SaaS Release Notes - September 26, 2025

Connectivity - Atlassian Suite-Cloud

Your VA-based Atlassian Suite Cloud source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Data Access Security

Certifications play an important role in any access governance program. During campaigns, reviewers are required to go over large numbers of access rights and make a governance decision to approve or reject that access; which can be a tedious process.

Data Access Security is now introducing campaign visualization - making large amounts of information easily digestible! Reviewers now have the ability to take quick actions, resolving a bulk of the approvals or rejections with one-click, giving the reviewer the much needed time to focus on access which should be scrutinized.

Data Access Security

Security Admins and Compliance Managers need to consistently and regularly assess access to resources, especially those with sensitive data. Those campaigns sometimes require multiple approval levels to meet regulatory compliance needs.

Introducing the enablement of Multi-Level Reviews for Data Access Security Campaigns. With the multi-level review feature, you can now configure campaigns to forward approvals on to the next level to reviewed.

See Data Access Security Access Certification documentation for more details.

Connectivity - Microsoft SharePoint Online

Your VA-based Microsoft SharePoint Online source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Identity Security Cloud - Provisioning and Task Manager

Lifecycle Management now supports account deletion on termination, giving administrators a configuration-based way to permanently remove accounts when an identity reaches a terminated state. For more information about this feature, refer to the product announcement and documentation.

Data Access Security - Snowflake

Snowflake is now available as an application type for Data Access Security (DAS)! This will allow you to view your Snowflake data assets within DAS including tables, views, stored procedures, and functions. If utilizing Snowflake data classification, DAS will ingest those directly from Snowflake, highlighting your critical data set in DAS. Configuring this application in DAS allows you to evaluate and govern permissions, preventing entitlement sprawl and limiting data exposure.

See the Data Access Security Snowflake documentation for more details.

Connectivity - Meditech

Your VA-based Meditech source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Machine Identity Security

The control panels for application identities have been updated to include the Access tab. Within this tab, users can now view the entitlements held by an application identity’s correlated machine accounts. Administrators can also assign user entitlements to an application identity to specify which user entitlements grant access to the application identity.

Connectivity - Zoom

Your VA-based Zoom source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Guidewire ContactManager

Your VA-based Guidewire ContactManager source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Guidewire PolicyCenter

Your VA-based Guidewire PolicyCenter source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Oracle EPM Cloud - NR

Your VA-based Oracle EPM Cloud NR source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Oracle EPM Cloud - AR

Your VA-based Oracle EPM Cloud AR source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Oracle EPM Cloud - FCCS

The Oracle EPM FCCS Cloud VA-based sources can now be migrated to SaaS sources, preserving data, configurations, and settings. See Migrate VA-based Source to a SaaS Source for details.

Connectivity - Zendesk

Your VA-based Zendesk source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Slack

You can now migrate your Slack VA-based source to a corresponding SaaS source while ensuring data (users and entitlements) remain intact. It also maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

SailPoint Cloud Infrastructure Entitlement Management (CIEM)

You can now use SailPoint CIEM and Machine Identity Security to view effective access for machine identities that use Microsoft Azure Service Principles and Google Cloud Infrastructure Service Accounts.

Connectivity - SAP Fieldglass

Your VA-based SAP Fieldglass source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - NetSuite

Your VA-based Oracle NetSuite source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact. It also maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Duo

Your VA-based Duo source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact. It also maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Guidewire ClaimCenter

Your VA-based Guidewire ClaimCenter source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Guidewire BillingCenter

Your VA-based Guidewire BillingCenter source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Oracle EPM Cloud - Planning

Your VA-based Oracle EPM Cloud Planning source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

SaaS Connectors - Amazon Web Services (AWS) SaaS

The SailPoint AWS SaaS connector now supports discovery of Amazon Bedrock Agents and Amazon Bedrock AgentCore Agents for Agent Governance capability in Identity Security Cloud. For more information, refer to Agent Governance Settings.

Connectivity - Oracle ERP Cloud

Your VA-based Oracle ERP Cloud source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Coupa

Your VA-based Coupa source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

SailPoint Cloud Infrastructure Entitlement Management (CIEM)

You can now view information about the source scopes included in SailPoint CIEM using the Cloud Infrastructure Entitlement Management (CIEM) Source Scope Insights widget on your MySailPoint home page.

Connectivity - Box

Your VA-based Box source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

SaaS Connectors - Microsoft Entra SaaS

The Microsoft Entra SaaS connector now supports aggregation of AI Foundry Agents. For more information, refer to Azure AI Foundry Agent Management.

SaaS Connectors - StrongDM

The StrongDM connector now supports customization in the base URL.

SaaS Connectors - Workday Accounts SaaS

The SailPoint Workday Accounts SaaS connector now supports simultaneous provision of User-Based Security Groups in multiple requests.

Non-Employee Risk Management

The Primary Button color on the Admin > System > Branding page is now also applied to tabs, pagination and item count table elements.

Identity Security Cloud - Virtual Appliance

A new Standard virtual appliance cluster type supports multiple product components within the same cluster.

Identity Security Cloud - Workflows

The Execute PowerShell Script command is available in the Windows Server action in Workflows. This command allows customers to execute PowerShell scripts securely through workflows without granting standing administrative privileges. This command automates common IT operations and supports named string arguments and structured output formats for complex automation scenarios. For more information, refer to the Windows Server Action documentation.

Connectivity - Workday Accounts

The SailPoint Workday Accounts connector now supports simultaneous provision of User-Based Security Groups in multiple requests.

SaaS Connectors - SCIM 2.0 SaaS

The SCIM 2.0 SaaS connector now supports mapping of the locked status and unlock account operation based on the provided extension attribute.

Identity Security Cloud - Workflows

The Create Group and Update Group Attributes commands in the Active Directory Action for Privileged Task Automation workflows now have an Extra Attributes field, which supports free entry of custom attributes with string-only values. For more information, refer to the Active Directory Action documentation.

Connectivity - Web Services SaaS

The Web Services SaaS connector now supports customization to its endpoints. Customization provides greater flexibility to support specific data massaging based on your requirements. For more information, refer to Endpoint Customization and Customized Operation.

Connectivity - Imprivata EAM

The Imprivata Enterprise Access Management (EAM) integration now supports default application account attributes, enabling seamless mapping and synchronization of common user account attributes. For more information, refer to Application Settings.

SaaS Connectors - Microsoft Entra SaaS

CONHOWRAH-5978

The Microsoft Entra SaaS connector no longer fails with command timeout error during AzureRoleAssignments provisioning.

Connectivity - SCIM 2.0

CONETN-5148

The SCIM 2.0 connector now correctly passes attributes with writeOnly mutability into JSON payloads using the PUT method.

SaaS Connectors - Workday SaaS

CONCHENAB-7607

The Workday SaaS Connector now uses the configured Effective Timezone in all requests during aggregation.

Connectivity - SCIM 2.0

CONETN-5175

The SCIM 2.0 connector now properly considers members a multivalued attribute in the group schema.

SaaS Connectors - Webex Control Hub SaaS

CONSEALINK-7689

The WebEx Control Hub SaaS connector now aggregates Roles and License Types of entitlement memberships during account aggregation.