SaaS Release Notes - July 18, 2025

Non-Employee Risk Management

You can now use the Delegations API to create, read, update, and delete delegation configurations in your tenant.

Non-Employee Risk Management

Failed requests no longer display in the Completed tab in the Lifecycle > Activity page. They can still be found in the Failed tab.

Identity Security Cloud - Core Access Model

When Admins select a role or entitlement from the My Access, My Team, or Admin > Identity Details > Access pages, the information shown now relates only to the specific identity’s access. We have removed the Edit button and the Roles, Access Profiles, and Parent Entitlements tabs, which previously included all access item associations regardless of whether the identity’s specific assignments included those associations.

Identity Security Cloud - Workflows

Worfklows has released two new workflow triggers to support lifecycle automation:

• Identity Lifecycle State Changed: Fires when the identity's cloudLifecycleState attribute changes (e.g., from Active to Inactive).
• Identity Lifecycle State Change Processed: Fires after the system evaluates and processes any configured actions for the lifecycle state change, even if no changes to access were made.

Refer to Identity Lifecycle State Changed and Identity Lifecycle State Change Processed trigger documentation for more information.

Connectivity - SAP HANA

The SAP HANA DB connector now supports Catalog Role management. With Catalog Role management, users with the appropriate permissions can manage, grant, or revoke Catalog Roles associated with other users.

SaaS Connectors - Microsoft Entra SaaS

PLTCONN-8404

The Microsoft Entra SaaS now supports multivalued attributes within containsIgnoreCase and containsAllIgnoreCase filters(filterString).

SaaS Connectors - Web Services SaaS

CONSEALINK-7358

The Web Services SaaS connector now saves token applications after they expire in Custom Authentication.

Identity Security Cloud - Certifications

ISCCOMPLI-6077

Fixed an issue where certification items could be reassigned to null values when using the Reassign Identity Certifications API.

Identity Security Cloud - Access Requests

ISCARP-16875

Addressed an issue with removing entitlements that was incorrectly blocking removal when users had two entitlements with the same name from different sources, where one was requested through a role and the other outside of a role. The updated behavior checks for entitlement-role associations using both the entitlement name and the source name, allowing differentiation between similar entitlements so an entitlement can be successfully removed if it is not part of a role.

Note: This has been discovered to only partially address the issue; identically named entitlements of different types from the same source may still create collisions. A future update is planned to address that concern.

Identity Security Cloud - Access Requests

ISCARP-16610

The Update Access Request Configuration API now returns a detailed cause in the response when the identity ID provided as the fallback approver is invalid or not found in the tenant.