SaaS
SaaS Release Notes - April 24, 2026
Production release notes - April 24, 2026
Release notes cover new features, enhancements, and fixes that have been released to production.
Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.
New features
| Product | What's new |
|---|---|
Connectivity - Quick Compliance | Identity Security Cloud now supports the following connectors as Quick Compliance connectors: You can now expediently configure read-only connections to these sources for account and entitlement aggregation. For a full list of supported Quick Compliance sources, refer to Quick Compliance. |
Machine Identity Security | Users can now view the machine accounts, application identities, and AI agents they own on the My Ownership page. Primary and secondary owners can update attributes and transfer ownership without administrator privileges. For more information, refer to the product announcement. |
Enhancements
| Product | Feature enhancements |
|---|---|
SailPoint Cloud Infrastructure Entitlement Management (CIEM) | SailPoint CIEM now collects, stores, and honors the AWS Identity Center account status (enabled/disabled) for all relevant identities. This will enable admins to use the Identity Security Cloud UI and APIs to view the status of AWS Identity Center accounts. |
Identity Security Cloud - Provisioning and Task Manager | The main navigation bar is now accessible from the Identity Profiles page. |
Connectivity - Oracle HCM Cloud | The SailPoint Oracle HCM Cloud connector is now enhanced with the |
Non-Employee Risk Management | Portal users within Non-Employee Risk Management can now submit their login credentials by pressing the Enter key on their keyboard. |
Identity Security Cloud - GenAI Descriptions | Suggested and approved GenAI entitlement descriptions can now be regenerated to keep your descriptions fresh and up to date. This also resolves an issue where new descriptions could not be generated for entitlements that were deleted and then re-created. |
Fixes
| Product | Issue ID | Fixes |
|---|---|---|
SaaS Connectors - SCIM 2.0 SaaS | CONSEALINK-9764 | The SailPoint SCIM 2.0 SaaS connector now correctly maps address fields during the CREATE operation. |
SaaS Connectors - Web Services SaaS | CONSEALINK-9162 | The SailPoint Web Services SaaS connector now makes the Context available for the CustomAuthentication Endpoint when a customizer is linked. |
SaaS Connectors - Web Services SaaS | CONSEALINK-9160 | The SailPoint Web Services SaaS connector now prevents Account Aggregation from failing with a 401 Unauthorized error during OAuth2 authentication when a customizer is linked to the source. |
SaaS Connectors - Ceridian Dayforce HCM SaaS | CONNAMDANG-7057 | The Ceridian Dayforce HCM SaaS connector no longer returns 0 accounts when you configure an account aggregation filter to fetch a single account. |
SaaS Connectors - Web Services SaaS | CONSEALINK-9485 | The SailPoint Web Services SaaS connector now sends periodic keep-alive messages to the Identity Security Cloud layer during delayed aggregation responses to prevent connection timeout errors while waiting for data from the target system. |
SaaS Connectors - SCIM 2.0 SaaS | CONSEALINK-9338 | The SailPoint SCIM 2.0 SaaS connector now sends roles in a JSON format during the CREATE operation in Relax Configuration. |
SaaS Connectors - Workday SaaS | CONCHENAB-8036 | The SailPoint Workday SaaS connector now throws an exception and fails the aggregation if the Workday API fails with retryable errors. |