Search

Identity Security Cloud Connectors

Best Practices: Deciding Which Connector to Use Note: Identity Security Cloud is SailPoint’s next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The product documentation covers both Identity Security Cloud and IdentityNow features...

Best Practices: Attribute Sync

Overview In the complex world of Identity and Access Management (IAM), ensuring data consistency across distributed systems is a challenge. This is where attribute synchronization in Identity Security Cloud becomes an indispensable tool. Far more than a simple data replication mechanism, attribute...

SailPoint File Upload Utility

Overview The SailPoint File Upload Utility provides a way for SailPoint customers to upload files to Identity Security Cloud automatically, for automatic account and entitlement aggregations. This is an executable Java-based JAR which can be executed with a set of options, or scheduled via CLI uti...

Best Practices for Provisioning with Passwords in Identity Security Cloud

As many customers use Identity Security Cloud for provisioning, they ask about best practices for managing passwords for accounts created by Identity Security Cloud. As a best practice, here are the options SailPoint recommends for handling passwords, with their advantages and tradeoffs:   Opt...

Identity Security Cloud Common Search Queries

This document aims to provide a quick set of commonly-used example search queries.  This should not only give you a good reference of syntax and features, but also how to easily find what you are looking for. For additional information on building search queries, refer to the Search-related topics...

Flat File (Generic) Source Configuration Reference Guide

Overview This document is designed to give specific information about the requirements and field definitions needed to get a working instance of a Flat File (Generic) source in IdentityNow. NOTES: You also have the option to use Delimited File Source Configuration Reference Guide​. After l...

How do I designate an account attribute as the Account Name for a source?

In IdentityNow, the name associated with a source account appears in a variety of places. For example, if you look at a list of accounts on a source, this value appears in the User Accounts page of the source. This name also appears as the Display Name in the Accounts tab of any identities that have...

Obtaining the Custom Connector Files Required for SAP and SAP HR Sources/Connectors

If you want to configure the SAP HR and SAP Sources in IdentityNow/Connectors in IdentityIQ, you must obtain the connector files to configure your Source/Connector.   Prerequisites Ensure that you have an SAP Marketplace account.   Obtaining the Files Perform the following steps: Nav...

New Capability: Auto-Discovery of Privileged Entitlements

SailPoint is introducing automatic discovery of privileged entitlements to help customers find potentially risky access that may not be captured by vendor-published lists or broad custom criteria. This enhancement helps administrators identify the needle-in-the-haystack entitlements that could grant...

Enhancement: Automatic Entitlement Descriptions on New and Updated Entitlements

SailPoint is making GenAI-powered entitlement descriptions easier to scale by allowing customers to automatically generate descriptions for new and updated entitlements that do not already have one. This helps customers improve entitlement data quality earlier in the source onboarding and update pro...

Maintenance: Access Request Segmentation for Entitlements

To support access request segmentation for entitlements, we will deploy an update to our data pipelines. During the deployment of the update, there will be a temporary increase in processing delays for entitlement data updates in your tenant’s Search feature. We expect these delays to be no greater ...

New Capability: Machine Account Creation

Organizations create large volumes of machine accounts (such as service accounts, bots, and automation identities) often outside of Identity Security Cloud. This leads to inconsistent processes, weak approval discipline, and limited visibility between requested and provisioned accounts. SailPoint Id...

Enhancement: Custom User Levels

We are excited to announce that Custom User Levels can now be requested via Entitlements. Custom User Levels will now create an Entitlement when they are published. Administrators can enable the new Entitlements to be request-able. Entitlements are now updated when the corresponding Custom User Leve...

Enhancement: Multiple Owner Support for Roles, Access Profiles, and Entitlements

With this release, ISC now supports assigning multiple people as the owners of a Role, Access Profile, or Entitlement.

New Capability: Privilege Classification in Identity Security Cloud

SailPoint is proud to present the new Privilege Classification feature in Identity Security Cloud (ISC). This features allows customers to use new classifications levels to assign privilege indicators on entitlements. These new levels will replace the existing privilege boolean flag on entitlements,...

New Capability: Entitlement Types and Schemas UI is available for all the applicable sources

Entitlement types and schemas can now be managed in the user interface for all sources that support entitlements. You can now view and edit schema attributes as well as choose to aggregate all entitlements or select the specific entitlement types you want to include.

Enhancement: Metadata support for Entitlement Data Segmentation

We are pleased to announce that Entitlement Data Segmentation now supports the ability to use access model metadata attributes within the builder query for Entitlement data segments.

New Capability: Entitlement Rename and Move

The feature addresses an issue with aggregating entitlements that are renamed in Active Directory and Azure Sources. With this release, when an entitlement Distinguished Name (DN) is changed in an Active Directory or Azure source, ISC is now able to correctly correlate the modified entitlement to it...

Alation SCIM Integration

Customers can now integrate the Alation Agentic Data Intelligence Platform with SailPoint Identity Security Cloud using SailPoint’s SCIM 2.0 SaaS connector. This new integration enables automated user provisioning into Alation directly from SailPoint, streamlining identity governance for enterpris...

New Capability: Access Page and User Entitlements for Machine Identities (subtype Applications)

Viewing application access just got easier. Admins can now see a detailed view of machine identity access through the new Access page.