# \#authorization

**URL:** https://developer.sailpoint.com/discuss/tag/authorization/709.md

[Latest](https://developer.sailpoint.com/discuss/latest.md) · [Categories](https://developer.sailpoint.com/discuss/categories.md) · [Tags](https://developer.sailpoint.com/discuss/tags.md)

---

## [Creating Service Accounts for SailPoint API Automations](https://developer.sailpoint.com/discuss/t/creating-service-accounts-for-sailpoint-api-automations/65749)

<div class="topic-metadata">

**Author:** [@christina\_gagnon](https://developer.sailpoint.com/discuss/u/christina_gagnon)\
**Replies:** 9\
**Last updated:** [July 22, 2026, 5:09pm UTC](https://developer.sailpoint.com/discuss/t/creating-service-accounts-for-sailpoint-api-automations/65749 "2026-07-22T17:09:41Z")

</div>

Description Service accounts are identities in Identity Security Cloud (ISC) that aren’t real people. Their purpose is to provide credentials for automation services that can be managed and controlled separately fr…

---

## [Authorization error when integrating ServiceNow Service Catalog with SailPoint ISC](https://developer.sailpoint.com/discuss/t/authorization-error-when-integrating-servicenow-service-catalog-with-sailpoint-isc/216352)

<div class="topic-metadata">

**Author:** [@ravikiran\_ch](https://developer.sailpoint.com/discuss/u/ravikiran_ch)\
**Replies:** 6\
**Last updated:** [July 14, 2026, 9:38am UTC](https://developer.sailpoint.com/discuss/t/authorization-error-when-integrating-servicenow-service-catalog-with-sailpoint-isc/216352 "2026-07-14T09:38:57Z")

</div>

I’m setting up the OAuth authorization flow between ServiceNow Service Catalog and SailPoint ISC, following the official documentation: User Account Configuration Steps completed: Created an API Client in ISC (Authori…

---

## [Temporary Admin Access in Identity Security Cloud using Roles, Forms, and Workflows](https://developer.sailpoint.com/discuss/t/temporary-admin-access-in-identity-security-cloud-using-roles-forms-and-workflows/33799)

<div class="topic-metadata">

**Author:** [@colin\_mckibben](https://developer.sailpoint.com/discuss/u/colin_mckibben)\
**Replies:** 21\
**Last updated:** [January 24, 2026, 4:30am UTC](https://developer.sailpoint.com/discuss/t/temporary-admin-access-in-identity-security-cloud-using-roles-forms-and-workflows/33799 "2026-01-24T04:30:31Z")

</div>

If you ever find yourself needing to temporarily grant elevated admin privileges in Identity Security Cloud (ISC), you may wonder how you can automate the process of granting and revoking these privileges to users…

---

## [Failed SAML Assertion (EntraID SSO)](https://developer.sailpoint.com/discuss/t/failed-saml-assertion-entraid-sso/161453)

<div class="topic-metadata">

**Author:** [@Shubhams\_009](https://developer.sailpoint.com/discuss/u/Shubhams_009)\
**Replies:** 16\
**Last updated:** [August 5, 2025, 8:37pm UTC](https://developer.sailpoint.com/discuss/t/failed-saml-assertion-entraid-sso/161453 "2025-08-05T20:37:39Z")

</div>

Hello All, I was trying to setup SSO for sandbox environment. However, after setup is complete I am getting SAML assertion failed error. I do see email as a claim in SAML response and seeing success SSO logs in Entra.…

---

## [NERM: dynamically send an approval during profile creation](https://developer.sailpoint.com/discuss/t/nerm-dynamically-send-an-approval-during-profile-creation/144396)

<div class="topic-metadata">

**Author:** [@GilbertoOledo14](https://developer.sailpoint.com/discuss/u/GilbertoOledo14)\
**Replies:** 6\
**Last updated:** [June 17, 2025, 2:40pm UTC](https://developer.sailpoint.com/discuss/t/nerm-dynamically-send-an-approval-during-profile-creation/144396 "2025-06-17T14:40:12Z")

</div>

Hello all! I share with you my use case in NERM: I have different user roles: Role of company A, Role of company B, etc. When I create profiles in NERM I select the company for which I am creating the profile, e.g. Co…

---

## [Authorization in Workflows and APIs](https://developer.sailpoint.com/discuss/t/authorization-in-workflows-and-apis/136284)

<div class="topic-metadata">

**Author:** [@shreyas\_nitturkar](https://developer.sailpoint.com/discuss/u/shreyas_nitturkar)\
**Replies:** 3\
**Last updated:** [May 21, 2025, 7:19am UTC](https://developer.sailpoint.com/discuss/t/authorization-in-workflows-and-apis/136284 "2025-05-21T07:19:58Z")

