| Connectivity - SAP SuccessFactors |
The SuccessFactors connector now supports Metadata Framework locale picklists. The default value is en_US. Set the locale value used by the SuccessFactors tenant under Picklist Settings on the source, such as en_GB or fr_FR. |
| SaaS Connectors - AWS SaaS |
The AWS SaaS connector now supports agent discovery and aggregation of AWS Agent Registry. For more information, refer to Integrating SailPoint and Amazon Web Services SaaS. |
| Connectivity - Oracle HCM Cloud |
The Oracle HCM Cloud connector now supports Secure Shell (SSH) public-key authentication for Secure File Transfer Protocol (SFTP) file transport. |
| Connectivity - Microsoft Entra ID |
The Microsoft Entra ID connector now assigns and removes license service plans faster, especially for users with many licenses. Large license updates are also more reliable, with fewer timeouts and failed removals. If one license in a request can’t be updated, the connector still updates the others. |
| SaaS Connectors - Microsoft Entra SaaS |
The Microsoft Entra SaaS connector can now sign users out of all active sessions when their account is disabled. To turn this on, select Revoke Session after Disabling User Account under Feature Management. This option is selected by default on new sources and cleared on existing sources. For more information, refer to Revoke Session after Disabling User Account. |
| Connectivity - Microsoft Entra ID |
The Microsoft Entra ID connector can now sign users out of all active sessions when their account is disabled. To turn this on, select Revoke Session after Disabling User Account under Feature Management. This option is cleared by default and must be selected to revoke sessions. For more information, refer to Revoke Session after Disabling User Account. |
| Connectivity - Microsoft Entra ID |
The Microsoft Entra ID connector now supports owner information in string format. For more information, refer to Service Principal as Accounts Attributes. |
| Connectivity - BeyondTrust Password Safe OnPremise |
The BeyondTrust Password Safe (On-Premise) connector now supports BeyondInsight version 26.1.0.878. |
| SaaS Connectors - Microsoft Entra SaaS |
The Microsoft Entra SaaS connector now supports excluding inherited app role assignments during account aggregation. For more information, refer to Aggregation Settings. |
| SaaS Connectors - Oracle HCM Cloud SaaS |
The Oracle HCM Cloud SaaS connector now supports Secure Shell (SSH) public-key authentication for Secure File Transfer Protocol (SFTP) file transport. |
| Connectivity - SAP GRC |
The SAP GRC connector now supports aggregating and provisioning user attributes that contain the configured delimiter. Add alternateDelimiterUserSplit to the source configuration with an alternate delimiter that does not appear in your user attribute values. For more information, refer to Troubleshooting. |
| Connectivity - Zendesk SDIM |
The Zendesk Service Desk integration now supports OAuth 2.0 client credentials authentication. Use this option to migrate from Zendesk API token authentication before Zendesk deactivates API tokens on April 30, 2027. |
| Connectivity - Zendesk |
The Zendesk connector now supports OAuth 2.0 client credentials authentication. Use this option to migrate from Zendesk API token authentication before Zendesk deactivates API tokens on April 30, 2027. |
| Connectivity - Slack |
The Slack connector now supports aggregating and provisioning startDate. You can set the start date during account creation and update it later. For more information, refer to Account Attributes. |
| SaaS Connectors - Slack SaaS |
The Slack SaaS connector now supports aggregating and provisioning startDate. You can set the start date during account creation and update it later. For more information, refer to Account Attributes. |
| SaaS Connectors - Zendesk SaaS |
The Zendesk SaaS connector now supports OAuth 2.0 client credentials authentication. Use this option to migrate from Zendesk API token authentication before Zendesk deactivates API tokens on April 30, 2027. |
| SaaS Connectors - Zendesk SDIM SaaS |
The Zendesk Service Desk SaaS integration now supports OAuth 2.0 client credentials authentication. Use this option to migrate from Zendesk API token authentication before Zendesk deactivates API tokens on April 30, 2027. |
| SaaS Connectors - SAP SuccessFactors SaaS |
The SuccessFactors connector now supports Metadata Framework locale picklists. The default value is en_US. Set the locale value used by the SuccessFactors tenant under Picklist Settings on the source, such as en_GB or fr_FR. |
| SailPoint Human Fabric - Identity Graph |
The browser back and forward buttons can now be used to go back and forward through graph history. |
| Non-Employee Risk Management |
API tokens generated within SailPoint Human Fabric to authenticate Non-Employee Risk Management API requests can now be scoped to specific permissions. These tokens can only call APIs included in their scoped permissions. Existing API tokens that grant full access will continue to work. For more information, see Authorization. |