SaaS

SaaS Release Notes - August 8, 2025

Production release notes - August 8, 2025

Release notes cover new features, enhancements, and fixes that have been released to production.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

Enhancements

Product	Feature enhancements
Identity Security Cloud - Core Access Model	Criteria for automatic role assignment definitions now support attributes with periods in the name.
Identity Security Cloud - Access Requests, Certifications	Access request approvals now support reauthentication requirements for approving access, typically required for sensitive or regulated access. The feature is available in any customer tenant and can be enabled using the Update Access Request Configuration API with the `reauthorizationEnabled` attribute. After enabling the feature, administrators can set reauthentication requirements on any access item, requiring approvers to reauthenticate through your SSO provider when they approve access for those items.
Identity Security Cloud - Core Access Model	When an end user with no admin access opens the Details overlay for a given role from the My Access page, the Owner field will now populate with the same value that the user sees on the My Access page for that role, instead of showing a blank value.

Fixes

Product	Issue ID	Fixes
Data Access Security	ISCCOMPLI-6339	Previously, API calls related to fetching and modifying schedules were not possible for a CERT ADMIN as it did not have the permission. The campaign template now has the permission to read and manage scope but also has the ability to manage campaign schedules too.
SaaS Connectors - ServiceNow Identity Governance SaaS	CONSEALINK-7415	The ServiceNow Identity Governance SaaS connector now supports configuring `keepAliveTimeInterval` in the source.
Connectivity - Microsoft Entra ID	CONETN-5128	The Microsoft Entra ID connector no longer fails during the unique UPN check.
Connectivity - SAP Integrated Business Planning (IBP)	CONNAMDANG-5633	The SailPoint SAP Integrated Business Planning connector now fetches `email` attribute in the form of string.
Connectivity - Snowflake	CONETN-5122	The Snowflake connector now handles entitlement aggregation operations properly if the source has 10,000 roles or more.
Connectivity - Microsoft Entra ID	CONETN-5115	The Microsoft Entra ID connector now correctly updates the `telephoneNumber` attribute.
SaaS Connectors - BambooHR	CONSEALINK-7420	The BambooHR connector now fully supports API pagination for account aggregation.
SaaS Connectors - Web Services SaaS	CONSEALINK-7430	The SailPoint WebServices SaaS connector will no longer fail update operation if the response does not contain the `accountID`.
Connectivity - Dropbox	CONETN-5104	The Dropbox connector now supports proxy configurations for the initial token generation call.
Connectivity - SAP SuccessFactors	CONETN-5089	The SuccessFactors Connector can now properly aggregate the data from both `EmpJob` and `EmpEmployment` account attributes, even if the attribute name is the same for endpoints. For example, account aggregation is successful for the following attributes: `EmpJob.customAttribute5` and `EmpEmployment.customAttribute5`.
SaaS Connectors - BambooHR	CONDOCS-6666	The BambooHR connector is migrated from the deprecated Custom Report API to the new Dataset API, including revised account schema attribute names in line with the new Dataset-Get data API.
Identity Security Cloud - Sources and Account Management	ISCAIM-26458	Native change detection events are now sent with limited information about access changes if access details can not be fetched after three retries.