SailPoint — The Cyber Toolchain

SailPoint New Capability: SailPoint Oracle Access Governance SaaS Connector (2026-10-12)

Mon, 12 Oct 2026 15:50:17 GMT

New Oracle Access Governance SaaS connector brings OAG identities, roles, and access bundles into SailPoint Identity Security governance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the Oracle Access Governance (OAG) SaaS connector for SailPoint Identity Security, enabling centralized visibility, lifecycle management, access requests, and governance over OAG-managed identities and Oracle applications.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Aggregates OAG identities as accounts and OAG roles and access bundles as entitlements, including application-level and included-permission context. • Supports access requests, grants, and revocations through the SailPoint Identity Security request center, with the connector forwarding approved requests to OAG for fulfillment — including clear provisioning results when an OAG guardrail or segregation-of-duties check prevents a request. • Supports lifecycle operations — activating, terminating, enabling, disabling, and deleting OAG identities and their downstream Oracle accounts — with per-application lifecycle controls to target a specific Oracle application without affecting others. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: SAP Concur Connector Updated to Support Spend API V4.1 (2026-10-12)

Mon, 12 Oct 2026 15:30:51 GMT

SAP Concur connector updated to support Spend API V4.1 via new `useSpendApiV41` config flag for controlled migration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `useSpendApiV41` application XML entry to the SAP Concur connector config, enabling administrators to opt existing sources into Spend API V4.1 on their own schedule.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Updates the SAP Concur SaaS & VA connector to use Spend API V4.1 for Spend User retrieval, replacing the deprecated Spend API V4; sources created on or after June 1, 2026 use V4.1 by default. • Changes `customData` response format from label-based field names (V4) to strict camel-case technical field names (V4.1), requiring review and update of existing `jsonPathMapping` entries that reference `customData`. Breaking changes: • Existing `jsonPathMapping` entries that reference `customData` labels will break under Spend API V4.1: V4.1 returns strict camel-case technical field names instead of the human-readable labels returned by V4. Mappings must be reviewed and updated before enabling `useSpendApiV41` or before June 1, 2026 for sources created after that date. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Custom User Level - Read Only Sources (2026-10-12)

Mon, 12 Oct 2026 14:34:23 GMT

SailPoint Identity Security Cloud extends Custom User Levels to grant Read Only access to Sources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Extends Custom User Levels to support Read Only permissions on Sources, letting admins grant scoped source visibility to operators, support, and audit users without full access.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: ServiceNow Service Catalog v5.4 — Event-driven Approvals and Access Request Status Sync (2026-10-09)

Fri, 09 Oct 2026 19:27:35 GMT

ServiceNow Service Catalog v5.4 replaces polling with ISC event triggers for real-time approval and access request status sync.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds five ISC event trigger subscriptions via `https://{instance_name}.service-now.com/api/x_sap_intidn/isc_event_processor` to push real-time state changes from Identity Security Cloud to ServiceNow, replacing timer-based polling.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an `ISC Backup Utility` scheduled job to reconcile missed events during connectivity or event-delivery failures. • Adds an `ISC Event Processing Table Cleaner` job to purge old event records, with a default retention period of 7 days configurable via the Data Management Policy. • Adds quoted phrase search in the `ISC Access Object Search` widget: wrapping multi-word terms in double quotes in the Name, Description, or Additional Search fields matches a contiguous phrase (unquoted searches behave as in v5.3). Breaking changes: • Configuring ISC event triggers is mandatory from v5.4 — existing timer-based polling is replaced and will not function; customers must create a ServiceNow integration user (roles `rest_service`, `x_sap_initidn.user`, `itil`; identity type Machine, web services access only), subscribe to the five required event triggers, validate each subscription, verify the Identity Security Cloud Links table includes v5.4 endpoints, and activate the Data Management Policy and table cleaner rule before the integration will operate. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Collaboration Portal SSO - Flexible Identity Provider Matching (2026-10-09)

