Release notes cover new features, enhancements, and fixes that have been released to production. You can also subscribe to ensure you never miss a release.
Identity Security Cloud is SailPoint’s next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.
New features
| Product | What’s new |
|---|---|
| Connectivity - Snowflake | Your VA-based Snowflake source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source. |
| Identity Security Cloud - Harbor Pilot |
You can now use Harbor Pilot to request access for someone else using natural language queries. Harbor Pilot helps identify the right requestee, suggests available requestable objects, and confirms request details before submission to streamline onboarding and role-change processes. Refer to Creating and Managing Access Requests for more information. |
Enhancements
| Product | Feature enhancements |
|---|---|
| Connectivity - EPIC | Introduced a new configuration option (viewUserConcurrency) that allows customers to control the number of concurrent ViewUser API calls made by Epic connector(s) during entitlement aggregation. This enhancement helps reduce aggregation time and mitigates timeout issues reported by customers. |
| Connectivity - Box | The SailPoint Box connector is now enhanced to support Client Credentials Authentication. |
| Identity Security Cloud - Identity Graph |
When a filter is removed, it is now removed from both the Filters panel and the identity graph. |
| SailPoint Cloud Infrastructure Entitlement Management (CIEM) | SailPoint CIEM can now collect Amazon Bedrock and Amazon Bedrock AgentCore data and display the effective access and access paths for human identities to those agents, including who has read, write, and admin privileges to those resources. You might need to update existing policies with the Bedrock permissions. Refer to Collecting Amazon Bedrock Data for more information. |
Fixes
| Product | Issue ID | Fixes |
|---|---|---|
| SaaS Connectors - Web Services SaaS | CONSEALINK-8948 | The SailPoint Webservices SaaS connector now improves handling of HTTP 429 and 503 errors when calling managed APIs by using a configurable delay from the source, followed by Retry-After header when applicable, with a 30-second fallback. |
| SaaS Connectors - Microsoft Entra SaaS |
CONHOWRAH-6816 | The socket timeout for the Microsoft Entra ID SaaS connector is now configurable, with a default value of 180 seconds. This prevents failures caused by HTTP request timeout errors. |
| Connectivity - JDBC |
CONETN-5383 | The SailPoint JDBC connector now supports configurable single account aggregation after provisioning. |
| Connectivity - Microsoft Entra ID | CONHOWRAH-6857 | To prevent timeout errors during account creation when Privileged Identity Management (PIM) is enabled, the Microsoft Entra ID connector now includes a skipPIMMembershipOnCreateAccount parameter. For more information, refer to Troubleshooting . |
| SaaS Connectors - GitHub SaaS |
CONSEALINK-9501 | Resolved an issue in GitHub SaaS account aggregation where the process could fail with a TypeError when attempting to read properties ( node, collaborators ) from a null value. |
| Identity Security Cloud -Provisioning and Task Manager | ISCRP-6014 | Fixed an issue where, when a cloud lifecycle state change failed, the value for the lifecycle state displayed as null in audit events before changing to the correct value. Null values are no longer recorded in these cases. |