New Capability: Integration Service (IQService-August-2026) is now LIVE!

Announcements Product News
, , ,
1

SailPoint is excited to announce that IQService-August-2026 is now available in Identity Security Cloud.

This release delivers the changes previewed in our earlier advisory on privileged services. Building on the mandatory TLS update from May 2025, this release extends the same security model to additional privileged capabilities by requiring both explicit enablement and Transport Layer Security (TLS) for them to operate.

What’s Changing in this Release

Starting with IQService-August-2026, the following privileged services will only run when they are explicitly enabled and TLS is exclusively configured on the IQService instance:

  • ScriptExecutor – executes native before/after scripts

  • gMSAPasswordData – gMSA password retrieval

If TLS is not configured, or if a service is not explicitly enabled, it will not run. Day-to-day IQService behavior is otherwise unchanged.

To explicitly enable a privileged service, run:

IQService.exe -g --enable <Service Name>

Important!

If you are updating your IQService instance to use a TLS port, ensure that you disable the existing non-TLS port. This is crucial to maintain secure communication and prevent potential security vulnerabilities arising from the simultaneous use of both TLS and non-TLS ports. For more information, refer to Disabling Non-TLS Communication for an Existing IQService Instance

Action Required

If your environment uses any of the above privileged services, please complete the following before upgrading:

  1. Confirm TLS is configured on every IQService instance. If not, follow the TLS configuration guide and ensure each instance listens only on the TLS port remove any non-TLS ports.

  2. Explicitly enable each privileged service you use with the command above. Step-by-step configuration guidance is available in the IQService documentation.

  3. Enable the TLS option on all sources configured to use IQService.

Completing these steps before upgrade will ensure there are no service interruptions.

Rollout Timeline

To give administrators time to plan and apply changes on their own schedule, this release will roll out in phases:

  1. Manual download available – August 18, 2026

  2. Customer configuration window –60 days from the manual download release for customers to download, configure, and validate in their environments

  3. Auto-update push begins – October 19, 2026, via UpdateService

We recommend completing the prerequisites and validating in your environment before October 18, 2026 to ensure a smooth transition when auto-updates begin.

A Note on Our Ongoing Security Investment

Strengthening IQService security is an ongoing commitment, not a one-time change. As identity infrastructure remains a high-value target, we continue to harden IQService and its privileged capabilities to meet modern security standards.

Expect additional updates over upcoming releases — each previewed in advance, with clear guidance, a manual configuration window, and a phased rollout so you have time to plan.

Additional Resources

1 Like