Fri, 09 Oct 2026 16:16:26 GMT

SailPoint Non-Employee Risk Management adds a Login Lookup Mode setting for collaboration portal SSO, enabling SAML assertion attribute matching.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Login Lookup Mode` setting on the collaboration portal SSO tab, letting administrators choose between `NameID` (default) and `Assertion attribute` matching to resolve SSO identity mapping failures when an IdP transforms or hashes the user identifier.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports assertion-attribute matching (for example, email) for both pre-provisioned (non-JIT) and JIT user flows, configurable through the admin UI and API. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Disconnected applications connector - limited availability (2026-10-09)

Fri, 09 Oct 2026 16:03:31 GMT

SailPoint adds a disconnected applications connector that automates provisioning and aggregation for web apps with no APIs via browser-extension recording.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the SailPoint connectivity browser extension to record administrator UI workflows once and replay them for automated provisioning, deprovisioning, and aggregation against web apps that expose no API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces the disconnected applications connector as a new source type in Identity Security Cloud, bringing legacy web apps, custom internal tools, and API-less systems under centralized SailPoint governance. • Enables zero-code connectivity by letting administrators map recorded UI inputs to SailPoint identity attributes (such as name or email) without writing custom scripts. • Surfaces accounts and entitlements from disconnected applications in SailPoint's existing search, certifications, reporting, and reconciliation workflows alongside connected sources. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: SailPoint ARM brings Fiori Application IDs and utilization into SAP access risk (2026-10-09)

Fri, 09 Oct 2026 15:29:07 GMT

SailPoint ARM adds SAP Fiori app tracking — Fiori IDs, usage, and risk rules now sit alongside transactions in reviews and reports.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables `Include Fiori Metadata` on the SAP connection in the ARM agent (on by default for new connections) to activate Fiori app tracking via the `ZARM_FIORI_META` dictionary and `ZARM_UTIL_DATA` Launchpad plugin.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports Fiori intents with the `[FAPP]` prefix and OData services with the `[SVC]` prefix in rulebook risk definitions, alongside existing transaction codes. • Adds a new Fiori report listing which roles and catalogs grant which Fiori apps and OData services, with or without usage, filterable by Fiori Application ID as a dedicated field. • Surfaces Fiori intents and OData services in the emergency access activity grid, each row showing a readable description (e.g. `(F2223) Reset Cleared Items`), a sensitivity flag, and a Standard or Elevated access marker. • Includes Fiori intents and execution counts in User to Role periodic access reviews, showing what access a role grants and whether it was actually used. • Adds Fiori app usage to role-level utilization reports so reviewers can see what a user would lose before a role is removed. • Lets administrators choose whether to continue collecting raw OData service calls from the SAP Security Audit Log independently of app-level Fiori usage. • Adds a new out-of-the-box (OOTB) connector to manage Access Risk Management users' JML (Joiner-Mover-Leaver) access through ISC. • Allows ARM admins to edit a user's email address directly in the product, without contacting support. • Delivers a side and top navigation overhaul for customers not on legacy reporting. Breaking changes: • Existing rulebook entries for Fiori that lack a prefix must be updated: Fiori intents now require the `[FAPP]` prefix and OData services require the `[SVC]` prefix before the next rulebook import, or they will not match correctly. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Data Access Security - Google BigQuery Connector (2026-10-05)

Mon, 05 Oct 2026 20:26:50 GMT

SailPoint Data Access Security adds a Google BigQuery connector for warehouse inventory, effective-access visibility, and GCP classification tag ingestion.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a Google BigQuery connector to Data Access Security, enabling crawl and inventory of BigQuery datasets, tables, views, and routines.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Collects effective permissions for BigQuery resources, explaining access in enterprise identity terms across users, groups, and service accounts. • Ingests classification tags already applied in Google Cloud onto the corresponding DAS assets, reusing existing GCP data classifications without re-classifying with the DAS engine. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Data Access Security - Atlassian Confluence Connector (2026-10-05)

Mon, 05 Oct 2026 20:25:09 GMT

SailPoint Data Access Security adds an Atlassian Confluence Cloud connector for identity-first visibility and content classification.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a Confluence Cloud connector to Data Access Security, enabling inventory of Confluence spaces, pages, and attachments with effective-permission mapping expressed in enterprise identity terms.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports data classification of unstructured Confluence content using the existing DAS classification approach, extending the same governance model already applied to other data sources. • Surfaces unresolved-principal markers when a Confluence principal cannot be matched to a known identity, making permission gaps explicit. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: HashiCorp Vault (On-Premise) Connector for NHI Discovery (2026-10-05)

