Blog

New Capability: Machine Identity & Account Workflow Event Triggers

Author

  • NataliaYunusov

    SailPoint

Description

Admins often need more flexibility to automate actions when machine identities or accounts change in Identity Security Cloud. This release introduces new workflow event triggers that allow organizations to extend Machine Identity Security (MIS), Agent Identity Security (AIS), and core ISC with automation that fires whenever machine identities or accounts are created, updated, or deleted. These triggers give admins fine-grained control to build workflows around the lifecycle moments that matter most.

New Capabilities

We’ve added six new workflow event triggers that fire whenever key machine identity and account lifecycle changes occur:

Machine Identity Event Triggers

  • Machine Identity Created
  • Machine Identity Updated
  • Machine Identity Deleted

Account Event Triggers

  • Account Created
  • Account Updated
  • Account Deleted

These triggers can be used to kick off downstream action like notifications, owner updates, ServiceNow updates, or any custom automation that helps teams govern identities and accounts more effectively.

Solution

The new workflow event triggers allow admins to automate actions at each key moment in the machine identity and account lifecycle. Each trigger fires when the corresponding create, update, or delete event occurs in Identity Security Cloud.

Using these triggers, admins can:

  • Start an owner-discovery workflow when a machine identity is created.
  • Send notifications when an owner list or other machine identity attributes change.
  • Update external systems, such as ServiceNow CMDB, when ownership or lifecycle states are modified.
  • Initiate follow-up actions after an account is created, updated, or deleted, such as provisioning steps, security approvals, or privileged access governance.

These triggers are available under:

  1. Admin → Workflows → Triggers selection
  2. Admin → Event Triggers → Available triggers

Who is affected?

  • Machine Identity triggers are available to orgs licensed for Machine Identity Security (MIS) or Agent Identity Security (AIS).
  • Account triggers are available to all ISC customers.

Action Required

To start using the new triggers, navigate to Workflows or Event Triggers and select new triggers.

Important Dates

  • Sandbox and Internal Rollout: December 1st, 2025.
  • Production Rollout (All Customers): The week of December 8th, 2025.

To ask questions and learn more please visit the Developer Community.