Skip to main content

What`s new in oneclick™?

Version / Release: 2607.01.013​

Release date: 17 July 2026

Improvements​

New "static" autoscaling mode for destination pools​

Destination pools now have a second autoscaling mode. The existing elastic mode creates and deletes virtual machines (VMs) depending on load. The new static mode instead only starts and stops the destinations already in the pool and never creates or deletes VMs. This is handy for starting and stopping RDS hosts by load, or for keeping a fixed number of VDIs powered on and free so users can start right away. You set how many systems should run at a minimum and maximum, and oneclick™ handles the rest automatically based on the current load.

More insight and control for autoscaling​

Several changes make autoscaling easier to configure and monitor, and safer to set up:

  • Autoscaling history: the destination pool details now include an autoscaling log. For each scaling action it shows when it happened, what was scaled, why, and whether it succeeded — including the exact error if it failed. Entries are kept for four weeks.

  • Cooldown to prevent flapping: a new cooldown setting makes autoscaling wait after a load-based action before it scales in the opposite direction, so a VM sitting near a threshold no longer starts and stops repeatedly.
  • Idle shutdown: in static mode, a running VM that has had no active users for longer than a configurable idle time is shut down (down to the minimum), even when other heavily loaded VMs keep the pool average above the threshold. Freshly started, just-woken, and maintenance VMs are exempt.
  • Clearer guidance when switching mode: when you switch the autoscaling mode, a note explains the effects of both options. Elastic mode creates and deletes VMs based on load (which can incur cloud provider costs), while static mode never creates or deletes VMs. Autoscaling only ever deletes VMs it created itself; manually added VMs are never touched. Selecting an elastic profile for a pool requires an explicit confirmation, and a grace period prevents short-lived errors from triggering immediate deletions.
  • Inline threshold hints: when a load criterion (CPU, RAM, or users) is configured so that it no longer affects scaling, an inline hint now points this out.
  • Clearer info texts: the tooltips for the start/stop timeout, the execution interval, and the force-scale-down warning have been reworded for clarity.

Event profile logs now record skipped events​

Event profile execution logs now also record events that were skipped. Each entry includes a timestamp and, where available, the reason — for example "Condition not met" or "Skipped by user". Previously, skipped events were not listed in the log.

See where a policy or event profile is used before deleting it​

The delete confirmation dialog for policies and event profiles now lists where the item is currently in use and notes that it will no longer take effect there after deletion — so you can gauge the impact before you confirm.

Policy details show affected users and app instances​

The policy details view can now show which users and which app instances a policy actually affects, derived from its rules. The boxes reveal the affected sets when you click, so you can review a policy's reach without piecing it together manually.

Redesigned destination pool details​

The destination pool details view has been reworked so that active functions are clearer. Once you enter credentials or choose a default destination, a dedicated tile appears for each — with edit and delete actions — instead of the setting sitting at the top. Removing the tile deactivates the function again.

CPU and RAM on computing resource destinations​

The detail view of a computing resource destination now shows the instance's CPU and RAM directly. The "utilization" value that was shown before has been removed from the list.

Jump from a destination to its connection​

The destination details now link to the details of the underlying connection and network, where the unique key is shown. This makes it easier to identify the right connection — for example when several connections share the same name.

The license detail view now has a tile that links to the user list pre-filtered by that license, and the app configuration detail view links to the app list pre-filtered by that app configuration. You can see what is assigned without setting the filter manually.

Clearer selected state for text-based filters​

Selected filters shown as text now appear bold and underlined. This affects, for example, the "License" filter under Users, so you can tell at a glance which filters are active. Chip-based filters (Groups, Roles) already had a clear selected state.

Reset passwords for several users at once​

Resetting a user's password is now also available from the multi-select above the user table. For a single user, the familiar dialog opens unchanged. When you select several users, oneclick™ sends each of them a sign-in link instead — so you can trigger a password reset for many users in one step, without handling individual passwords.

Refreshed license icons​

The Basic User, Professional User, App Standard, and App High Performance licenses now use dedicated icons that match their license type.

Naming hint when creating multiple VMs​

When you enter a quantity greater than one in VM Create, a suffix hint now shows how the names will be numbered, so it is clear how the created VMs will be named.

Mesh client download button disabled until ready​

The "Download Mesh client" button now stays disabled until the required data has been entered.

Clearer hint text for process input fields​

The hint under process configuration now makes clear that the listed fields are required only when the process is executed, not during creation.

More reliable Active Directory and LDAP synchronization​

AD and LDAP user synchronization now matches existing users by their stable directory identifier (the Azure Graph ID, or objectGUID / entryUUID for LDAP) instead of by email address. Users whose email changes in the directory — for example after a name change — are no longer imported as duplicates, so their group memberships and assignments are preserved. If a changed email already belongs to another local user, the import skips that user and notifies the admin instead of merging automatically. Synchronization of large directories (1,000+ groups) is also much faster, and the synchronization dialog no longer flickers while loading.

