Search

Configuring Sources and Virtual Appliances to Support the Password Interceptor

The password interceptor functionality on the Server is managed through a web service method and a workflow. The password interceptor client calls the web service which in turn launches the workflow to complete the password interception process (usually propagation to other systems). If you enable...

SailPoint File Upload Utility

Overview The SailPoint File Upload Utility provides a way for SailPoint customers to upload files to Identity Security Cloud automatically, for automatic account and entitlement aggregations. This is an executable Java-based JAR which can be executed with a set of options, or scheduled via CLI uti...

Best Practices for Provisioning with Passwords in Identity Security Cloud

As many customers use Identity Security Cloud for provisioning, they ask about best practices for managing passwords for accounts created by Identity Security Cloud. As a best practice, here are the options SailPoint recommends for handling passwords, with their advantages and tradeoffs:   Opt...

How do I know if I have Integration Service / IQService?

Determining if the IQService is Installed The way that you determine if you have the IQService installed is to examine the configuration of a source using any of the following connectors (documented here): Active Directory Azure Active Directory HCL Domino (IBM Lotus Domino) Microsoft Sh...

AM Identity - Identity Security Cloud Automation Tool(ISCAT)

ISCAT (ISC Automation Tool) is an automation and orchestration layer for SailPoint Identity Security Cloud that simplifies how organizations build, test, and operate ISC configurations. It transforms complex, manual API interactions into structured, repeatable automation scenarios, enabling faster i...

New Capability: Desktop Password Reset for macOS

Desktop Password Reset (DPR) is a comprehensive password management utility that enables organizations to establish effective password management policies and guidelines.

New Capability: DPR for Windows Multi-Chromium Engine Support — Update Without Reinstall

The Desk Password Reset (DPR) for Windows now supports multiple versions of chromium web browser engines (CEFs)!

Enhancement: Security Assertion Markup Language (SAML) Encryption for FedRAMP

SailPoint is excited to announce Identity Security Cloud now supports Security Assertion Markup Language (SAML) assertion encryption!

Enhancement - New User Invite Flow

As part of our efforts to deprecate non-public APIs, we are simplifying the new user invite and registration process. The original flow required user to enter a password, as well as additional information required for password reset before being able to enter the product.  We've heard from many cu...

Deprecation of Strong Authentication on Admin Step-Up

Deprecation Announcement   We wanted to let you know that we will be deprecating the following functionality Feb 5, 2024: Strong Authentication access to administrative functions For security reasons, elevated users like admins currently go through an experience called ‘Step-Up’ to val...

SAML Logout Plugin/Extension

SAML logout plugin enables organizations to allow end-users to logout from IdentityIQ when logged in via SAML. Administrators can configure the plugin by specifying an URL to be redirected to upon terminating the IIQ session ( ex: IDP global logout page). This is configured under the plugin configur...

Best practice: Using personal access tokens in IdentityNow

Overview As we describe in our IdentityNow REST API Authentication guide, if you are writing any sort of scripts or programs that leverage the IdentityNow APIs, which OAuth 2.0 grant from you should use typically depends on what you are doing, and which user context you need in order to operate un...