Smarter Notifications: Debouncing and Richer Account Context ​

Notifications are only useful when they help you act. An inbox full of false alarms trains you to ignore alerts, and a vague email forces you to open the admin portal just to understand what happened. Two recent improvements address both problems.

Agent Offline Debouncing ​

On-premises agents occasionally disconnect for a few seconds — a network hiccup, a rolling OS update, or a brief host restart. Previously, each interruption produced an Agent.Offline email followed almost immediately by an Agent.Online email, creating noise without value.

GrantFlow now holds agent offline notifications for a short window before sending. If the same agent reconnects within that window, both notifications are quietly suppressed. You only receive an alert when an agent is genuinely down, not when it bounces briefly.

This works automatically. There is nothing to configure, and the behavior is scoped to agent connectivity events — all other notification types continue to be delivered immediately.

Richer Account Event Emails ​

Account checkout and check-in notifications (Account.Enabled, Account.Disabled, and Account.PasswordRollover) now carry additional context that was previously missing from email templates:

  • Account UPN — the full User Principal Name of the affected account, so you can identify the exact identity without opening the portal
  • Connector name — which connector the account belongs to, making it immediately clear whether this is an Entra ID account or an on-premises AD account

These fields are available as template placeholders. If you have customized your account event templates, you can add them to surface the extra detail. Default templates are updated automatically.

For the full list of available placeholders, see Notification Templates & Configuration.

What This Means in Practice ​

A typical morning before these changes might have shown three Agent.Offline + Agent.Online pairs from a brief network maintenance window, plus an Account.Disabled email that said only "admin-svc was disabled" — leaving you to check the portal for which connector and which identity was involved.

Now you see zero noise from the transient disconnections, and the account email tells you right in the subject or body that admin-svc@contoso.com on Contoso AD was checked back in after a scheduled checkout expired.

Less noise, more signal.