Mon, 05 Oct 2026 16:13:48 GMT

SailPoint adds a HashiCorp Vault (On-Premise) connector to discover Vault token and userpass NHIs in Identity Security Cloud.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new HashiCorp Vault (On-Premise) ISC Source connector that discovers and aggregates Vault token metadata (issue/expiration time, policies, token type) and userpass account metadata (username, policies, token TTL/period settings) as non-human identities — without reading secret payloads.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Connects to on-premises HashiCorp Vault Community edition through the Virtual Appliance using the Vault host URL and an API token, keeping the existing HashiCorp Vault Credential Provider unchanged. • Surfaces NHI metadata as `Dataset` resources in Identity Security Cloud: Vault tokens modeled as credentials, and Vault userpass accounts modeled as machine accounts. • Supports both Express and standard source setup, with a `Test Connection` step to validate connectivity before aggregation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Delimited File Connector - Securely Connect to AWS S3 Using IAM Role Authentication Instead of Long-Lived Access Keys (2026-10-05)

Mon, 05 Oct 2026 16:12:41 GMT

SailPoint Delimited File Connector gains IAM role-based authentication for AWS S3, eliminating long-lived access keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Authentication Type` dropdown (values: `IAM User` or `IAM Role`) to the Delimited File Connector when `File Transport = AWS S3`, letting practitioners choose IAM role auth instead of static access keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports `Role Name` (name or path such as `sailpoint/S3ReaderRole`), `Account ID`, `External ID`, `Role Session Name`, and `Role Session Duration` (default `3600` seconds) as new IAM Role configuration fields in source configuration. • Enables cross-account S3 bucket access by populating the optional 12-digit `Account ID` field when the target role lives in a different AWS account than the Virtual Appliance. • Stores `External ID` as an encrypted secret in Identity Security Cloud source configuration when the target role's trust policy includes an `sts:ExternalId` condition. • Credentials refresh automatically throughout long aggregation runs, so a session is never limited to a single role-assumption window. • Extends `Test Connection` to validate IAM role access against the configured bucket/path and return specific success or failure messages for trust-policy, permission, and missing instance-profile errors. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Delimited File Connector - SMB File Transport with Kerberos Authentication (2026-10-05)

Mon, 05 Oct 2026 16:11:18 GMT

SailPoint Delimited File Connector adds SMB2/SMB3 file transport with Kerberos auth, eliminating SFTP/S3 staging for Windows shares.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `SMB` as a `File Transport` option on the VA-based Delimited File Connector, enabling direct aggregation from Windows File Server and Samba shares over SMB2/SMB3 without staging files to SFTP or S3.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports Kerberos authentication for SMB transport, configured via `Host` (FQDN), `Port` (default `445`), `Share Name`, `Kerberos Realm`, `Username`, `Password`, and optional `Kerberos Configuration Directory` (folder on the VA containing `krb5.conf`) fields in source configuration. • Returns explicit success or failure messages for authentication, path, permission, and network errors when using `Test Connection` to validate Kerberos login, share access, and file read before scheduling aggregation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Manual Task Support for Governance Groups (2026-09-25)

Fri, 25 Sep 2026 13:00:40 GMT

SailPoint ISC now routes manual provisioning tasks to Governance Groups, letting any member complete work with full audit attribution.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables assigning a Governance Group to a source so that manual provisioning tasks are routed to all group members instead of a single owner, with ISC recording which individual member completed each task.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Extends existing task notifications — Pending Manual Changes, Pending Task Daily Digest, and Task Reassignment — to reach all members of an assigned Governance Group. • Displays group-assigned manual tasks as a single row listing all assigned members in the admin task view. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Purview, Cyera & BigID Data Classification Labels Integration in Data Access Security (2026-09-24)

