SaaS Release Notes - January 30, 2026

Connectivity - Quick Compliance

Identity Security Cloud now supports the following connectors as Quick Compliance connectors:

• 7shifts
• Linear
• SuperOps

You can now expediently configure read-only connections to these sources for account and entitlement aggregation. For a full list of supported Quick Compliance sources, refer to Quick Compliance.

Identity Security Cloud - Core Access Model

We now log Role Added and Role Removed audit events when a role is assigned to or removed from an identity based on assignment criteria.

Identity Security Cloud - Platform

Upgraded core services to use Java Development Kit (JDK) 17.

Identity Security Cloud - Core Access Model

The following enhancements have been added to user levels:

• Custom user levels can be unassigned in bulk.
• Search and filter custom user levels by name, description, owner, and status.
• Search and filter permissions by name, description, and category.
• Added descriptions to default user levels.

Identity Security Cloud - Access Requests

ISCRP-5504

Fixed an issue with the Access Request Decision trigger (idn:access-request-post-approval) where a formatting error introduced an extra space in the APPROVED payload value, preventing previously configured event trigger subscriptions from firing.

SaaS Management

ADIC-736

Upgraded React and and Next.js to versions 19.2.1 and 16.0.8, respectively, to fix critical security vulnerabilities relating to React2Shell (CVE-2025-55182 and CVE-2025-66478).

SaaS Connectors - Microsoft SharePoint Online

CONETN-5297

The SailPoint Microsoft Sharepoint Online connector now correctly processes firstName and lastName based on the API response, when it provides the name in the format lastName, firstName.

Identity Security Cloud - Access History

ISCRP-5453

Fix an issue where IdentityAccessRemovedEvents events were incorrectly generated and listed for identities in Access History.

SaaS Connectors - Freshservice SaaS

CONSEALINK-8667

The SailPoint Freshservice SaaS connector in Account Aggregation now retrieves all entitlements attached to the users.

SaaS Connectors - SCIM 2.0 SaaS

CONSEALINK-8661

The SCIM 2.0 SaaS Connector now supports the keepAliveTimeInterval parameter. This parameter enables you to configure how long aggregation commands are active before they expire to ensure that long-running aggregation operations complete successfully without command expiration failures.

Identity Security Cloud - Workflows

PLTWRKFLW-9369

Identity Security Cloud will now check if entitlement requests are enabled before processing a Manage Access action in Workflows. If entitlement requests are disabled and an entitlement is in the list of access requests to be sent, the action will return an error prompting the administrator to enable entitlement requests in the system configuration, preventing unintended changes to approval processes.

To use the Manage Access action with entitlements, ensure that entitlement requests are enabled in the Identity Security Cloud system configuration.

Connectivity - SCIM 2.0

CONETN-5268

Relaxed configurations in the SCIM 2.0 connector no longer executes additional APIs after aggregating the number of users set by the totalCount parameter.

Identity Security Cloud - SoD

ISCSOD-11

Fixed a visibility issue with access request separation of duties (SOD) violation checks. When an SOD check error or failure occurs in Identity Security Cloud or in the Access Risk Management integration, the system now terminates the access request and displays an error message in the Request Center UI.