SaaS

SaaS Release Notes - June 17, 2024

Production release notes - June 17, 2024

Release notes might contain references to new features, enhancements, and fixes that will be gradually turned on in production over the next several weeks. See the SaaS Functional End of Life and Major Changes Policy.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

New features

ProductWhat's new

SaaS Connectors

SailPoint is pleased to announce the availability of the new Oracle EPM Cloud - FCCS SaaS connector.

The SailPoint Oracle Enterprise Performance Management Cloud Financial Consolidation and Close system (Oracle EPM Cloud - FCCS SaaS) integration helps with the governance of accounts and groups. Its end-to-end account management capabilities provide deep identity governance. For more information, refer to Integrating SailPoint with Oracle EPM Cloud - FCCS SaaS.

Connectivity - Atlassian Jira Data Center SDIM

SailPoint is pleased to announce the availability of the new Atlassian Data Center Jira Service Management Service Desk Integration. The SailPoint Atlassian Data Center Jira Service Management provides IT service management and automates common business processes for requesting and fulfilling service requests across a business enterprise.

SaaS Connectors

SailPoint is pleased to announce the availability of the new Oracle EPM Cloud - AR SaaS connector.

The Oracle Enterprise Performance Management Cloud Account Reconciliation (Oracle EPM Cloud AR) integration helps with the governance of accounts and groups. Its end-to-end account management capabilities provide deep identity governance. For more information, refer to Integrating SailPoint with Oracle EPM Cloud - AR SaaS.

Connectivity - Guidewire

SailPoint is pleased to announce the availability of a new Guidewire ContactManager connector.

The SailPoint Guidewire ContactManager connector provides governance capabilities for the Guidewire ContactManager system users. Its capabilities include aggregation, provisioning users, and adding or removing entitlements at the account level. For more information, refer to Integrating SailPoint with Guidewire ContactManager.

Connectivity - Guidewire

SailPoint is pleased to announce the availability of the new Guidewire ClaimCenter connector. This connector provides governance capabilities for the Guidewire ClaimCenter system users. Capabilities include aggregation, provisioning users, and adding or removing entitlements at the account level. For more information, refer to Integrating SailPoint with Guidewire ClaimCenter.

SaaS Connectors

SailPoint is pleased to announce the availability of the new Identity Security Cloud Governance SaaS connector.

The SailPoint Identity Security Cloud Governance SaaS connector provides a deep level of governance and access management capabilities for the Identities present within the Identity Security Cloud tenant. It manages identities as accounts, and user levels (permissions), roles, and governance groups as entitlements. For more information, refer to Integrating SailPoint with Identity Security Cloud Governance.

Connectivity - Guidewire

SailPoint is pleased to announce the availability of the new Guidewire BillingCenter connector. This connector provides governance capabilities for the Guidewire BillingCenter system users. Capabilities include aggregation, provisioning users, and adding or removing entitlements at the account level. For more information, refer to Integrating SailPoint with Guidewire BillingCenter.

SailPoint CIEM

CIEM AWS now provisions AWS IAM Identity Center Identity Store account, group memberships, and permission set assignments. Ensure you configure the minimum CIEM AWS Identity Center Provisioning Policy Requirements.

SaaS Connectors

SailPoint is pleased to announce the availability of the new CyberArk Privilege Cloud Shared Services SaaS connector. The SailPoint CyberArk Privilege Cloud Shared Services SaaS connector securely connects with the CyberArk Privilege Cloud Shared Services system and provides governance capabilities for accounts and groups (containers). For more information, refer to Integrating SailPoint with CyberArk Privilege Cloud Shared Services SaaS.

SaaS Connectors

SailPoint is pleased to announce the availability of the new BeyondTrust Password Safe SaaS connector. The SailPoint BeyondTrust Password Safe SaaS connector securely connects with the BeyondTrust Password Safe system and provides governance capabilities for accounts and groups (containers). For more information, refer to Integrating SailPoint with BeyondTrust Password Safe SaaS.

Enhancements

ProductFeature enhancements

SaaS Connectors

The Microsoft Entra SaaS connector now supports aggregating Azure and Microsoft Entra ID PIM roles as separate group objects and managing Azure and Microsoft Entra ID PIM role assignments to users. For more information, refer to Azure Privileged Identity Management (PIM).

Fixes

ProductIssue IDFixes

Platform

IDNDENALI-10092

Fixed an issue where identities with both the Source Sub-Admin and Org Admin user levels were unable to view all sources in the Sources list.

IDN Access Request

UIAO-9401

Removed the date shown on some approvals within Account Activity records since the date being displayed was the future revocation date for the item rather than the approval date.

AI Access Insights

IDA-23127

Fixed an issue in Access History where access events were incorrectly linked to governance events. The following correlation logic has been added to prevent this issue:

  • Governance events must be within 30 days of the access added or removed event.
  • When multiple access events target the same access, the governance event will be correlated to the access event that is closest in date.
  • Only certification governance events that revoke an access item and occur before the access event will be considered.

IDN Access Request

ISCRP-1632

SAASTRIAGE-2783

Access profiles with a backslash in the name can now be requested in the Request Center.

Platform

ISCAIM-22813

Added security headers to /beta/sources/<id>/load-accounts, /beta/sources/<id>/load-uncorrelated-accounts, and /beta/sources/<id>/load-entitlements endpoints.

In response, the following security headers will be returned:

Content-Security-Policy: default-src 'self'

Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

X-XSS-Protection: 1; mode=bloc

X-Content-Type-Options: nosniff

X-Frame-Options: Deny