SaaS

SaaS Release Notes - April 24, 2026

Production release notes - April 24, 2026

Release notes cover new features, enhancements, and fixes that have been released to production.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

New features

ProductWhat's new

Connectivity - Quick Compliance

Identity Security Cloud now supports the following connectors as Quick Compliance connectors:

You can now expediently configure read-only connections to these sources for account and entitlement aggregation. For a full list of supported Quick Compliance sources, refer to Quick Compliance.

Machine Identity Security

Users can now view the machine accounts, application identities, and AI agents they own on the My Ownership page. Primary and secondary owners can update attributes and transfer ownership without administrator privileges. For more information, refer to the product announcement.

Enhancements

ProductFeature enhancements

SailPoint Cloud Infrastructure Entitlement Management (CIEM)

SailPoint CIEM now collects, stores, and honors the AWS Identity Center account status (enabled/disabled) for all relevant identities. This will enable admins to use the Identity Security Cloud UI and APIs to view the status of AWS Identity Center accounts.

Identity Security Cloud - Provisioning and Task Manager

The main navigation bar is now accessible from the Identity Profiles page.

Connectivity - Oracle HCM Cloud

The SailPoint Oracle HCM Cloud connector is now enhanced with the bcprov-jdk18on library, upgraded to version 1.82 from 1.78.1, to mitigate a security vulnerability.

Non-Employee Risk Management

Portal users within Non-Employee Risk Management can now submit their login credentials by pressing the Enter key on their keyboard.

Identity Security Cloud - GenAI Descriptions

Suggested and approved GenAI entitlement descriptions can now be regenerated to keep your descriptions fresh and up to date. This also resolves an issue where new descriptions could not be generated for entitlements that were deleted and then re-created.

Two new GenAI Description Regeneration settings on the GenAI Feature Settings page give you control over whether suggested or approved GenAI entitlement descriptions can be overwritten during regeneration.

Fixes

ProductIssue IDFixes

SaaS Connectors - SCIM 2.0 SaaS

CONSEALINK-9764

The SailPoint SCIM 2.0 SaaS connector now correctly maps address fields during the CREATE operation.

SaaS Connectors - Web Services SaaS

CONSEALINK-9162

The SailPoint Web Services SaaS connector now makes the Context available for the CustomAuthentication Endpoint when a customizer is linked.

SaaS Connectors - Web Services SaaS

CONSEALINK-9160

The SailPoint Web Services SaaS connector now prevents Account Aggregation from failing with a 401 Unauthorized error during OAuth2 authentication when a customizer is linked to the source.

SaaS Connectors - Ceridian Dayforce HCM SaaS

CONNAMDANG-7057

The Ceridian Dayforce HCM SaaS connector no longer returns 0 accounts when you configure an account aggregation filter to fetch a single account.

SaaS Connectors - Web Services SaaS

CONSEALINK-9485

The SailPoint Web Services SaaS connector now sends periodic keep-alive messages to the Identity Security Cloud layer during delayed aggregation responses to prevent connection timeout errors while waiting for data from the target system.

SaaS Connectors - SCIM 2.0 SaaS

CONSEALINK-9338

The SailPoint SCIM 2.0 SaaS connector now sends roles in a JSON format during the CREATE operation in Relax Configuration.

SaaS Connectors - Workday SaaS

CONCHENAB-8036

The SailPoint Workday SaaS connector now throws an exception and fails the aggregation if the Workday API fails with retryable errors.