SaaS
SaaS Release Notes - December 5, 2025
Production release notes - December 5, 2025
Release notes cover new features, enhancements, and fixes that have been released to production.
Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.
New features
| Product | What's new |
|---|---|
SaaS Connectors - ServiceNow Identity Governance SaaS | The ServiceNow Identity Governance SaaS connector now supports aggregation of Agentic Workflows and AI Agents during agent aggregation. For more information, refer to Agent Governance Settings. |
Connectivity - Dropbox | The SailPoint VA-based Dropbox source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source. |
Identity Security Cloud - MySailPoint | A new custom dashboard interface in the Identity Security Cloud Atlas Platform allows admins to create an additional personal dashboard, edit the dashboards they own, and quickly switch between them. Tenants with Atlas Enterprise can create up to 4 additional personal dashboards. They can also add AIC charts as MySailPoint widgets and create up to 20 managed dashboards, which are dashboards that admins can share with end users through entitlements. These allow information to be shared with non-admins without overprovisioning admin access. For more information, refer to Using Personal Dashboards. |
SaaS Connectors - Ceridian Dayforce HCM SaaS | The Ceridian Dayforce HCM SaaS connector can now retry failed aggregation connections based on a defined list of error messages in the |
Connectivity - Okta | Your VA-based Okta source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source. |
Connectivity - Oracle Fusion HCM Accounts | Your VA-based Oracle Fusion HCM Accounts source can now migrate to a corresponding SaaS source while ensuring data (users and entitlements) remain intact. It also maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source. |
Enhancements
| Product | Feature enhancements |
|---|---|
SailPoint Cloud Infrastructure Entitlement Management (CIEM) | You can now view the roles an identity can assume to access AWS resources. Refer to Viewing AWS Assumable Roles for more information. |
Identity Security Cloud - Access Requests | The My Access page now offers a search bar to help users locate the access they need to manage. Search by any text within the access name or source name. All tabs of the My Access page are filtered at once and you can select each tab to view its search results. |
Connectivity - Snowflake SaaS Connectors - Snowflake SaaS | The VA-based and SaaS-based Snowflake connectors can now aggregate and provision the |
Identity Security Cloud - GenAI Descriptions | Admins can now receive Teams and Slack notifications when GenAI entitlement descriptions have been regenerated to more accurately reflect GenAI Settings input. |
Connectivity - SAP Analytics Cloud | The SAP Analytics Cloud Connector has been enhanced to support provisioning using non-bundled IPS configurations through the SAP Integration Suite. |
Connectivity - Workday | The SailPoint Workday connector is now certified for Workday API version 44.2. |
Fixes
| Product | Issue ID | Fixes |
|---|---|---|
Connectivity - SAP SuccessFactors | CONNAMDANG-6252 | The SailPoint SAP SuccessFactors connector now respects and sends header Set-Cookie route in Compound Employee API header if received. |
Identity Security Cloud - Core Access Model | ISCAIM-27277 | RoleTargets and Attribute assignments are now correctly updated when an account is reloaded. |
Connectivity - SCIM 2.0 | CONETN-5218 | The SCIM 2.0 connector no longer returns an Illegal Character Exception while assigning Groups to a user if the Group has a special character in its name. |
Connectivity - SAP SuccessFactors | CONETN-5240 | The SailPoint SAP SuccessFactors connector has been enhanced to handle username updates correctly when the user has secondary employment and the |
Connectivity - SCIM 2.0 | CONETN-5215 | The SCIM 2.0 connector can now send manager attributes in one tag using PATCH while using Split Entry. |
SaaS Connectors - Zoom SaaS | CONSEALINK-8288 | The Zoom SaaS connector no longer fails the test connection with the error “Stream client connection is broken (connector process may have crashed)”. |
SaaS Connectors - SAP Identity Directory SaaS | CONETN-5227 | The SailPoint SAP Identity Directory SaaS connector no longer fails with error “Schema validation error“ during update operation. |