What's new in Adaxes 2026.1

This release continues our move toward better support for cloud-only environments, while steadily improving the web interface. The headline features are sign-in for Entra users and password self-service on Entra-joined devices, removing limitations that bound many activities to Active Directory.

Alongside the bigger changes, you'll find smaller additions like UI text import/export. Some of them are subtle, some very practical, but all of them follow the same direction – making Adaxes convenient to configure and use in any scenario.

Read on to find out what's new in Adaxes 2026.1.

Sign-in for Entra users

You can now sign in to the web interface and web interface configurator with a cloud-only account. This important milestone changes the rules of the game and simplifies day-to-day management in environments that are drifting away from Active Directory.

Admins and helpdesk can use their Entra accounts to manage unrelated on-premises domains. Employees with Entra accounts now have more self-service opportunities. After signing in, they are free to do whatever their security roles in Adaxes allow them to do.

We decided not to reinvent the wheel with the authentication mechanism. Entra users follow the sign-in flow of your Entra organization. Any conditional access policies, multi-factor authentication requirements, or other tenant-level controls you have in place are enforced. One nuance worth noting – in hybrid environments, a synchronized user will always be signed in with their on-premises account if both accounts share the same username.

To enable sign-in for Entra users, the Entra domain must be registered using Entra app credentials. Assuming most of you are already following this best practice, the configuration comes down to adding a Redirect URI to the existing application registration. For details, have a look at this help article.

Password self-service for Entra devices

Entra sign-in would not be complete without password self-service. Users with cloud-only accounts can now reset their passwords via Adaxes, just like users with on-premises accounts.

Even better, password self-reset from the OS logon screen is now available on Entra-joined computers – being Active Directory domain-joined is no longer a requirement. Granted, you still need to install the Adaxes self-service client on such computers.

There is one important limitation to be aware of. Password self-service for Entra users cannot be enabled selectively. We wish there was a way, but there isn't. For a given Entra domain, you either use Adaxes password self-service for all users, or rely on the native Entra mechanism. The steps that describe how to set up Adaxes password self-service in Entra ID are outlined in this help article.

To configure password self-service from the OS logon screen on Entra devices, you need to perform additional steps. We won't go into details here because all the information about how it works and how to set it up is in the updated self-service client installation guide.

Token-based authentication for REST API

REST API authentication is now much simpler – we have added the ability to generate permanent and temporary access tokens via the dedicated PowerShell cmdlets. This removes all the legacy authentication code overhead previously required in every script, making these scripts easier to maintain.

We didn't axe the legacy method yet because we honor backward compatibility. However, we suggest slowly transitioning to the new token generation approach in your REST API integrations.

You can discover more about how it works on the REST API authentication overview page, or jump straight to the documentation for the new cmdlets:

• New-AdmAccountToken
• Get-AdmAccountToken
• Remove-AdmAccountToken

Resetting MFA in Microsoft 365

Adaxes now allows you to reset multi-factor authentication in Microsoft 365 out of the box. This is one of those everyday tasks that most environments had covered with a small script – simple enough, but still something you had to maintain.

The new functionality is added to the existing Reset multifactor authentication operation which already lets you reset MFA for Adaxes web interface and password self-service. Here's how it looks in the web interface.

The same operation is also available as an action, so you can reuse it in business rules, scheduled tasks, or custom commands without wiring scripts into your workflows.

To use this feature, the Entra application that Adaxes uses to manage your domain needs the UserAuthenticationMethod.ReadWrite.All permission. The updated permission list is available in this article.

For details on how to grant permissions to reset MFA and how to configure this operation in the web interface, see How to grant rights to reset multifactor authentication.

Organizing operations

Operations in the web interface can now be grouped and rearranged. While the default order remains unchanged, you can tailor the layout to better match your workflows and user expectations.

A particularly useful aspect of this feature is the ability to organize custom commands and place them under collapsible groups. If you maintain a large number of commands, this makes the interface much easier to navigate.

Importing and exporting UI texts

Web interface UI texts can now be exported, translated externally, and imported back. What used to be a slow, manual exercise is now a workflow you can plan and execute properly.

Translators no longer need access to the web interface configurator. They can work in the tools they are used to, at their own pace, without touching your environment. Who knows, maybe this will be a tipping point for those of you who kept postponing UI translation.

XLIFF, JSON, and CSV formats are supported. The import/export buttons in the web interface configurator are self-explanatory, but here's a refresher on where to find them: How to change UI texts in web interface.

Web interface improvements

This set of improvements focuses on everyday interactions in the web interface. The changes are small in isolation, but together they reduce friction in common tasks and make the interface more convenient to use.

Autocomplete

Suggestions and autocomplete have been added to various input fields in the web interface. Recently used values are preserved and can be quickly reused where appropriate. For example, in advanced search or when editing directory property values.

