SaaS

SaaS Release Notes - January 9, 2026

Production release notes - January 9, 2026

Release notes cover new features, enhancements, and fixes that have been released to production.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

New features

ProductWhat's new

SaaS Connectors - SAP Sales and Service Cloud SaaS

SailPoint is pleased to announce the launch of the SAP Sales and Service Cloud SaaS integration. This integration enhances security and compliance by streamlining the management of user identities and entitlements, including business roles (groups). For more information, refer to Integrating SailPoint with SAP Sales and Service Cloud SaaS.

Identity Security Cloud - Search

The dataAccess attribute has been added to the IDENTITY_CHANGED event's users.access object if it is of type Entitlement. This information is to be consumed by Search to allow Data Access Security attributes to be searchable.

Connectivity - MongoDB Cloud - Database

Your VA-based MongoDB Cloud Database source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Connectivity - SalesForce

Your VA-based Salesforce source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Identity Security Cloud - Forms

Forms has a new Advanced Search option in the Select field that enables admins to select labels, sublabels, and the value which ensures the selection can be more easily consumed in downstream workflow actions.

Enhancements

ProductFeature enhancements

Identity Security Cloud - Workflows

Adaptive Approvals is now available. The capability introduces a new Access Request Trigger, new Approval Policy and Generic Approval Policy actions, and three new Adaptive Approval templates in Workflows. For more information, refer to Adaptive Approvals documentation.

Connectivity - SAP Fieldglass

The SAP Fieldglass Connector has been enhanced to fully support aggregation of worker records whose email IDs begin with 0, 1, or 2.

Connectivity - SAP Fieldglass

The SAP Fieldglass connector has been enhanced to support proper aggregation of primary roles.

Non-Employee Risk Management

Non-Employee Risk Management has introduced a standardized data model for all new tenants. This data model includes 4 default profile types for organizations, jobs, non-employees, and assignments. Each default profile type is configured with a standard set of attributes, as well as associated forms and pages. Current customers and in-progress implementations are not affected. Refer to Managing Default Profile Types for more information.

Fixes

ProductIssue IDFixes

Identity Security Cloud - Workflows

N/A

Fixes an issue so Workflow licensing tiers are now being enforced correctly. Production tenant usage limits will follow the licensed tiers, as defined here. If you exceed/have exceeded the maximum number of steps allowed, you will see an error and will need to remove steps to be able to enable your workflow. If you exceed/have exceeded the maximum number of enabled workflows allowed, you will see an error and will need to disable any number of workflows above your license limit to be able to enable the new workflow.

Sandbox tenants are eligible for up to 200 active workflows with 100 steps per workflow.

SaaS Connectors - Web Services SaaS

CONSEALINK-8509

The Web Services SaaS connector no longer returns a KeyID cannot be empty error if the Create User API response doesn’t include the nativeIdentity attribute.

Connectivity - Microsoft Entra ID

CONETN-5281

The SailPoint Microsoft Entra ID Connector has been updated to properly handle users with duplicate display names when executing the Add-MailboxPermission command.

SaaS Connectors - Web Services SaaS

CONSEALINK-8471

The Web Services SaaS connector now saves authentication tokens in the app configuration. To enable this feature, set the saveTokenInAppConfig parameter to true.

Connectivity - SAP HANA

CONETN-5248

The SAP HANA connector can now properly aggregate data from databases which have been updated from on-premise deployments to cloud deployments.

Connectivity - Amazon Web Services (AWS)

CONETN-5140 CONDOCS-9133

SailPoint’s Amazon Web Services connector successfully aggregates entitlements.