Search

New SaaS Connectivity: Google Workspace Connector is now LIVE!

We are excited to announce that the new SailPoint Google Workspace SaaS Connector is now Live! The Google Workspace SaaS connector lets organizations govern access to Google Workspace Accounts, Service Accounts, Domains and the associated Google Groups. This includes aggregation, provisioning, and t...

New SaaS Connectors - Workday Accounts, Box, Dropbox and Zendesk

We are super excited to announce the rolled out of new SailPoint SaaS connectors - Workday Accounts SaaS, Box SaaS, Dropbox SaaS and Zendesk SaaS in Identity Security Cloud. These SaaS Connectors do not require a Virtual Appliance to run and provide SaaS-SaaS connectivity for Workday Accounts, Box, ...

New Forms Quick-Launch Widget for MySailPoint

SailPoint is excited to announce that the Forms widget is now available within the MySailPoint home page. Using the Forms widget, you can create, view, and edit forms, and launch up to 10 forms directly from the home page without the use of a workflow. To enable a form for the widget, you must sel...

SaaS 2.0 vs VA-Based Connector Decision Guide

Overview As our connectivity framework has matured to include direct SaaS-to-SaaS communications (aka SaaS 2.0), there is a meaningful opportunity to transition our VA-based implementations over to the new connectivity framework whenever it is in the customer’s best interests. This document atte...

Navigating SailPoint Configuration Hub's role in streamlining and securing configurations

Authored by: Yael Kadoshi, Lead Product Manager Learn about SailPoint's Configuration Hub, a groundbreaking self-service tool with configuration change delivery capabilities designed for its multi-tenant Identity Security Cloud solution.

Success Acceleration Service Packages (SASP) Detailed SKU Descriptions

SKU details for Success Acceleration Service Packages (SASP)

Enable RU_LOCKED for IdentityNow with RACF

Enable Locked feature for IdentityNow with the RACF Connector. This fix introduces a new RSSPARM parameter called as IDENTITY_PLATFORM which may have vaule of "IIQ" or "IDN". The default is "IIQ". When the RACF Connector works with IDN, set IDENTITY_PLATFORM to "IDN". In this case, if you follow...

Elevate Security User Risk Information

This is a SaaS connector to Elevate Security. This pulls entities back from the Elevate API based on a set query, parses them into IdentityNow accounts, and then typical correlation would occur. After that, account attributes, such as different risk scores can be used as an Identity Profile attribut...

BeyondTrust Privilege Management Cloud for Windows & Mac

The BeyondTrust PM Cloud connector has been created using the SailPoint IdentityNow SaaS Connector SDK. PM Cloud includes a SCIM API, and a Connector in IdentityNow can be created using the generic SCIM Source. However, a SaaS Connector allows direct Cloud to Cloud communication without requiring ...

BeyondTrust Representatives SaaS Connector

The BeyondTrust Representatives Connector supports both Privileged Remote Access and Remote Support. It allows IdentityNow to fully manage the lifecycle of Representative Accounts, and Group Policy memberships for those accounts. Integration Info Developer BeyondTrust Integrati...

Identity Security Cloud After Hours Go-Live Assistance

Peace of mind with after-hours assistance When preparing for go-live, the SailPoint Professional Services team can provide you with an additional layer of support outside of normal business hours. For clients who require access to SailPoint expertise outside of the Monday – Friday 8 a.m. – 6 p.m. ...

Configuring Virtual Appliances for FIPS Compliance

FedRAMP users of IdentityNow may need to configure their virtual appliances (VAs) to be compliant with Federal Information Processing Standards (FIPS) 200 and 140-2. FIPS configuration is performed on each individual VA at the Linux kernel level. FIPS configuration on a VA cannot be reversed or ...

Source Account Schema Best Practices

Overview Within Identity Security Cloud’s connectivity platform, there are several categories of connectors which can be leveraged to integrate with target applications. For all classes of connectors, implementers have wide latitude in which account attributes are included as part of the schema, w...

Certification Best Practices

Overview Certification is an important governance feature that allows organizations to meet important audit, risk, and compliance guidelines to ensure the risk to their organization is well managed. This is done by aggregating all accesses within an organization and presenting them to access rev...

Best approach to use IQ Service across different IDN Environments (Client has only 1 AD environment)

There are few situations when client has only one AD environment which they want to use for Sandbox as well as Production. So In this sort of scenario we should follow below mentioned approach :- We should have 2 instances of IQ Service installed on the AD Server. We should definitely have two...

How to Format Input Data for Lookup Transform

Transforms are a data manipulation, standardization, and normalization tool in IdentityNow that utilize bounded logic primitive operations, and they are necessary in most implementations to ensure that identity attributes have the correct values. The lookup primitive operation is extremely useful wh...

How to Perform a Search Query Aggregation via API

Search query aggregations are specialized searches that can only be done via the POST v3/search/aggregate API endpoint.  In this article we will explain how to use this API endpoint with a couple examples and use cases.

How to Perform Searches with innerHit criteria via API

Search in the IdentityNow user interface offers robust visibility into a tenant's data, but sometimes it is necessary to perform a search via the POST v3/search API endpoint to get the search results returned exactly as desired.

How to Format Identity Attribute Date Values to Be Searchable in Search

The search interface in IdentityNow requires all date values to be in ISO8601 format (yyyy-MM-dd'T'HH:mm:ss.SSSZ or yyyy-MM-dd) to be searchable.  Many authoritative source systems do not store dates in either of these formats, therefore if identity attributes like startDate or endDate are mapped to...

How to Customize Identity Details for Certifications via REST API

In order for reviewers to make the best informed decisions in certification reviews, it is helpful for the reviewers to be able to see specific information about the identities they are reviewing such as department, title, region, etc.  In this article, we will show how to configure up to five custo...