Thu, 24 Sep 2026 22:40:30 GMT

SailPoint Data Access Security gains native integration with Microsoft Purview, Cyera, and BigID to import data classification labels via a new wizard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a Classification Label Import wizard in Data Access Security to onboard Microsoft Purview, Cyera, or BigID as data classification sources, or upload a CSV, eliminating duplicate classification runs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports scheduled imports so classification labels stay current without manual re-runs, configurable per application in Data Access Security. • Enables each Data Access Security application to run either the native classification engine or import results from a third-party DSPM vendor (Purview, Cyera, BigID). • Exposes classification import configuration under `Compliance → Data Classification → Classification Import` in the SailPoint ISC console. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: SaaS Connector Log Download (2026-09-24)

Thu, 24 Sep 2026 22:18:39 GMT

SailPoint ISC admins can now download SaaS connector log snapshots directly from the UI without CLI access or a support case.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a log download section in the SaaS connector UI at `Admin → Sources → Source Details → Advanced → Logging`, letting administrators download connector-scoped log snapshots covering ~24 hours of history.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Debug log level changes are reflected in downloaded snapshots, so admins can enable debug mode and re-download to capture more detail during an incident. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Workflow Versioning — History tab (2026-09-24)

Thu, 24 Sep 2026 22:08:28 GMT

SailPoint: Enables opening any history row to view event details such as `Workflow Update`, `Version Created`, or `Version Forked`. • Enables following a version-oriented event to compare two workflow versions side-by-side, including across forks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint IdentityIQ 9.0 and Jakarta EE: a modern application-server foundation for self-hosted IGA (2026-09-24)

Thu, 24 Sep 2026 14:28:28 GMT

IdentityIQ 9.0 migrates to Jakarta EE 10, enabling support for Tomcat 10.1/11.0, JBoss EAP, and WebSphere Liberty LTS runtimes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports Jakarta EE 10 as the new application-server foundation, enabling IdentityIQ to run on current LTS runtimes: Apache Tomcat 10.1.40, Tomcat 11.0.6, JBoss EAP, and WebSphere Liberty.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces the IdentityIQ 9.0 Upgrade Pre-Check Utility, which inventories Java EE customizations and generates proposed Jakarta EE updates for team review and testing. • Delivers a single forward IdentityIQ release line, consolidating all future capabilities — including Metadata Campaigns, time-based access controls, and modernized application definitions — onto the Jakarta EE 10 stack. Breaking changes: • Apache Tomcat 9.0.x features APR/native connectors and Tomcat Native 1.3.x will not be included in the upcoming Tomcat 9.1.x stream; installations relying on these must audit their configuration before moving to 9.1.x. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Availability: The SailPoint Identity Graph is Coming to Business+ Tenants (2026-09-23)

Wed, 23 Sep 2026 19:59:28 GMT

SailPoint: Enables unified visibility across all identity types — humans, non-humans, and agents — in a single interactive graph view. • Visualizes agent-human relationships and flags overpermissioned identities by comparing access side-by-side. • Extends Identity Graph (previously available as Observability & Insights) to all Business+ customers at no additional charge, with no licensing, configuration, or implementation required. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Availability: The SailPoint Identity Graph is Coming to Your Environment (2026-09-23)

Wed, 23 Sep 2026 19:59:28 GMT

SailPoint Identity Graph rolls out to all Business+ customers, enabling interactive visualization of identity relationships and blast radius analysis.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Accesses Identity Graph directly from the MySailPoint homepage and from context menus across the product by clicking the graph icon on any identity, entitlement, or access item.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Visualizes the full identity estate — humans, non-human identities, and agents — in a single interactive graph to surface overpermissioned identities and complex access pathways. • Identifies the blast radius of a compromised identity immediately, leveraging context across SailPoint's portfolio. • Enables direct remediation actions from within Identity Graph to reduce risk without leaving the visualization. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Workflow Versioning — History tab (2026-09-23)

Wed, 23 Sep 2026 19:58:04 GMT

NERM Classic workflows gain a History tab for paginated, searchable version and change event review.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a History tab to NERM Classic workflow configuration, showing a paginated newest-first table of version-lifecycle and step/configuration-change events — including when, who, event type, step label, and version identifier — without requiring Admin Activity or the audit API.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports search by step labels, step IDs, and version IDs within the History tab, with quick filters to narrow the event list. • Enables version comparison from within the History tab, letting admins follow changes that spawned a version and open a diff, including after a fork. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint GA Announcement: Next Generation Certifications (2026-09-22)

