SaaS
SaaS Release Notes - December 26, 2025
Production release notes - December 26, 2025
Release notes cover new features, enhancements, and fixes that have been released to production.
Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.
New features
| Product | What's new |
|---|---|
Connectivity - MongoDB Cloud - Atlas | Your VA-based MongoDB Cloud Atlas source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source. |
SaaS Connectors - Discovery - Entra SSO | The SailPoint Microsoft Entra SSO Discovery connector retrieves details of applications configured in Microsoft Entra. It provides continuous application discovery, revealing inventory and ownership across the enterprise. This guides prioritization and focuses governance efforts on the highest-impact applications. For information on creating a Microsoft Entra SSO discovery connector, refer to Discovering Applications with Microsoft Entra SSO. |
Connectivity - SalesForce | The Salesforce VA-based connector now supports Client Credentials as a connection authentication type. |
Enhancements
| Product | Feature enhancements |
|---|---|
Connectivity - Microsoft Entra ID | The Microsoft Entra ID connector now allows filtering of the Azure resource providing granular control over the scope of account and entitlement aggregation through configured list of Subscription IDs and Management Group IDs. For more information, refer to Azure Resource Filtering: Subscriptions and Management Groups. |
Connectivity - Sybase | The SAP Sybase connector now supports SAP ASE 16.0 SP04. |
Connectivity - SAP S/4HANA Cloud | The SAP HR/HCM connector now supports the SAP On-Prem S/4HANA 2025 Initial shipment stack. |
Connectivity - Discovery - ServiceNow CMDB | The SailPoint ServiceNow CMDB Discovery connector fetches the details of applications configured in ServiceNow CMDB. It provides continuous application discovery, revealing inventory and ownership across the enterprise while prioritizing governance efforts on high-impact applications. For more information, refer to Discovering Applications with ServiceNow CMDB. |
Connectivity - Discovery - PingOne SSO | SailPoint’s PingOne SSO Discovery connector fetches the details of applications configured in PingOne. It provides continuous application discovery, revealing inventory and ownership across the enterprise while prioritizing governance efforts on high-impact applications. For more information, refer to Discovering Applications with PingOne SSO. |
Connectivity - Discovery - Okta SSO | The SailPoint Okta SSO Discovery connector retrieves details of applications configured in Okta. It provides continuous application discovery, revealing inventory and ownership across the enterprise. This guides prioritization and focuses governance efforts on the highest-impact applications. For information on creating a Okta SSO discovery connector, refer to Discovering Applications with Okta SSO. |
Connectivity - IBM Security Verify Access | The SailPoint IBM Security Verify Access (IBM Tivoli Access Manager) connector now provides support for partitioning aggregation. |
Connectivity - ServiceNow Identity Governance SaaS Connectors - ServiceNow Identity Governance SaaS | The ServiceNow Identity Governance SaaS and VA connectors now support authentication using Microsoft Entra ID (Azure AD) OAuth 2.0 Client Credentials. |
Fixes
| Product | Issue ID | Fixes |
|---|---|---|
Identity Security Cloud | IDNPALM-7789 | Dynamic logging has been added to the “Access Profile Cleanup Notification” email template. |
Connectivity - Oracle E-Business | CONETN-5270 | The SailPoint Oracle EBS Connector no longer fails with |
Connectivity - SAP Concur | CONETN-5252 | The SailPoint SAP Concur Connector now supports the removal of roles associated with SAP Concur entitlements. |
Connectivity - Workday Accounts | CONETN-5238 | The SailPoint Workday Accounts Connector no longer throws an exception when saving token information during aggregation with the |