Last update:
July 2026
Aug 21, 2026
Welcome to the July release notes for the Aikyam Identity Platform. This page includes updates to the legacy HSID admin tool and introduces document-based identity proofing for select OHID applications. It also includes enhancements to account recovery, identity verification, passkey experiences, Adobe Analytics reporting, Fast-track registration (FTR), and platform modernization efforts across OHID and HSID tenants.
Release date: July 03, 2026
Key enhancement
Legacy HSID admin tool enhancements (Recovery flow)
Overview
Added a two-step confirmation pop-up in the Power of Attorney (POA) / Authorized representative (AOR) section of the HSID admin tool (legacy tool) to reinforce required recovery flow procedures.
Tenant
HSID admin tool users.
Business value
Improves clarity during advocate attestation.
User impact
When phone verification is not completed, document-based confirmation must be completed during the call. Previously completed confirmations and offline completion results cannot be reused.
Release date: July 23, 2026
Key enhancements and changes
Document-based identity proofing
(OHID design & implementation)
Overview Document-Based Identity Confirmation (DBIC) is now available for select OHID applications. Users can verify their identity during account recovery by submitting a government-issued ID, such as a passport or driver's license.
Tenant OHID only.
Business value Provides an additional identity verification option during account recovery, helping reduce fraud risk and support compliance requirements.
User impact Available for select OHID applications, including:
- Dental Benefits Portal,
- GEHA,
- One Community,
- EncoderPro,
- WellMed, and
- Spectera.
Improved fallback when SMS verification is unavailable
OHID identity modernization (UHC global implementation)
Overview
Users who do not receive an SMS One-Time Password (OTP) after three resend attempts or a timeout will now see a clear fallback message with an option “Try another method”, offering phone call verification as an alternate option.
Tenant
OHID only
Business value
Reduces user frustration and support calls by preventing users from waiting for SMS OTPs that may never arrive, especially where SMS delivery is blocked or unavailable.
User Impact
All OHID Applications
Prod support/Tech debt/Release support
Error classification fix for Adobe Reporting
Overview
Enhancements to error handling and analytics tracking ensure user-input errors, such as invalid OTPs, verification codes, or IDs, are correctly identified and reported separately from system errors.
A change introduced in the May 7, 2026, release caused certain valid user-input errors, such as invalid OTP, verification code, or ID errors, to be incorrectly categorized as system errors due to HTTP/2+ response handling changes. The July 3, 2026, release corrected the classification issue but inadvertently introduced Adobe Analytics reporting inaccuracies. This update reverts to the analytics-related changes, adds a message key to API error responses, enhances backend error mapping, and ensures user-input errors and system errors are accurately differentiated and tracked.
Tenant
HSID Only
Business value
Improves the accuracy of error reporting and analytics tracking by restoring accurate reporting, improving backend error categorization, and clearly distinguishing user errors from system errors for more reliable analytics and operational metrics.
User impact
EDA users on HSID
FTR invitation email messaging update
Overview
During Fast Track Registration (FTR), some invitations may be generated without an email address being supplied during invite creation. The email-entry screen messaging has been updated to better align with the user's registration context.
Tenant
HSID only
Business value
When an FTR invitation is generated without an email address, the email verification screen now displays “Enter your email address” instead of “Enter new email address,” providing a more accurate and intuitive registration experience.
User impact
EDA users on HSID
Headless SSO API fix (Account creation prevention)
Overview
Headless SSO APIs now return an error when an account does not exist instead of automatically creating a new account.
Tenant
HSID Only
Business value
Since legacy HSID supports creating new accounts through the headless SSO flow, the same logic was ported.
User impact
EDA users on HSID
Superuser login UUID error fix
Overview
On accounts that do not have a database record for the last authentication method used, admins using impersonation (superuser) functionality would see an error message instead of the destination portal.
Tenant
HSID Only
Business value
Added NPE (Null Pointer Exception) rail guards.
User impact
EDA users on HSID
Multi-language support for Fast-track registration
Overview
Portals will now have the capability to generate Fast-track registration invitations in the user's preferred language. The initiation now supports a locale parameter, which opens the invite in the locale used during invite generation.
Tenant
HSID/EDA
Business value
As requested by portals and for parity with legacy, this supports locales other than English in FTR flows.
User impact
EDA users on HSID
Improved accessibility for language selection in HSID rebuild
Overview
Now the HSID Rebuild experience will display the language icon next to the Language drop down selection.
Tenant
Multiple tenants
Business value
Per Surest accessibility feedback, this change was required to support accessibility compliance.
User impact
HSID rebuild
Enhanced DBIC Adobe Analytics tracking
Overview
Resolved analytics tracking gaps in Document-Based Identity Confirmation (DBIC) and account recovery flows, including tracking for modals, SMS and email links that appear on DBIC screens. This also fixes another defect to properly send the link location value for different pages that were reported missing during account recovery flows.
Tenant
HSID only.
Business value
Provides more complete reporting on user activity throughout DBIC and account recovery journeys.
User impact
EDA users on HSID.
Improved account recovery success through TMX integration
Overview
Account recovery requests now populate custom attribute 4 with "Phone on file" and send it to TMX in the account recovery call payload across unmatched, hybrid, and matched portals.
Tenant
HSID only.
Business value
Allows TMX to determine whether to bypass the phone finder to check if the phone on file matches the phone number used to recover the account, reducing the reject rate for user account recovery.
User impact
EDA users on HSID.
HSID Legacy: Protection against SMS pumping attacks
TMX OTP Velocity Check is now performed before all international One-Time-Password (OTP) requests by text or call. OTP velocity check failure triggers an error screen, and OTP is sent only after the OTP Velocity Check is successful.
Tenant
HSID only.
Business value
Blocks fraud spikes by checking abnormal velocity before sending costly international SMS/calls. Reduces carrier throttling, penalties, and wasteful spending.
User impact
Legacy HSID (dark deployed as dependent on Legacy defect DE325543 fix on 07/30).
Disabling passkey for unsupported passkey devices
Overview
Users whose browser or device does not support passkeys will see an error message during passkey setup. To improve the experience, the passkey setup option will no longer be displayed on unsupported devices. This enhancement applies to both web and mobile experiences.
Tenant
HSID Only
Business value
Improves the passkey setup experience by presenting a clear error when passkey is not supported or not working, and by removing the setup option when the browser or device does not support passkey.
User impact
EDA users on HSID
Easier account recovery from passkey sign-in
Overview
Portals with passkey-enabled sign-in provide a two-page split experience. Previously, users could access username recovery only from the first page, requiring them to navigate back from the second page. With this enhancement, Forgot username and Forgot password options are now available on the second page, making account recovery easier and more accessible.
Tenant
HSID only.
Business value
Improves usability and accessibility by making account recovery options easier to find.
User impact
EDA users on HSID.
Decommission audit V1 framework
(Admin tool update)
Overview
Stops all writes from the Audit Service to the Audit V1 database (MySQL) and fully transitions to the Audit V2 event pipeline, enabling the decommissioning of the V1 audit framework and reducing redundant data persistence.
Tenant
Aikyam platform.
Business value
Since the Audit V2 framework is extensively used across the platform to capture events, decommissioning redundant services and data stores helps reduce infrastructure costs..
User impact
Aikyam Admin Tool V1.
Previous:
What's new?
Next:
June 2026
Share additional feedback to help us improve.
0/255
|
Powered by Aikyam @2025 All rights reserved
+1 866 451 2735
+1 866 451 2735
+1 855 819 5909