Search

Best Practices: Attribute Sync

Overview In the complex world of Identity and Access Management (IAM), ensuring data consistency across distributed systems is a challenge. This is where attribute synchronization in Identity Security Cloud becomes an indispensable tool. Far more than a simple data replication mechanism, attribute...

Best Practices for Provisioning with Passwords in Identity Security Cloud

As many customers use Identity Security Cloud for provisioning, they ask about best practices for managing passwords for accounts created by Identity Security Cloud. As a best practice, here are the options SailPoint recommends for handling passwords, with their advantages and tradeoffs:   Opt...

How to delete a Lifecycle state from Identity Security Cloud

Identity Security Cloud Admins can create, enable, and disable Lifecycle States (LCS) from the ISC UI.   To delete an LCS, use the following steps: 1. Get the ID for the Identity Profile (either through the UI, or use GET List Identity Profiles API call) 2. Get the ID for the lifecycle state...

Enhancement: Removing Inactive (long-term) Identities from Overnight Internal Synchronization Job

Identities in the Inactive (long-term) lifecycle state are no longer included in the daily 1:00 AM CT synchronization job. This reduces overnight processing time, particularly for tenants with large numbers of terminated or archived identities.

Alation SCIM Integration

Customers can now integrate the Alation Agentic Data Intelligence Platform with SailPoint Identity Security Cloud using SailPoint’s SCIM 2.0 SaaS connector. This new integration enables automated user provisioning into Alation directly from SailPoint, streamlining identity governance for enterpris...

New Capability: Delete Accounts on Termination via Lifecycle Management

With this release, we’ve added the ability to automatically delete accounts through Lifecycle Management on supported downstream connectors. This highly requested capability (323+ votes in the Ideas Portal) eliminates the need for custom BeforeProvisioning rules. All lifecycle state changes and acco...

Enhancement: SAP GRC - Support for Firefighter Provisioning

We are excited to announce the SAP GRC Integration now supports Firefighter role provisioning! This new feature allows the SAP GRC connector to be leveraged for provisioning Firefighter IDs and roles directly from the SailPoint platform to SAP GRC on-premises.

New Capability: Workflow Triggers for Lifecycle State Changes

We’ve added new event triggers specifically for Identity Lifecycle State changes. These triggers are now available in both the Workflows and Event Triggers, giving admins more flexibility and precision when building automated processes tied to identity state transitions.

Deprecation: ARM Provisioning Services

We are announcing the deprecation of the ARM provisioning services for SAP applications that it currently connects to, effective immediately.

Deprecation: Identity States AI Mapping

With the introduction of Lifecycle Management of Inactive Identities in March 2024, SailPoint provided a more robust means for marking identities as Active, Inactive Short-Term, and Inactive Long-Term. By introducing this capability, administrators have an alternative option to the previously used A...

New Capability: Multi-Account Support!

Identity Security Cloud now supports account selection in the Access Request flow!

New Capability: SailPoint® Application Onboarding – Admin Assist Previews for Account Attribute Sync

Description The Account Attribute Sync calculate and preview feature now enables users to select identity and account attribute mappings with high match accuracy. This new capability calculates sync rate percentages and provides previews, helping admins choose the correct pairs for attribute synci...

New Capability: Data Segmentation!

SailPoint® is excited to announce the launch of Data Segmentation in Identity Security Cloud! Please Note: The Important Dates section has been updated with more specificity for when this feature will be available by region.

Enhancement: Time Based Refresh!

SailPoint® is excited to share that Time-Based Refresh is now available!

Enhancement: Exclude Inactive Identities from Attribute Sync!

SailPoint is excited to announce that Inactive (long-term) identities will be excluded from the attribute sync process! This enhancement is available in all sandbox tenants. It will begin rolling out to production tenants on October 7th, 2024.

Business Value Review [IIQ]

Page has been moved to the new Customer Success Knowledge Base here.

Certification Best Practices

Overview Certification is an important governance feature that allows organizations to meet important audit, risk, and compliance guidelines to ensure the risk to their organization is well managed. This is done by aggregating all accesses within an organization and presenting them to access rev...

How to edit the source create account profile via REST API

When provisioning a new account to a source, IdentityNow utilizes the configurations in the Account Create Profile on the source to determine the values of the new source account attributes.  Most source connectors enabled for provisioning have a default Account Create Profile. Some customizations t...