Improvements across cloud provider integrations​

  • Open Telekom Cloud: the new ECS flavor families (s9, x1m, p5e) are now bookable. Image creation now also works for source VMs that have only a private NIC, and no longer leaves behind empty network security groups.
  • Exoscale: stopping a VM that is in a transitional state (for example starting or stopping) now waits for a stable state instead of failing with a raw provider error. Unused network security groups are now cleaned up.
  • IONOS: provider errors now surface the actual cause instead of a misleading "Cannot read properties of undefined" message.

Bug Fixes​

  • AD user import no longer crashes for already-existing users: User import from Active Directory no longer aborts with an "Undefined array key" error when an imported user already exists, so the remaining users in the batch are imported reliably.
  • Multi-select delete works for policies, roles, and activities: The "Delete" button in the confirmation dialog is now enabled when deleting policies, roles, or activities from the table's multi-select, matching the behaviour of other tables.
  • App tiles update after a destination is deleted: When an admin deletes a destination that is still used by an app instance, the affected tiles now update automatically and the destination selection is cleared, so the app can be pointed at a valid destination instead of failing to start.
  • Orphaned event profiles can be deleted again: Event profiles whose linked process was removed can now be edited and deleted from the UI instead of returning a technical error.
  • Cloud Subscription connection form validates instead of erroring: Submitting an empty "Cloud Subscription" connection form now shows inline field validation instead of a 500 server error.
  • "New destination" Public Internet form validation clears correctly: After you fill in the public hostname or public IP, the other field no longer stays marked as invalid.
  • Removing a port from a public destination now takes effect: Removing port 3389 from a public destination now correctly affects access and is reflected in the app configuration.
  • Disconnect icon back in the destination filter: The disconnect icon is shown again in the destination table's filter.
  • Corrected documentation and terms links: The StackIT provider documentation link, the license terms links (after the terms were split into separate Business Terms and Licence Terms), and the German "Load Balance Info" help link now point to valid pages.
  • Password managers target the right fields: Autofill from password managers such as Bitwarden or 1Password now appears on credential fields (for example admin username and password) and no longer on unrelated fields such as search or numeric inputs.
  • Clear sign-in denial when a license cannot be applied: When a user's license cannot be resolved — for example when it belongs to a different division than the one being signed in to — the sign-in is now cleanly refused instead of failing with a server error.

Version / Release: 2606.02.016​

Release date: 17 June 2026

Improvements​

Revamped two-factor authentication flow​

The 2FA experience has been overhauled to handle everyday situations more gracefully. Users now have three attempts to enter the correct code before they are signed out, and when several 2FA factors are configured (for example through both a license and an app configuration policy), solving any one of them is enough to continue.

  • A method chooser inside the 2FA dialog lets users switch between authenticator app, SMS, and email
  • Quickly switching between methods no longer triggers duplicate codes
  • 2FA policies attached only to an app configuration now reliably trigger when starting the app

Reset your own password from the admin area​

Admins can now reset the password of the account they are currently signed in with, directly from the Users area. The dialog offers two options: setting a one-time password after entering the current password, or sending a oneclick™ sign-in link to the account's email address.

Searchable event profile execution logs and longer retention​

Event profile execution logs can now be searched by the names of affected objects instead of only their IDs. Entries link directly to the related detail view, and removed objects are clearly marked. The retention period for execution logs has been extended to one year, so monthly reports can look back over a full calendar year.

Pause and resume autoscaling​

A paused autoscaling state is now shown directly on the destination pool details and can be resumed with a single click. If autoscaling hits repeated permanent errors, it now pauses automatically and waits for a manual confirmation instead of looping.

Bulk deletion of groups and processes​

Groups and processes can now be deleted in bulk from their respective tables. Associated permissions are removed at the same time.

License management refinements​

The license area has been refined to make day-to-day handling easier and safer:

  • Ended licenses can be deleted directly from their row in the table
  • Delete warnings are clearer and include a distinct hint when the underlying contract has been cancelled
  • Active licenses are protected from accidental deletion, and the dialog now states the actual blocking reason (active subscription period) instead of incorrectly pointing to assigned users

Private Active Directory and Entra ID connections handle deleted oneclick™ groups​

When a oneclick™ group referenced by a Private Active Directory or Entra ID connection's group mapping has been removed, the connection no longer fails to save or sync. Affected mappings are flagged in the group mapping table with a clear "oneclick™ group deleted" indicator, and the remaining valid mappings continue to sync as before. Error messages from saving a connection are now also shown directly in the admin area, together with a trace ID that makes it easier to follow up with support.

Base DN is now a required field in the Directory Service wizard​

In the Private Directory Service connection wizard, the "Base DN" field is treated as required. The "Next" button stays disabled until a value is entered, preventing the previous generic error message after submitting.

Support for escape characters in Active Directory Distinguished Names​

Active Directory user import now correctly handles LDAP-standard escape characters such as \, in Distinguished Names. Users whose DN contains commas or other special characters in the name component can now be imported without error.

