SaaS

SaaS Release Notes - December 26, 2025

Production release notes - December 26, 2025

Release notes cover new features, enhancements, and fixes that have been released to production.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

New features

ProductWhat's new

Connectivity - MongoDB Cloud - Atlas

Your VA-based MongoDB Cloud Atlas source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

SaaS Connectors - Discovery - Entra SSO

The SailPoint Microsoft Entra SSO Discovery connector retrieves details of applications configured in Microsoft Entra. It provides continuous application discovery, revealing inventory and ownership across the enterprise. This guides prioritization and focuses governance efforts on the highest-impact applications. For information on creating a Microsoft Entra SSO discovery connector, refer to Discovering Applications with Microsoft Entra SSO.

Connectivity - SalesForce

The Salesforce VA-based connector now supports Client Credentials as a connection authentication type.

Enhancements

ProductFeature enhancements

Connectivity - Microsoft Entra ID

The Microsoft Entra ID connector now allows filtering of the Azure resource providing granular control over the scope of account and entitlement aggregation through configured list of Subscription IDs and Management Group IDs. For more information, refer to Azure Resource Filtering: Subscriptions and Management Groups.

Connectivity - Sybase

The SAP Sybase connector now supports SAP ASE 16.0 SP04.

Connectivity - SAP S/4HANA Cloud

The SAP HR/HCM connector now supports the SAP On-Prem S/4HANA 2025 Initial shipment stack.

Connectivity - Discovery - ServiceNow CMDB

The SailPoint ServiceNow CMDB Discovery connector fetches the details of applications configured in ServiceNow CMDB. It provides continuous application discovery, revealing inventory and ownership across the enterprise while prioritizing governance efforts on high-impact applications. For more information, refer to Discovering Applications with ServiceNow CMDB.

Connectivity - Discovery - PingOne SSO

SailPoint’s PingOne SSO Discovery connector fetches the details of applications configured in PingOne. It provides continuous application discovery, revealing inventory and ownership across the enterprise while prioritizing governance efforts on high-impact applications. For more information, refer to Discovering Applications with PingOne SSO.

Connectivity - Discovery - Okta SSO

The SailPoint Okta SSO Discovery connector retrieves details of applications configured in Okta. It provides continuous application discovery, revealing inventory and ownership across the enterprise. This guides prioritization and focuses governance efforts on the highest-impact applications. For information on creating a Okta SSO discovery connector, refer to Discovering Applications with Okta SSO.

Connectivity - IBM Security Verify Access

The SailPoint IBM Security Verify Access (IBM Tivoli Access Manager) connector now provides support for partitioning aggregation.

Connectivity - ServiceNow Identity Governance

SaaS Connectors - ServiceNow Identity Governance SaaS

The ServiceNow Identity Governance SaaS and VA connectors now support authentication using Microsoft Entra ID (Azure AD) OAuth 2.0 Client Credentials.

Fixes

ProductIssue IDFixes

Identity Security Cloud

IDNPALM-7789

Dynamic logging has been added to the “Access Profile Cleanup Notification” email template.

Connectivity - Oracle E-Business

CONETN-5270

The SailPoint Oracle EBS Connector no longer fails with ClassCastException for entitlement aggregation.

Connectivity - SAP Concur

CONETN-5252

The SailPoint SAP Concur Connector now supports the removal of roles associated with SAP Concur entitlements.

Connectivity - Workday Accounts

CONETN-5238

The SailPoint Workday Accounts Connector no longer throws an exception when saving token information during aggregation with the Manage Implementer User option enabled.