflows, improves distributed infrastructure support, and delivers more resilient deployment and maintenance operations.

---

🔒 Stronger Security & Access Controls​

What it is​

Security has been enhanced across credential management and authentication workflows. Access to the My Credentials page is now restricted to authorized users, credential actions are automatically disabled when a connection is inactive, and Dynamic Client Registration (DCR) consistently requests User Consent during onboarding.

Why it matters​

• Prevents unauthorized credential access
• Eliminates invalid credential operations on inactive connections
• Ensures consistent consent and authorization during client registration
• Improves compliance with enterprise security requirements

---

🚀 Enhanced Scalability with Distributed Caching​

What it is​

arnold now supports multiple arnold application instances.

Why it matters​

• Improved scalability for multi-node deployments
• More consistent user sessions and application behavior
• Better performance under higher workloads
• Increased resilience in cloud-hosted environments

Bug Fixes​

• VC message ignore filtering now applies correctly Fixed an issue where configured VC message numbers to ignore were still appearing in logs. Matching messages are now filtered correctly in VC-UI.

• Finalize stays disabled until debounced VC updates complete Fixed an issue where Finalize could become available before the last debounced VC request/response cycle completed, which could allow premature finalization.

• Radio selections no longer trigger duplicate VC Process calls Fixed an issue where selecting a radio option triggered VC Process twice and could clear the selected value.

• Reset no longer clears SAP-calculated values Fixed an issue where Reset could erroneously clear SAP-calculated values.

Get it here: v9.6.22

🚀 arnold™ 0.7.1​

🔗 Simplified Connection Management​

A new dedicated Connections tab has been added to Arnold Portal, providing a centralized location for managing SAP and application integration connections — including OAuth configuration, callbacks, and connection validation.

Why it matters

• Simplifies administration and onboarding with a single place to manage all connections
• Reduces time spent configuring and validating integrations
• Improves visibility into connection health and OAuth settings
• Helps organizations scale AI initiatives more efficiently

🧪 Enhanced MCP Tool Testing​

The MCP Tool Tester in Arnold Portal has been improved with a cleaner tool selection experience, making it faster to validate and troubleshoot AI integrations.

Why it matters

• Tool selection now uses a dropdown instead of a full list, reducing clutter and improving usability
• Accelerates testing and deployment of MCP tools
• Improves visibility into tool behavior before production rollout
• Helps teams deliver AI-powered experiences with greater confidence

🔐 Security Improvements​

This release includes critical security enhancements to protect your data and integrations.

Why it matters

• Inactive users are now properly denied access to Arnold Portal and all MCP endpoints
• PDF download requests now require valid OAuth credentials — if credentials are missing, users receive a clear prompt to authorize in the portal rather than a silent failure
• Your integrations are better protected against unauthorized access

📄 Document Download Reliability​

PDF document downloads have been refactored to behave consistently and provide clear feedback when a document is unavailable.

Why it matters

• PDFs are now always fetched before determining how to deliver them (inline or via URL), ensuring consistent behavior regardless of the configured download mode
• A clear error is returned when a document cannot be found, eliminating silent failures that could mask configuration issues
• Improves troubleshooting and reduces support burden

🛠️ Admin & Integration Enhancements​

The portal includes several improvements for administrators and integrators.

Why it matters

• An OAuth authorization server metadata link now appears next to Client Credentials, giving administrators quick access to endpoint details needed for manual client registration and configuration
• All MCP tools are now explicitly marked as read-only or write operations, helping AI agents and integration clients distinguish safe queries from operations that modify data
• System information can now be retrieved using user-level credentials alongside tenant credentials, improving flexibility in mixed-credential environments
• The Test Connection button is now only enabled when the appropriate credentials are configured, reducing confusion during setup
• Inactive clients are no longer shown on the Dashboard, keeping the admin view accurate and uncluttered
• Client creation validation now correctly checks the user's original input before trimming, ensuring names are validated as entered

Bug Fixes​

This release corrects the behavior of the sanity-check URL for two scenarios:

• The endpoint must be enabled in the API proxy with the SanityCheckEnabled variable with the value of true.

• The endpoint now correctly handles the SAP client value.

Read more about the SAP client feature at the feature documentation.