SaaS

SaaS Release Notes - August 29, 2025

Production release notes - August 29, 2025

Release notes cover new features, enhancements, and fixes that have been released to production.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

New features

Product	What's new
SaaS Connectors - Salesforce SaaS	The Salesforce SaaS connector now supports the next-generation Salesforce infrastructure architecture, Hyperforce.
Connectivity - SalesForce	The Salesforce VA-based connector now supports the next-generation Salesforce infrastructure architecture, Hyperforce.
Machine Identity Security	You can now define and assign subtypes to machine accounts for better organization, filtering, and reporting. Subtypes are managed per source and help categorize machine accounts by their function. For more information about subtypes, refer to the product announcement and documentation.

Enhancements

Product	Feature enhancements
SaaS Connectors - CallRail	The CallRail SaaS connector now has a default correlation mapping for the newly created sources. You can modify the mapping as required for your configuration.
SaaS Connectors - Cisco Umbrella	The Cisco Umbrella SaaS connector now has a default correlation mapping for the newly created sources. You can modify the mapping as required for your configuration.
SaaS Connectors - Aha	The Aha connector now has a default correlation mapping for the newly created sources. You can modify the mapping as required for your configuration.
SaaS Connectors - DigiCert	The Digicert connector now has a default correlation mapping for the newly created sources. You can modify the mapping as required for your configuration.
SaaS Connectors - PagerDuty	The PagerDuty SaaS connector now has a default correlation mapping for newly created sources. You can update the mapping as required for your organization.
SaaS Connectors - Appaegis Access Cloud	The Appaegis Access Cloud connector now has a default correlation mapping for the newly created sources. You can modify the mapping as required for your configuration.
Connectivity - Guidewire	The SailPoint Guidewire connector now supports the following Guidewire application releases: The Niseko release is identified by the 2025.07 release number, with application version 50.14.x The Mammoth release is identified by the 2025.03 release number, with application version 50.13.x The Las Leñas release is identified by the 2024.11 release number, with application version 50.12.x
Connectivity - Virtual Appliance	When the customer-provided operating system (CPOS) flag is enabled on your tenant, admins can now designate virtual appliances (VA) as CPOS when adding new VAs to a cluster.
Identity Security Cloud - Provisioning and Task Manager	Updated the Tasks page by adding the ability to reassign and complete tasks as well as design and accessibility improvements.
Connectivity - BambooHR	The BambooHR connector now has a default correlation mapping for the newly created sources. You can modify the mapping as required for your configuration.
SaaS Connectors - Freshservice SaaS	The Freshservice SaaS connector now has a default correlation mapping for the newly created sources. You can modify the mapping as per your requirements.

Fixes

Product	Issue ID	Fixes
SaaS Connectors - Web Services SaaS	CONSEALINK-7587	The Web Services SaaS connector now properly passes the word “Bearer” if it is a part of the value for the $application.accessToken$ placeholder.
Access Risk Management	ARM-32678	The User Risk History report is now generating on schedule again for customers in the US. Any prior results that were not generated will be correctly updated for all impacted US customers.
Identity Security Cloud - Certifications	ISCCOMPLI-6475	Fixed an issue with the post/campaigns endpoint that caused users to submit multiple requests. The endpoint has been updated to respond with a 202 Accepted status to indicate that the campaign creation process has started but not completed.
Connectivity - Snowflake	CONETN-5141	In the Snowflake connector, Entitlement Aggregation now fetches privileges for roles only if the `Role` and `Privilege` attributes are included in the Role schema.
Connectivity - Snowflake	CONETN-5126	The Snowflake Connector can now configure the `default_secondary_roles` attribute to an empty value if you pass the value as `()` during provisioning. This update follows a recent update to the way Snowflake handles the `default_secondary_roles` attribute. For more information, refer to Troubleshooting.
Connectivity - Microsoft Entra ID	CONETN-5103	The Microsoft Entra ID connector now ensures that the group filter is processed during delta aggregation.