Riva Insight 2026.3: Which version do I have?
Riva Insight Cloud
The 2026.3 release will be rolled out to shared tenants on the following dates:
- Preview channel (release): July 29, 2026, after regular business hours
- Live channel (pre-release): August 27, 2026, after regular business hours
You will have approximately four (4) weeks to test this release on the preview channel before it is rolled out to the live channel.
Riva Insight On-Premises:
- Insight On-premises using .NET8 will be available following the Insight Cloud release (September 26, 2026).
Windows Add-in (Legacy Outlook VSTO Plugin) Customer?
- Windows Add-in versions more than 2 versions behind are not guaranteed to be compatible with this release.
- Get Windows Add-in version 2026.3.
Riva Insight Progressive Web Application
Riva Insight is expanding into a Progressive Web Application (PWA) designed to make key capabilities easier to access from mobile devices and outside of Outlook environment for end users who need to work quickly while on the go.
Riva Insight functionalities will be introduced within the PWA gradually. The first phase will embed AI-powered Voice Note Summary directly in the Insight PWA. From MyDay, users will be able to select a meeting, capture notes using voice input, and sync the information to Salesforce through an embedded tracking experience. By making voice-to-text note capture available directly from the mobile PWA, this release is intended to reduce the number of steps required to document client conversations, support faster note-taking immediately after meetings, improve the completeness of CRM data, and increase adoption of Insight outside of Outlook.
ReTracking Deleted Email CRM Records
Users can now re-track previously synced emails when the original CRM record has been deleted. Riva Insight unlocks the Track option, while Riva Sync engine creates a new record and updates the email with the new CRM ID across Track workflows.
Security Enhancements for Salesforce Integrations (PKCE & Refresh Token Rotation)
Riva Insight now supports Salesforce's enhanced OAuth security requirements, including Proof Key for Code Exchange (PKCE) and Refresh Token Rotation (RTR). These enhancements strengthen authentication security, improve protection against credential misuse, and help ensure continued compatibility with Salesforce's evolving security standards.
Behavioral Changes
- More Frequent Salesforce Sign-Ins: Some users may be prompted to reconnect their Salesforce account or sign in more frequently than in previous releases. This behavior is related to Salesforce Refresh Token Rotation, which changes how refresh tokens are issued, renewed, and invalidated. As Riva continues to enhance support for Salesforce Refresh Token Rotation, improvements are being implemented to reduce these occurrences.
Current Limitations
- Restricted Salesforce Administration Functions: Salesforce administration functions within the Admin UI have been temporarily restricted when accessed through the Riva Cloud management interface. These temporary restrictions help ensure reliable Salesforce synchronization, and Riva is actively working on a hotfix to restore the affected functionality.
For additional details, including the security benefits of PKCE and Refresh Token Rotation, impacted users, and ongoing improvements, see Salesforce Authentication Security Enhancements (PKCE & Refresh Token Rotation).
Riva Insight On-Premises Modernization (.NET 8)
Key Benefits
- Modernized platform built on Microsoft .NET 8.
- Improved performance, scalability, and runtime efficiency.
- Enhanced security and continued platform support.
- Simplified deployment through service consolidation.
- Reduced operational complexity and easier ongoing maintenance.
Important Changes
- Modernized Platform (.NET 8): Insight On-Premises has been migrated from Microsoft .NET Framework to Microsoft .NET 8, providing a modern, supported foundation with improved performance, scalability, security, and long-term platform support.
- No IIS Requirement: As part of the migration to Microsoft .NET 8, Internet Information Services (IIS) is no longer required for Insight On-Premises deployments. Insight now leverages the web hosting capabilities provided by .NET 8, simplifying installation and ongoing administration.
- Integrated Track State Service (TSS): Track State Service is now included as part of the standard deployment package and no longer requires separate installation. As a result, MongoDB is now a required platform dependency for all Insight 2026.3 On-Premises deployments.
- Simplified Deployment Architecture: Insight, WebApi, and Track State Service (TSS) are packaged and deployed together, reducing installation complexity, operational overhead, and ongoing maintenance.
-
Unified Configuration Management: Configuration settings previously managed through multiple
.configfiles are now consolidated into a centralized configuration file, reducing administrative overhead and simplifying deployment and upgrades.
Salesforce Only
- Insight 2026.3 On-Premises supports Salesforce CRM exclusively, with Salesforce Authentication used for all user access.
Contact Riva to discuss your upgrade strategy or schedule an upgrade.
Enhanced Email Recommendations
We've enhanced Email Recommendation to deliver more accurate and context-aware email replies. In addition to analyzing the current email and the active conversation thread, the feature now intelligently identifies relevant Salesforce information, retrieves it automatically, and incorporates it into the response generation process. The result is higher-quality, more personalized recommendations that are better aligned with customer context and CRM data.
