System User Roles are removed on Initial user login to NERM What have you tried? We have created an Identity in ISC and created a System user (NeprofileUser) in Non-Employee Risk Management (NERM) using an API. We have provided the Role to the system user in the group_strings parameter and also…

Here’s what I did: If your “Use Identity Security Cloud Entitlements for Roles” toggle is already On, at the time of adding the NERM Users source. Then you need to toggle that off, then re-toggle that on. You need to specify the PROVISIONING feature flag on the source. (fine prints) By default,…

To add more context, the user initial login to ISC is by using username and password and then he proceeds to NERM. (The NERM system user is already created using an API and his sailpoint identity id is populated already)

Yes, that’s understood. I mean, does the approach / model from the document not address your need? Why deviate? And here: Managing Administrators - SailPoint Non-Employee Risk Management Admin Help SailPoint Non-Employee Risk Management Admin Help Are you…

No the issue we cant say is only with username/password, but what we are trying to achieve is to create the system users using the NERM APIs along with roles like Sponsors and on the initial login for the user, any roles provided during creation must be present on the user.

Then you just need to create the neprofileuser entry (lifecycle user), and specify that Role → Directory Group (User Level) mapping. On ISC side, create customer User Levels. (Provisioning the User Levels via ISC loopback). The neprofileuser should get the roles on the fly as they ‘sso’ into NERM…

Hi, Can you please elaborate on the approach → ISC Role → NERM Connector → Lifecycle Role? Here are you referring NERM Connector as custom web services connector to auto provision the lifecycle role? Thanks, Pallavi

First link / reply: [image] [image] New Capability: Non-Employee Risk Management User Connector for Identity Security Cloud Product News Description bangbang The SailPoint Non-Employee Risk Management team is pleased to announce the release of a new Non-Empl…

This connector does not support auto provisioning of the NERM roles, it just creates manual fulfilment tasks for the role assignments. Thanks, Pallavi

[image] It writes back to NERM. You need to have the ISC integration enabled on NERM side. This screen: [image]

[image] NERM Role Provisioning Behavior in Sailpoint ISC ISC Discussion and Questions Hello All, I am new to SailPoint ISC and NERM and trying to learn things. I understand that SailPoint provided OOTB source - SailPoint Non-Employee Risk Management Users to a…

I don’t believe that response / thread is correct (AI slop?): [image] Specifically, look at the “What Happens When Enabled” section. Maybe open a ticket with SP, as that issue should have been resolved in the later-than-planned connector rollout.

Non-Employee Risk Management - System User Roles are removed on Initial user login

Identity Security Cloud (ISC) ISC Discussion and Questions

David_Norris (Terry Yau) April 28, 2026, 7:20pm 8

First link / reply:

Topic		Replies	Views
New Capability: Non-Employee Risk Management User Connector for Identity Security Cloud Product News identity-security-cloud , connectors , nerm , new-capability	12	943	June 9, 2026
NERM Role Provisioning Behavior in Sailpoint ISC ISC Discussion and Questions identity-security-cloud	3	57	April 28, 2026
User Import in NERM ISC Discussion and Questions apis , aggregation , identity-security-cloud , provisioning , nerm	34	1493	May 24, 2024
Announcement: New Setting for Managing NERM User Access via Identity Security Cloud Product News nerm , new-capability , non-employees	1	392	March 25, 2026
NERM authentication: IdentityNow tenant requirement + SAML 2.0 PingOne IdP with group-to-role mapping ISC Discussion and Questions identity-security-cloud , nerm	3	76	January 28, 2026

Non-Employee Risk Management - System User Roles are removed on Initial user login

Related topics