Autocomplete suggestions are maintained per-field. Adaxes will never suggest using your typical office address when editing the job title of a user.

Smarter pasting of object identifiers

When pasting identifiers into fields, Adaxes attempts to resolve each identifier into a specific object. If an identifier is not unique or doesn't match anything, you can now fix the pasted object on the spot.

This is especially useful when copying data from spreadsheets or external systems. Duplicates and typos no longer force you to manually add dozens of objects while guessing what went wrong.

Better interruption handling

If something goes wrong on the server-side while you are working in the web interface or configurator, Adaxes now pauses the session instead of allowing you to click around and stumble into errors. A clear message explains what is happening and temporarily blocks further interaction.

As soon as the connection is restored, you can continue exactly where you left off. There is no need to reload the page, re-enter data, or restart a task that was already in progress.

Value reference editor

Working with value references in the web interface and configurator is now easier thanks to an updated editor, similar to the one available in the administration console.

On top of that, every field where value references can be used offers syntax suggestions, highlighting, and autocomplete.

Default content pane sorting and grouping

Default sorting and grouping options can now be configured for content panes on the home page. Users can still override these settings for themselves, but now you can provide more meaningful defaults.

Resizing columns

Column widths can now be resized when only two columns are present. Two-column layouts are quite common across the default views, so this improvement will be a welcome one for every web interface user.

Expandable Logon workstations field

By popular request, the Logon workstations property field is now fully expandable. All values are visible at once and can be copied directly, without entering edit mode or relying on tooltips.

Deny changing time

It is now possible to forbid changing the time portion of date properties in the web interface. It also means that you don't have to pick a time on fields where it doesn't make sense.

Password parameter

The Edit box parameter in custom commands and reports now has an new value type – password. The entered value is obfuscated in the web interface input field and, more importantly, in the log records.

Extended clipboard support

Clipboard support for web interface configurator introduced in the previous release has been extended further. Copy and paste is now supported for:

• Default columns in the Columns section
• Sections and fields on all forms and views
• Predefined fields in Create and Update object actions

Connecting to Security and Compliance center

We have added options to the ConnectExchangeOnline method to enable connection to the Microsoft Security and Compliance center without explicitly invoking the Connect-IPPSSession cmdlet. This cmdlet causes memory leaks because it creates sessions which are never terminated. The new approach used in Adaxes avoids creating a new session if an existing one can be reused.

Entra app secret expiration notification

Now, Adaxes will notify you when a client secret of an Entra app used to manage an Entra domain, manage a Microsoft 365 tenant, or send email notifications via Exchange Online expires soon.

By default, daily notifications start 7 days before the secret expires. Of course, there is a configuration parameter that lets you change this interval or disable the notifications.

Dark theme improvements

The favicon configuration now includes both light and dark theme previews. Also, we simplified the syntax for setting theme-dependent colors in SVG logos. See the Custom theme-dependent colors tutorial section for details.

Other web interface improvements

• The web interface now remembers when you expand or collapse objects grouped in a list, and preserves the expanded/collapsed state when returning to that page later.
• The web interface now preserves custom table widths. For example, if you resize the table with search results, the width will remain the same when you perform a new search.
• It is now possible to hide the Create account button in the Microsoft 365 section on object views, denying Microsoft 365 account creation from the web interface.
• The Member of section and Add to group operation are no longer displayed for Microsoft 365 groups to align with the fact that such groups don't support nesting.
• The snackbar that appears after pasting values no longer covers important buttons, so you don't have to wait for it to disappear before proceeding.
• It is now possible to set the recipient limit for Exchange Online mailboxes.
• It is now possible to add Entra guest users to mail-enabled groups in Exchange Online.
• The Membership update duration column in the web interface now displays user-friendly values.
• Improved the loading speed of the My managed objects pane on the home page when there is a large number of extending objects in the Adaxes backend.
• Improved the loading speed of web interface actions when many actions exist and the network connection to managed domains is slow.
• Improved the CPU performance when the top-level nodes in the web interface are automatically determined based on the signed-in user.
• Improved the behavior of the Password self-service card to simplify reenrolling for password self-service when the effective policy changes.
• Improved font detection in the the auto-reply message editor when messages were set via an external editor like Outlook.
• Improved keyboard controls in the object selection dialogs.
• Improved value reference handling in drop-down fields in the criteria editor.
• Improved the formatting for the Address field on object views. Also, the field now supports multiple locales.
• Value reference usage examples can now be copied by clicking on the example text.

Bug fixes

As usual, every release includes important bug fixes based on your feedback.

