October 13, 2026 SaaS Alerts release notes

Fortify Action Processor 3.118.1

Enhancements

Snapshot assignment management is improved

Organizations can now be assigned to or unassigned from scoped snapshots. When an organization is unassigned, snapshot handling supports retaining the applied configuration or undoing it.

Snapshot metadata is available for all snapshot types

Partner-facing snapshot metadata is now available for every snapshot type.

On-demand backup operations return run IDs

On-demand backup drift and manual backup operations now return run IDs.

Template-applied actions are identified

Actions applied through a template are now identified with an Applied via template tag.

Additional remediation options are available

Fortify now includes the following remediations:

  • fortify_requireManagedDeviceForTeamsRooms

  • fortify_disableCalendarAutoProcessing

  • fortify_quarantinePolicyRequestRelease

  • fortify_blockAnonymousLinkSensitiveContent

  • fortify_secureSecurityInfoRegistration

  • fortify_priorityAccountProtection

Entra ID admin consent workflow configuration supports additional reviewer parameters

The aad_admin_consent_workflow remediation now supports group and role reviewer parameters.

Exchange connector snapshots are supported

Fortify now supports the Exchange_Connectors snapshot type.

Snapshot drift correction can be disabled at the organization level

Organizations can now use the disableDriftCorrection setting for snapshots.

DLP policies use their recorded policy GUID

DLP policies are now managed using the recorded policy GUID.

Additional Exchange and OneDrive configuration options are supported

Outbound anti-spam forwarding supports the Off option, and anonymous sharing for OneDrive supports the Disabled option.

Benchmark history coverage is expanded

Assigned organizations are now benchmarked so that benchmark history covers each assigned organization.

Fixes

Microsoft Purview DLP and retention snapshot handling is improved

Several issues affecting Microsoft Purview DLP and retention snapshots have been resolved, including problems involving adaptive scope recreation, retention policy application, policy deletion, group-location parsing, and objects in a PendingDeletion state.

Template processing handles partner context correctly

Template apply and benchmark operations now include the partner context required when queuing template processing, addressing an issue that prevented EU templates from syncing.

Snapshot refresh and drift correction are more reliable

Issues that could cause policies to be rewritten repeatedly, deleted during drift correction, or enter recurring drift-correction cycles have been resolved across affected snapshot types.

Snapshot application handles Microsoft operation failures more accurately

Snapshot application no longer reports success or customer deletion when the associated Microsoft read or write operation fails.

Snapshot removal and drift correction handle organization-owned objects correctly

Removing snapshots or correcting drift no longer incorrectly deletes organization-owned objects tracked through snapshot dependencies.

Snapshot policy tracking is improved

Issues that could leave policies in the tenant without being tracked have been addressed, including scenarios involving snapshot unselection and failures while creating policies.

Snapshot application resolves referenced objects more accurately

Issues affecting how groups, users, filters, and same-named objects are resolved against the target organization during snapshot application have been corrected.

Captured snapshot settings are applied more reliably

Issues that prevented some captured settings from being written correctly during snapshot application have been addressed for Defender, Teams, and Microsoft Purview configurations.

Snapshot refresh preserves control settings

Snapshot refresh now preserves partner-set control flags and addresses stale read-only parameter data.

Anti-phishing snapshot application preserves the intended policy state

An issue that could send Enabled=false when applying anti-phishing snapshots and subsequently re-enable existing policies during repair has been corrected.

Intune device compliance snapshots resolve missing groups correctly

Snapshot application no longer submits the source organization's group ID when a referenced group is missing from the target organization.

Microsoft Purview IRM and communication compliance snapshots handle pending deletion correctly

Objects in a PendingDeletion state are now treated as removed during snapshot application and benchmarking.

SharePoint tenant-settings backup removal is handled more safely

Restore grading for SharePoint tenant settings now occurs before the associated backup is deleted when an organization is removed.

Conditional Access policy benchmarking is more accurate

Conditional Access policy benchmarks now score one pair per Conditional Access policy object rather than scoring four top-level members.

Completed Microsoft actions no longer retain a stale failure tag

A stale Apply failed tag is no longer displayed on Microsoft actions that have completed successfully.

Compliance policy snapshots capture skipped policies correctly

Skipped compliance policies are now included in the stored snapshot, and Settings Catalog drift handling has been improved.

Teams meeting snapshots handle cross-tenant partner data correctly

Teams meeting capture now handles cross-tenant partner serviceProviderType data.

Conditional Access remediations handle additional policy scenarios correctly

Issues involving the externalTenants key, included and excluded roles, and undo operations based on stale reads have been addressed.

Recurring sign-in session revocation is more reliable

A failed fortify_revokeSignInSessions run or rescheduling attempt no longer causes the recurring revocation process to end.

SharePoint 404 responses are handled more consistently

SharePoint read operations now handle applicable 404 responses without relying only on the unlicensed-tenant response body.

Snapshot deletion status is reported correctly

When a snapshot is deleted without undoing its changes, retained policies are now recorded as Skipped rather than Retained.

Exchange configuration validation is improved

Fortify now rejects supplied anti-malware or forwarding values when the required Exchange role cannot write them. Role validation also checks the cmdlet that the apply operation will actually use, distinguishing between Set- and New- operations.

Exchange connector capture handles validation timestamp metadata correctly

Exchange_Connectors capture now handles LastValidationTimestamp@data.type metadata.