SaaS

SaaS Release Notes - December 5, 2025

Production release notes - December 5, 2025

Release notes cover new features, enhancements, and fixes that have been released to production.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

New features

ProductWhat's new

SaaS Connectors - ServiceNow Identity Governance SaaS

The ServiceNow Identity Governance SaaS connector now supports aggregation of Agentic Workflows and AI Agents during agent aggregation. For more information, refer to Agent Governance Settings.

Connectivity - Dropbox

The SailPoint VA-based Dropbox source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Identity Security Cloud - MySailPoint

A new custom dashboard interface in the Identity Security Cloud Atlas Platform allows admins to create an additional personal dashboard, edit the dashboards they own, and quickly switch between them.

Tenants with Atlas Enterprise can create up to 4 additional personal dashboards. They can also add AIC charts as MySailPoint widgets and create up to 20 managed dashboards, which are dashboards that admins can share with end users through entitlements. These allow information to be shared with non-admins without overprovisioning admin access.

For more information, refer to Using Personal Dashboards.

SaaS Connectors - Ceridian Dayforce HCM SaaS

The Ceridian Dayforce HCM SaaS connector can now retry failed aggregation connections based on a defined list of error messages in the defaultRetryList parameter.

Connectivity - Okta

Your VA-based Okta source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - Oracle Fusion HCM Accounts

Your VA-based Oracle Fusion HCM Accounts source can now migrate to a corresponding SaaS source while ensuring data (users and entitlements) remain intact. It also maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Enhancements

ProductFeature enhancements

SailPoint Cloud Infrastructure Entitlement Management (CIEM)

You can now view the roles an identity can assume to access AWS resources. Refer to Viewing AWS Assumable Roles for more information.

Identity Security Cloud - Access Requests

The My Access page now offers a search bar to help users locate the access they need to manage. Search by any text within the access name or source name. All tabs of the My Access page are filtered at once and you can select each tab to view its search results.

Connectivity - Snowflake

SaaS Connectors - Snowflake SaaS

The VA-based and SaaS-based Snowflake connectors can now aggregate and provision the Type account attribute.

Identity Security Cloud - GenAI Descriptions

Admins can now receive Teams and Slack notifications when GenAI entitlement descriptions have been regenerated to more accurately reflect GenAI Settings input.

Connectivity - SAP Analytics Cloud

The SAP Analytics Cloud Connector has been enhanced to support provisioning using non-bundled IPS configurations through the SAP Integration Suite.

Connectivity - Workday

The SailPoint Workday connector is now certified for Workday API version 44.2.

Fixes

ProductIssue IDFixes

Connectivity - SAP SuccessFactors

CONNAMDANG-6252

The SailPoint SAP SuccessFactors connector now respects and sends header Set-Cookie route in Compound Employee API header if received.

Identity Security Cloud - Core Access Model

ISCAIM-27277

RoleTargets and Attribute assignments are now correctly updated when an account is reloaded.

Connectivity - SCIM 2.0

CONETN-5218

The SCIM 2.0 connector no longer returns an Illegal Character Exception while assigning Groups to a user if the Group has a special character in its name.

Connectivity - SAP SuccessFactors

CONETN-5240

The SailPoint SAP SuccessFactors connector has been enhanced to handle username updates correctly when the user has secondary employment and the aggregatePrimaryEmployment flag is enabled.

Connectivity - SCIM 2.0

CONETN-5215

The SCIM 2.0 connector can now send manager attributes in one tag using PATCH while using Split Entry.

SaaS Connectors - Zoom SaaS

CONSEALINK-8288

The Zoom SaaS connector no longer fails the test connection with the error “Stream client connection is broken (connector process may have crashed)”.

SaaS Connectors - SAP Identity Directory SaaS

CONETN-5227

The SailPoint SAP Identity Directory SaaS connector no longer fails with error “Schema validation error“ during update operation.