Bug Fixes and Other Enhancements
- 22396 - Addressed issue with Login with Salesforce where the PKCE validation would fail if the browser session id changes.
- 22268 - Temporarily disabled the Admin UI when accessed from Riva Cloud due to issues with Salesforce Rotating Refresh Tokens that may result in features being disabled when settings are updated.
- 22235 - Improved Microsoft 365 Nested App Authentication/MSAL login claims flow to reduce excessive popups. Added configuration options Insight.Auth.MS365.Graph.MaxConcurrentRequests and Insight.Init.MailboxInitializeTimeoutMs to further limit prompts or popups during failed claims flows.
- 22252 - Fixed issue where shared or delegate mailbox items on Outlook on the Web and New Outlook could not be tracked due to the DelegateUserId being overridden with the OwnerUserId.
- 22293 - Fixed issue where concurrent Salesforce requests may result in the session being invalidated when rotating refresh tokens is enabled on the SF Connected/Enterprise App.
- 22261 - Fixed issue where the meeting notes pop-up appears blank when notes dictation was not enabled.
- 22054/22388 - Added the ability to limit the scopes requested as part of the Salesforce OAuth sign-in process.
- 22268 - Added guards to WebApi ensure that OAuth users do not trigger a Salesforce refresh token update on the sync connection.
- 20183 - Improved detection for when a user is moved between policies and updating GlobalIdGroup pointer to new value.
- 22268 - Added guards to Insight to ensure that OAuth users do not trigger a Salesforce refresh token update on the sync connection.
- 22184 - Fixed an issue with Salesforce PKCR redirect URL.
- 22079 - Fixed an issue with retrieval of correct token after rotation process.
- 21889 - Improved logging with Redis failed connections and connection lifecycle.
- 22030 - Fixed an issue with Salesforce token and redirect URL retrieval, after logging in with MS365.
- 21999 - Fixed an issue with CRM ID being null for synced items.
- 20450 - Fixed an issue with Voice Notes controls functioning in pop-up window.
- 21531 - Improved Track State Service logging.
- 21853 - Fixed an issue with Salesforce PKCE verifier.
- 21720 - Improved Track State Service behavior for cases when GlobalIdGroup is missing.
- 21806 - Added a retry mechanism for connecting Insight to Outlook.
- 21887 - Fixed an issue with a Graph call causing timeout errors.
- 21867 - Improved logging for security token exchange failures.
- 21905 - Fixed an issue with Access Token retrieval upon session changes.
- 21809 - Improved logging for Salesforce PKCE login failures.
- 21818 - Added a configuration option to control whether the Salesforce PKCE code verifier is included during the Salesforce OAuth sign-in process. When disabled, the PKCE code verifier is not sent.
- 21579 - Fixed an issue with missing login profile in authentication flow.
- 21738 - Added retry logic for loading Graph items.
- 21867 - Improved logging for security token exchange failures.
- 21862 - Improved logging for session ID issues.
- 21531 - Improved Track State Service logging.
- 21515 - Improved handling of Valkey/Redis serverless scaling events to prevent transient errors from being surfaced in the user interface.
- 21776 - Improved Track State Service logging.
- 21530 - Fixing an issue with showing Logrocket link in Insight admin settings.
- 21532 - Improved Track State Service logging.
- 21518 - Added support for Salesforce rotating refresh tokens in Insight and Insight WebApi.
- 21569 - Fixed an issue with Graph call, setting extended properties.
- 21553 - Corrected visibility of tooltip for creating new contact.
- 21421 - Improved "Pending" category behavior for recurring meetings.
- 21214 - Fixed an issue with Auto-Populate capability on forwarded emails in Outlook classic.
- 21359 - Added support for the Salesforce PKCE code verifier as part of the OAuth sign-in flow.
- 21220 - Fixed an issue that prevented authentication service logs from being captured in Riva Insight Cloud.
- 20026 - Improved visibility of relevant information when Google API is not reachable.
- 21472 - Corrected disablement process for "Unmatched Contacts" capability.
- 21275 - Fixed an issue with Contact Discovery failing to load on first attempt.
- 20982 - Fixed an issue to avoid data loss on Track, where Outlook "save" or "send" button is not available.
- 21361 - Fixed an issue with Insight redirect URLs.
- 20778 - Updated manifest generator to include Salesforce profile within authentication flow.
- 21007 - Optimised the diagnostic healthcheck to remove duplicate checks and add new checks for connectionstrings.
- 21036 - Auto-enabled "Track" option for cases where the "Track and Send" in not available.
- 20669 - Fixed an issue with Track State Service accessing items.