System User Roles are removed on Initial user login to NERM What have you tried? We have created an Identity in ISC and created a System user (NeprofileUser) in Non-Employee Risk Management (NERM) using an API. We have provided the Role to the system user in the group_strings parameter and also…

Here’s what I did: If your “Use Identity Security Cloud Entitlements for Roles” toggle is already On, at the time of adding the NERM Users source. Then you need to toggle that off, then re-toggle that on. You need to specify the PROVISIONING feature flag on the source. (fine prints) By default,…

Then you just need to create the neprofileuser entry (lifecycle user), and specify that Role → Directory Group (User Level) mapping. On ISC side, create customer User Levels. (Provisioning the User Levels via ISC loopback). The neprofileuser should get the roles on the fly as they ‘sso’ into NERM…

Hi, Can you please elaborate on the approach → ISC Role → NERM Connector → Lifecycle Role? Here are you referring NERM Connector as custom web services connector to auto provision the lifecycle role? Thanks, Pallavi

First link / reply: [image] [image] New Capability: Non-Employee Risk Management User Connector for Identity Security Cloud Product News Description bangbang The SailPoint Non-Employee Risk Management team is pleased to announce the release of a new Non-Empl…

This connector does not support auto provisioning of the NERM roles, it just creates manual fulfilment tasks for the role assignments. Thanks, Pallavi

[image] It writes back to NERM. You need to have the ISC integration enabled on NERM side. This screen: [image]

[image] NERM Role Provisioning Behavior in Sailpoint ISC ISC Discussion and Questions Hello All, I am new to SailPoint ISC and NERM and trying to learn things. I understand that SailPoint provided OOTB source - SailPoint Non-Employee Risk Management Users to a…

I don’t believe that response / thread is correct (AI slop?): [image] Specifically, look at the “What Happens When Enabled” section. Maybe open a ticket with SP, as that issue should have been resolved in the later-than-planned connector rollout.

Also, notice there are TWO NERM connectors…you want the bottom one…that’s the NEW feature: [image] (The top one is aggregation only).

#1 for profiles and #2: This is for internal users (system users)

Correct. And so, in the OP, it was already mentioned that you’re attempting to handle this for NeprofileUser (Lifecycle Users)…so that is a capability from the 2nd connector.

Non-Employee Risk Management - System User Roles are removed on Initial user login

SailPoint Human Fabric (SHF) SHF Discussion and Questions

pallavi (Pallavi Chaudhari) April 28, 2026, 7:40pm 11

Topic		Replies	Views
New Capability: Non-Employee Risk Management User Connector for Identity Security Cloud Product News identity-security-cloud , connectors , nerm , new-capability	12	1272	June 9, 2026
NERM Role Provisioning Behavior in Sailpoint ISC SHF Discussion and Questions identity-security-cloud	3	193	April 28, 2026
Enhancement: Non-Employee Risk Management Users Connector - Automatic Synchronization Product News identity-security-cloud , connectors , nerm , new-enhancement	0	312	July 14, 2026
User Import in NERM SHF Discussion and Questions apis , aggregation , identity-security-cloud , provisioning , nerm	34	1916	May 24, 2024
Announcement: New Setting for Managing NERM User Access via Identity Security Cloud Product News nerm , new-capability , non-employees	1	438	March 25, 2026

Non-Employee Risk Management - System User Roles are removed on Initial user login

Related topics