SaaS

SaaS Release Notes - September 23, 2024

Production release notes - September 23, 2024

Release notes might contain references to new features, enhancements, and fixes that will be gradually turned on in production over the next several weeks. See the SaaS Functional End of Life and Major Changes Policy.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

New features

Product	What's new
Data Access Security	Data Access Security provides a single, centralized tool that delivers highly customizable real-time alerts, helping to detect and audit unauthorized or suspicious access promptly. With this new feature, administrators can now: Search for alerted activity by alert rule or severity and identify new alerts across multiple applications in a single forensic activity screen. Categorize alerts by severity, focusing your access control on what matters most, assessing the impact according to severity, and prioritizing alerts requiring immediate attention. Receive immediate email alerts for specified behaviors. Emails can be sent to any identities within Data Access Security. Generate alert logs by scheduling alert reports and ease the documentation for future audits. Analyze past alerts and ensure your controls align with organizational policies or update alert policies. Refer to Data Access Security documentation for more information on activities within Forensics.
Data Access Security	Data Access Security now provides a single, centralized tool that delivers highly customizable real-time alerts which helps to detect and audit unauthorized or suspicious access promptly. You can configure highly customizable alerts based on the activities of internal and external identities accessing resources. You can also target behavior by any action property, enriched with identity details such as location, lifecycle, or manager, and resource sensitivity information like data classification policies, rules, and categories. For more information, refer to Data Access Security Alerts.

Product

What's new

Data Access Security

Data Access Security provides a single, centralized tool that delivers highly customizable real-time alerts, helping to detect and audit unauthorized or suspicious access promptly. With this new feature, administrators can now:

Search for alerted activity by alert rule or severity and identify new alerts across multiple applications in a single forensic activity screen.
Categorize alerts by severity, focusing your access control on what matters most, assessing the impact according to severity, and prioritizing alerts requiring immediate attention.
Receive immediate email alerts for specified behaviors. Emails can be sent to any identities within Data Access Security.
Generate alert logs by scheduling alert reports and ease the documentation for future audits.
Analyze past alerts and ensure your controls align with organizational policies or update alert policies.

Refer to Data Access Security documentation for more information on activities within Forensics.

Data Access Security

Data Access Security now provides a single, centralized tool that delivers highly customizable real-time alerts which helps to detect and audit unauthorized or suspicious access promptly. You can configure highly customizable alerts based on the activities of internal and external identities accessing resources. You can also target behavior by any action property, enriched with identity details such as location, lifecycle, or manager, and resource sensitivity information like data classification policies, rules, and categories.

For more information, refer to Data Access Security Alerts.

Enhancements

Product	Feature enhancements
Connectivity - Documentation, ServiceNow	The ServiceNow connector now supports the Client Credentials grant type for inbound OAuth by ServiceNow. For more information, reference the ServiceNow Support page for Client Credentials grant type support.
Connectivity - SAP HR/HCM	The SAP HR/HCM connector now supports the SAP S/4 HANA 2023 on premise version.
Connectivity - Oracle Database	The Oracle Database connector now supports version 23ai.
Connectivity - SalesForce	The Salesforce connector now supports API version 60.
SailPoint application onboarding	You can now provide feedback on AI correlation recommendations to improve the quality of future recommendations.
Connectivity	The default correlation logic is now shown on the Correlation Configuration section of the Account Correlation page. This correlation mapping cannot be modified or deleted.
Connectivity - SIM - ServiceNow	SailPoint ServiceNow apps published in the ServiceNow store are now certified and supported for ServiceNow’s latest release Xanadu. For more information, refer to the compatibility matrix for ServiceNow Identity Governance, ServiceNow Service Catalog, and ServiceNow Service Desk.
SaaS Connectors	The Web Services SaaS connector now supports Pass-through Authentication (PTA), which enables you to login to Identity Security Cloud using your managed system credentials (if it is supported for the respective systems). For more information, refer to Pass-Through Authentication.
Connectivity - SAP Direct	The SAP Direct connector is now tested and certified with SAP ERP Enhancement Package 8 (EHP) for continuous support and seamless integration.

Fixes

Product	Issue ID	Fixes
Connectivity - Microsoft Entra ID	CONETN-4875	The Microsoft Entra ID connector now supports removing the `telephoneNumber` attribute.
Connectivity	CONETN-4837	In Microsoft SharePoint Server, Account aggregation is successful even when the `LoginName` begins with a newline character.
SaaS Connectors	CONHOWRAH-5200	The Microsoft Entra SaaS connector’s performance is enhanced in fetching Exchange Online attributes.
Connectivity	CONETN-4730	The SharePoint server connector now correctly aggregates group membership for an account, even when a similarly named group exists in two different site collections.
Connectivity - IQService, Microsoft Entra ID	CONETN-4639	The Microsoft Entra ID connector’s account aggregation no longer fails when fetching Exchange Online attributes.
Connectivity - Active Directory, IQService	CONETN-4577	If the TLS for Domain Settings checkbox is selected, IQService will communicate on the TLS port when the `enforcePasswordPolicy` attribute is set to true.
Connectivity - Active Directory	CONETN-4850	The LDAP-based connector can now fetch attributes with values exceeding 1500.