</div>

We have noticed that some workflow actions and APIs work only when there’s a PAT associated with the user e.g. Disable accounts API In these cases, the access token generated via OAuth Client credentials that are gene…

---

## [API Authentication and Authorization in ISC](https://developer.sailpoint.com/discuss/t/api-authentication-and-authorization-in-isc/73975)

<div class="topic-metadata">

**Author:** [@christina\_gagnon](https://developer.sailpoint.com/discuss/u/christina_gagnon)\
**Replies:** 1\
**Last updated:** [September 7, 2024, 12:34am UTC](https://developer.sailpoint.com/discuss/t/api-authentication-and-authorization-in-isc/73975 "2024-09-07T00:34:43Z")

</div>

Description Join our livestream on API Authentication and Authorization, where Developer Advocate Christina Gagnon will address your key questions about Identity Security Cloud. Learn how authentication and authorizat…

---

## [No indicator for disabled personal access tokens](https://developer.sailpoint.com/discuss/t/no-indicator-for-disabled-personal-access-tokens/75530)

<div class="topic-metadata">

**Author:** [@angelo\_mekenkamp](https://developer.sailpoint.com/discuss/u/angelo_mekenkamp)\
**Replies:** 6\
**Last updated:** [August 6, 2024, 6:32pm UTC](https://developer.sailpoint.com/discuss/t/no-indicator-for-disabled-personal-access-tokens/75530 "2024-08-06T18:32:42Z")

</div>

Hi all, What problem are you observing? An identity created several personal access tokens for themselves. We disabled the identity in ISC and then we enabled the identity in ISC again. The identity logs in through the …

---

## [Temporary Admin Access with Roles in Identity Security Cloud](https://developer.sailpoint.com/discuss/t/temporary-admin-access-with-roles-in-identity-security-cloud/33935)

<div class="topic-metadata">

**Author:** [@atarodia](https://developer.sailpoint.com/discuss/u/atarodia)\
**Replies:** 12\
**Last updated:** [July 19, 2024, 6:28pm UTC](https://developer.sailpoint.com/discuss/t/temporary-admin-access-with-roles-in-identity-security-cloud/33935 "2024-07-19T18:28:36Z")

</div>

This method of temporary admin access does not work as described. While the entitlements for user levels are available, they do not actually grant the user level permissions. Please see Temporary Admin Access in Id…

---

## [The documented scope for /beta/sources/:id/load-accounts doesn't work](https://developer.sailpoint.com/discuss/t/the-documented-scope-for-beta-sources-id-load-accounts-doesnt-work/59151)

<div class="topic-metadata">

**Author:** [@RRLatFlinders](https://developer.sailpoint.com/discuss/u/RRLatFlinders)\
**Replies:** 4\
**Last updated:** [June 3, 2024, 7:59am UTC](https://developer.sailpoint.com/discuss/t/the-documented-scope-for-beta-sources-id-load-accounts-doesnt-work/59151 "2024-06-03T07:59:31Z")

</div>

I’ve done some testing of the beta /load-accounts API with a configuration where I have a personal access token attached to an account with the SOURCE\_SUBADMIN and a Governance group that limits the accounts access to th…

---

## [Clarification Needed on Authorization Type in Source, Domain, and Forest Settings](https://developer.sailpoint.com/discuss/t/clarification-needed-on-authorization-type-in-source-domain-and-forest-settings/51536)

<div class="topic-metadata">

**Author:** [@Sail\_addict](https://developer.sailpoint.com/discuss/u/Sail_addict)\
**Replies:** 0\
**Last updated:** [April 18, 2024, 1:49pm UTC](https://developer.sailpoint.com/discuss/t/clarification-needed-on-authorization-type-in-source-domain-and-forest-settings/51536 "2024-04-18T13:49:41Z")

</div>

I’m currently configuring a new implementation and am a bit puzzled by the “Authorization Type” option available in the Source settings, Domain settings, and Forest settings. I’ve noticed that this option is critical for…

---

## [loginFailure audit events for plugin rest endpoints using OAuth](https://developer.sailpoint.com/discuss/t/loginfailure-audit-events-for-plugin-rest-endpoints-using-oauth/38807)

<div class="topic-metadata">

**Author:** [@ScottP](https://developer.sailpoint.com/discuss/u/ScottP)\
**Replies:** 2\
**Last updated:** [April 11, 2024, 4:24pm UTC](https://developer.sailpoint.com/discuss/t/loginfailure-audit-events-for-plugin-rest-endpoints-using-oauth/38807 "2024-04-11T16:24:16Z")

</div>

Which IIQ version are you inquiring about? Version 8.3 Please share any other relevant files that may be required (for example, logs). oauth.log (3.14 KB) Share all details related to your problem, including any error …
