Simplifying Web Services configuration with the connectivity agent
Every identity program eventually hits the same wall: Governing the “long tail” of applications that don’t have an out-of-the-box connector.
The Web Services connector has long been the answer for these applications, but its flexibility comes at a cost. Configuring a Web Services source means translating API documentation into endpoints, pagination rules, schemas, aggregation settings, and correlation mappings. It requires fluency in both SailPoint and the target system’s API. For many identity teams, that combination is rare, and results in a growing backlog of ungoverned applications.
Today, SailPoint is introducing the connectivity agent, an AI-guided setup experience that helps administrators configure the Web Services connector without having to become an API expert.
The connectivity bottleneck
When a native connector does not exist, you usally have two options: engage Professional Services or configure a Web Services source yourself. Both paths are slow. PS engagements add cost and scheduling dependency. Self-service Web Services configuration demands days or weeks of reading documentation, testing endpoints, and troubleshooting schema mismatches. Faced with these time and resource constraints, identity teams are forced to make tough trade-offs between moving fast and being thorough.
Meanwhile, the long tail of applications without dedicated connectors stays ungoverned. Security gaps widen. Audit questions go unanswered. And the identity program that was supposed to protect the full enterprise protects only the fraction that was easy to connect.
Guided Setup: From API Docs to AI Recommendations
To break this bottleneck, we introduced the connectivity agent, which delivers a guided, wizard-based setup experience directly within the SailPoint application onboarding workflow.
Powered by AI agents, the wizard guides you through source configuration using conversational prompts and intelligent endpoint recommendations. Instead of manually mapping API documentation to SailPoint configuration fields, you tell the wizard which system they are connecting to — and the connectivity agent recommends how to configure it.
The experience is designed for straightforward SaaS applications with well-documented REST APIs for user and entitlement management, the systems that make up the bulk of the ungoverned long tail.
What the wizard configures
The connectivity agent wizard recommends and helps validate configuration for:
-
— confirm connectivity to the target application
-
— with preview, so you can verify account data before committing
-
— recommended paging for large data sets
-
— attribute mapping for accounts and entitlements
-
— identity-to-account mapping recommendations
Each recommendation can be validated directly in the UI. Administrators review the data returned by each endpoint before accepting — so confidence is built into every step, not assumed after the fact.
AI recommends. You decide.
We believe that AI in identity security should be assistive, not autonomous. The connectivity agent does the heavy lifting of drafting the configuration, but it will not apply changes behind your back.
You remain the expert in the loop so you can review, validate, and explicitly accept each suggestion. If a recommendation does not look right, it is not committed. Standard Setup — the existing manual configuration flow — remains available for teams that prefer full control or need to replicate an existing source configuration.
Before using the wizard, administrators also acknowledge an AI disclaimer and confirm their rights to any materials they provide — keeping the experience transparent and opt-in.
Part of a bigger onboarding story
The connectivity agent does not exist in isolation. It extends the SailPoint application onboarding experience that already helps you discover enterprise applications, receive connector recommendations, map identities to accounts, and delegate onboarding to subject matter experts through Assign and Review & Approve workflows.
Together, these capabilities address the full onboarding lifecycle: discover what you have, connect what matters, correlate identities to accounts, and govern access — at a pace that matches how fast your organization adopts new applications.
What comes next
The initial release focuses on source configuration — Aggregation, schema, pagination, and correlation along with Provisioning endpoint recommendations, including Get Object, Create Account, Account Update, and Add/Remove Entitlement.
Future enhancements on the roadmap include the ability to provide API documentation as input, resume wizard setup on existing sources, and refresh recommendations as target systems evolve.
The business impact
-
Detect compatible REST and SCIM Public APIs for any application
-
Compress Web Services configuration from a multi-day project into hours with an AI guided wizard
-
Bring hundreds of ungoverned applications under identity security faster
Getting started
The connectivity agent is available on Identity Security Cloud for Biz, Biz+, Agentic Biz, Agentic Biz+ customers.
To use it, create a new Web Services source and select the connectivity agent wizard setup path.
GA Date: 1st week of August for US customer. Other regions to follow soon (tentatively end of August, 2026)