Improvements across cloud provider integrations​

Stability and accuracy improvements across the supported cloud providers:

  • AWS: more reliable sysprep via EC2Launch v2, tolerance for individual region outages, correct vCPU reporting, and clearer provider error messages
  • Google Cloud: pricing is now derived from the official Cloud Billing Catalog API
  • Open Telekom Cloud: SSD is the new default volume type instead of SATA
  • STACKIT: improved security group handling during NIC updates — destination pools no longer trigger repeated reloads of destinations, destination ports, and network security groups in the admin area
  • Exoscale: templates created from a VM in oneclick™ are now correctly recognized as own images instead of being incorrectly marked as "Deleted" after the connection is synced

TPM and Secure Boot switches in VM Create​

The VM Create dialog now offers TPM and Secure Boot switches, so admins can explicitly set the hardware requirements Windows 11 expects. For Windows 11 images, both switches are enabled and locked. For other images such as Windows Server, the switches can be set as needed on instance types that support them.

IPsec VPN connections​

Two improvements for IPsec VPN setup and review:

  • The pre-shared key field is now masked like other password fields, so the value is no longer visible during screen sharing or in person
  • IPsec connection details are presented with descriptive labels instead of raw values, making it easier to verify a configuration at a glance

Signed oneclick™ Gateway RDP files​

RDP connection files generated for the oneclick™ Gateway are now cryptographically signed via Azure Key Vault. The "Unknown publisher" warning Windows showed before opening an RDP session no longer appears — particularly relevant for enterprise environments that require trusted, verified connection files.

Faster admin area​

Several admin lists now load noticeably faster: destinations, app configurations, app instances, and destination pools. Opening cloud-managed apps from the desk also responds noticeably more quickly. Background query optimisations reduce the number of database calls per page significantly.

Source destination visible on images​

The images table and image details view now include a "Source destination" column. It links directly to the destination the image was created from. If the destination has been removed, the column shows its ID instead; for images without a recorded source, a dash is shown.

Duplicate networks and destinations are now prevented​

Networks and destinations can no longer be created twice with identical settings. Trying to add an entry that already exists — for example, a public IP that has already been registered — is now blocked, keeping the configuration unambiguous.

Focus a single dashboard graph with Ctrl + click​

Working with dashboard charts is faster when only one or two graphs matter. A Ctrl + click on a legend entry now hides all other graphs and activates only the clicked one — additional entries can then be added back as needed. Previously, each entry had to be deselected individually.

Dashboard charts no longer jump to tables on a click​

Clicking on a point inside a dashboard chart no longer takes admins straight to the underlying table — useful when the click was only intended to inspect a value. The link to the related table is now shown explicitly below the chart, styled the same way as on the "Overview" tab.

Hybrid Drive fully rebuilt​

Hybrid Drive — the drive mounted in oneclick™ — has been fully rebuilt. Users get a noticeably faster file browser with refreshed sharing, an activity feed, and richer collaboration features. oneclick™ branding and dark mode are applied throughout, single sign-on is integrated seamlessly, and personal security settings — such as a guided first-time password setup — are now available directly inside the drive. Signing out of the platform also ends the drive session.

Reliable active sessions on destination pool details​

The "Active user sessions" table on destination pool details now reflects real session state more reliably. User sessions stay correctly assigned to their host across long periods — including weekends and platform restarts — and sessions on hosts that are no longer reachable are cleaned up consistently.

Maintenance mode now applies to destinations with active load balancing​

The maintenance flow now covers destinations with active load balancing as well. The platform walks through all destinations in the pool and applies the maintenance rules consistently — including the cross-division maintenance support and maintenance exception groups already in use for single-destination apps.

Activating load balancing on a destination pool now triggers a live refresh of the related app configuration dropdown and the user's desk tile. A manual page reload is no longer needed to see the new state.

Bug Fixes​

  • Search in event profile execution logs now filters correctly: The search field in the execution logs of an event profile now filters entries by the "Destination" column and other table content as expected.
  • Event profile execution log shows the current event type: After changing the event type of a profile, new execution log entries now display the updated event type in the "Event" column. Existing entries keep their original label.
  • Deleting destinations in a pool now works reliably: Destinations within a pool can now be removed reliably. Stale entries that could remain after cloning a VM are no longer left behind.
  • No more duplicate app instances on multi-group assignment: When a user belongs to several groups that map to the same app, only a single app instance is created instead of one per group.
  • Date and time sort respects regional settings: Sorting by date or time in protocol tables now produces correct results regardless of the user's language and region settings.
  • Desk sidebar closes after opening Product support: The sidebar on the oneclick™ desk now closes as expected after a user opens Product support from it.
  • "Change icon" link clearly visible in the tile editor: The "Change icon" link in the desk tile editor is now legible in both light and dark mode after the surrounding panel's background contrast was adjusted.
  • Dashboard license charts resolve names across divisions: The "User – max. concurrent logins", "App – max. concurrent use", and "App usage" charts on the dashboard now resolve license names correctly when an admin views the dashboard of another division. Previously, affected labels were missing from the chart without notice.