What runs today.
What comes next.
For every building block you can see whether it is available in the current release, in trial or planned. Anything planned for Q3 2026 that was not finished is marked as postponed. The page also shows what Nova deliberately does not cover. As of 4 Oct 2026, release 2026.08.2.
- Available in the current release
- Beta in trial
- Postponed from Q3 2026, date open
- Planned Q4 2026 and 2027+
Capability map · as of 4 Oct 2026
What Nova contains today and what is planned
All building blocks sorted by maturity. Each tile states its status, followed by the release, quarter or interface.
- Available (33)
- Beta (3)
- Postponed (9)
- Planned (10)
Roadmap by quarter · as of 4 Oct 2026
Delivered, planned and postponed
The first column shows the quarter that has ended: what was delivered in a release and what is in development, waiting for the next release. Below the grid you will find what was postponed from it. If an item is critical for you, talk to us: feedback from pilot customers feeds into prioritization.
Q3 2026 · completed
Delivered
- July 2026, v0.9.3: security hardening, deputy approvals and rehire lifecycle
- August 2026, v0.9.4: AI agents as a first-class identity type
- August 2026, v0.9.5: new frontend on Vue 3
- August 2026, release 2026.08.2: AI healthcheck per user
- August 2026: OIDC identity provider add-on, other applications use the Nova login via OpenID Connect
In development
Developed since September 2026, but not yet in release 2026.08.2. Ships with the next release.
- The change journal also covers SAP, SCIM and Keycloak
- The admin chat carries out far-reaching actions such as deletions only after a preview and confirmation
Q4 2026 · current
Hardening & visibility
- External penetration test: date to follow
- SAP risk analysis: IAG connector
- SoD rule editor
- SCIM profile for SAP IPS/IAS
- Nova IAM 1.0 & long-term support model
Q1 2027
Enterprise maturity
- SOC 2 Type 1: after ISO 27001, no fixed date
- S/4HANA Cloud connector (SAP Cloud Identity Services)
- High-availability deployment patterns documented
- Nova Online: hosted edition in preparation
2027+
Cloud SAP & governance expansion
- Privileged access governance (1st iteration): privileged roles, owner duties, break-glass documentation, deliberately without password vault/session recording
- SAP license metering
- SuccessFactors integration (OData); earlier per project if needed
- Connector library: Workday, ServiceNow; Nova Online launch
Postponed from Q3 2026, new date open
These items were originally on the roadmap for Q3 2026 and were not finished. Three of them have first partial results, either in the release or in development. We will add a new date here once it is fixed.
- AI Reconciliation Agent
- Multi-tenant model for corporate structures
- Nova on BTP: edition for the SAP Business Technology Platform; the Kyma deployment is in trial
- Plugin marketplace (beta)
- ISO 27001 (ISMS): certification audit
- OIDC SSO
- SIEM forwarding and DORA retention
- Recurring recertification: campaigns are available, automatic repetition is not yet in place
- Bulk changes: in development since September 2026, SAP roles can be assigned to or revoked from many accounts at once via the admin chat (ships with the next release); a dedicated UI is still missing
- Granular admin function roles: as a first step, the “Role admin” entitlement for role management has been in development since September 2026 (ships with the next release)
“In development” means: built, but not yet in release 2026.08.2.
If a quarter slips, you will see it here and in the changelog. Pilot customers receive a monthly maturity letter with planned-vs-actual deltas and a quarterly review call.
Not on the roadmap · deliberate choices
What Nova does not want to be.
This list matters as much as the roadmap: it shows where we deliberately say no. If any of these points is critical for you, we may not be the right tool.
Replacing your corporate IdP
Nova does not replace your corporate IdP. An optional plugin turns Nova into an OIDC provider for internal applications.
Password vault & session recording
Privileged access runs through the same controlled paths as all access. We deliberately do not replace dedicated PAM (vault, session management); coexistence is the design.
Mobile app for end users
The self-service portal is web-responsive. A separate app costs months for marginal value; we invest in reconciliation depth instead.
CIAM / Customer Identity
Nova is built for internal employees, service accounts and partners. Customer logins for webshops and apps are a different discipline.
Something critical missing? Talk to us.
Pilot customers contribute their requirements to prioritization. The changelog shows what shipped most recently.