Web interface

• Fixed the The 'uSNChanged' property cannot be found in the cache error that blocked web interface sign-in for users without rights to view this property.
• Fixed an issue where it was not possible to disable the Edit button in the Exchange section.
• Fixed the Failed to execute 'atob' on 'Window' error that occurred when adding the Object GUID column to object views.
• Fixed an issue where enabling Always keep these sites active in Google Chrome (and similar options in other browsers) prevented idle session sign-out from the web interface.
• Fixed the Unable to cast object of type 'System.String' to type 'Softerra.Adaxes.Models.Directory.LargeIntegerDto' error that occurred when editing large integer properties like Max storage.
• Fixed an issue where the absence of the Group type property on the group creation form caused Adaxes to ignore the default value in the relevant property pattern.
• Fixed an unexpected error that occurred when attempting to remove group members with no members selected.
• Fixed the Object reference not set to an instance of an object error that could occur when moving a selection of objects to another OU using a custom command.
• Fixed a bug in the auto-reply message editor that would incorrectly save certain formatting and add unintended line breaks.
• Fixed a visual bug where the Name column in object selection dialogs would become hidden after resizing the dialog several times.
• Fixed the issue with Enhanced Security Mode in Microsoft Edge, where web interface would become unresponsive for a brief period of time after solving CAPTCHA is that feature was enabled.
• Fixed a bug on mobile devices where it was not possible to close the actions pane without reloading the page if many custom commands with long names existed.
• Fixed an unexpected error that occurred on mobile devices with small screens when performing operations on a subset of objects from the basket.
• Fixed a visual bug on mobile devices where the actions pane could get stuck for a few seconds after executing a custom command on a selection of objects.
• Fixed a visual bug on mobile devices with small screens where the browsing pane would appear for a few seconds after adding an object to the basket.
• Fixed an issue where the approval request description was not updated after modifying a pending property value and closing the dialog without approving or denying the request.

Web interface configurator

• Fixed the bug that made it impossible to change the configuration of the secondary phone number fields on forms and views. For example, the Other home phones field.
• Fixed an issue where the web interface configurator did not correctly update the cached list of available reports if a report was created or deleted while configuring the web interface.
• Fixed a bug that blocked certain actions in the web interface configurator because of unsaved changes.
• Fixed an assortment of visual bugs that could occur after setting the default value of the Membership update schedule field using the keyboard.
• Fixed a visual bug with the vertical resizing of the Description field when editing web interface actions.
• The web interface configurator now correctly displays an error when the configuration cannot be saved because no object types are selected in the Browsing section.
• It is no longer possible to insert a value reference into fields where custom values are not allowed.

Administration console

• Fixed a bug that caused the administration console to crash when editing the assignments of a report category.
• Fixed a bug that prevented modifying the description of business unit members from the result pane.
• Fixed an issue that prevented refreshing a domain node in the administration console while a business unit is being refreshed in the web interface.
• Fixed a bug that prevented removing property values from the result pane using only the keyboard.
• Fixed a bug where custom attributes were not displayed if the Show Empty Properties option was enabled.

Configuration backup/restore

• Fixed the Failed to import configuration objects to the backend. The name reference is invalid error that occurred when restoring configuration from certain backups.
• Fixed The name reference is invalid error that occurred when restoring certain configuration backups.
• Fixed a bug that caused invalid owner display settings for the Managed by property after restoring certain configuration backups.
• Service accounts are now automatically added to the list of object types available for search after restoring configuration backups from older versions where service account management was not supported yet.

Scripting

• Fixed an issue where a value reference to a property would instead resolve into the value of an identically named custom command parameter, if such parameter existed.
• The badItemLimit and largeItemLimit parameters of the CreateMoveMailboxToM365Request method are no longer mandatory. This resolves A parameter cannot be found that matches parameter name error that occurred because these parameters had to be specified but were deprecated in Exchange Online.
• Fixed the Access is denied error that occurred when pipeline-binding to approval requests in scripts and another error that occured when denying such requests.
• The Remove-AdmGroupMember and Remove-AdmPrincipalGroupMembership cmdlets no longer silently fail when removing members from another domain.
• Fixed a memory leak in the Import-WinModule cmdlet by updating the PowerShell version in Adaxes to 7.5.1.
• Fixed the Type 'System.ArrayEnumerator' is not marked as serializable error that occurred when attempting to enumerate certain property pattern constraints using a script.

Other

• Fixed the Object reference not set to an instance of an object error that occurred when attempting to reset a user's password if the Adaxes service account was used to manage the domain and had no permissions to reset passwords.
• Fixed the issue where security roles would not grant permissions over group members in certain scenarios.
• Fixed an issue with copying criteria as text which caused boolean values to be copied as N/A.
• Fixed an issue where missing app permissions and roles were incorrectly evaluated during the second and subsequent attempts to register an Entra domain.
• Fixed an issue where auto-generated links for downloading binary property values from exported documents weren't working.
• Fixed the value format of the Distinguished name property in exported documents.