Tue, 22 Sep 2026 19:51:03 GMT

SailPoint Next Generation Certifications reaches GA, bringing multi-million-item campaign scale, a new reviewer UI, and a 'Generate and Start' option.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces a new certification engine that scales campaign generation to multi-million items, reducing large campaign generation time from days to minutes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a 'Generate and Start' option so small campaigns kick off immediately after generation without requiring a manual start step. • Adds 'Generate and Start' availability for campaigns launched from workflows, replacing the legacy manual-start pattern for targeted certifications. • Migrates campaign templates, campaign notification templates, and scheduled campaigns automatically as part of the engine cutover — no manual recreation required. • Introduces a new certification email template set alongside the existing templates (labeled 'Legacy' in the UI), enabling side-by-side comparison during migration. • Adds 'Enriched Campaign Filters' (in-progress feature) to replace the unsupported combination of search queries and campaign filters on a single campaign. • In-flight certifications pick up the improved reviewer UI automatically after tenant cutover, with no reviewer action required. • Administrators can access campaigns generated before cutover under 'Legacy Campaigns' in the left navigation. • Certification report data retrieval endpoint is changing — migration guidance published at the 'Certification Reports Endpoint Moving' resource. • FedRAMP environments are excluded from this GA rollout; availability details to follow. Breaking changes: • The endpoint for extracting certification report data (CSV and PDF) via the `/campaign/` and `/certification/` reporting flow is changing; existing API integrations that pull report data must be updated per the 'Certification Reports Endpoint Moving' migration guidance. • A small number of template attributes are no longer supported in the new certification email template set; customized notification templates using those attributes must be updated after migration (see 'Deprecated Variables in Certs Email Templates'). • Very high-volume offset-paginated calls to `/campaign/` and `/certification/` endpoints may time out on tenants with approximately 4,000 or more records — affected tenants are held from rollout until a fix ships. • Campaigns configured with both a search query and campaign filters on the same campaign will not run on the new engine; these must be migrated to use campaign filters only (via Enriched Campaign Filters) before cutover. • Email notification templates larger than 133 KB will have images trimmed automatically during migration to fit the new v2 templating engine size limit. • Role Composition campaigns are excluded from the new engine at GA and continue to run on the legacy engine until a later migration date. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint File Access Manager 8.5 Service Pack 2 Released! (2026-09-09)

Wed, 09 Sep 2026 22:46:53 GMT

File Access Manager 8.5 SP2 adds mTLS for NetApp ONTAP, Kerberos for Exchange Server, and OAuth SMTP authentication.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds mutual TLS (mTLS) authentication support for NetApp ONTAP connectivity, covering both client-side and server-side authentication.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Kerberos authentication support for Microsoft Exchange Server integrations. • Adds OAuth-based SMTP authentication for outbound email communications, replacing Basic Authentication for Exchange Online compatibility. • Upgrades the core application framework to .NET 10. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Dark Mode Updates (2026-09-09)

Wed, 09 Sep 2026 21:13:45 GMT

SailPoint Identity Security Cloud adds Dark Mode across the platform, including Agentic Fabric, DAS, and custom branding support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables Dark Mode across Identity Security Cloud, including SailPoint Agentic Fabric and most ISC modules.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports custom brand colors in Dark Mode, automatically switching between Light and Dark modes based on existing brand configuration. • Adds color pickers for branding configuration. • Extends Dark Mode configured in ISC automatically to Data Access Security (DAS) with no additional configuration required. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: A Guided Builder for Workflow Trigger Filters (2026-09-09)

Wed, 09 Sep 2026 17:46:05 GMT

SailPoint Workflows adds a guided Basic mode filter builder with AND/OR logic, no JSONPath required.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a Basic mode guided condition builder for workflow trigger filters, using AND/OR logic derived from the trigger schema, as an alternative to writing JSONPath expressions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Retains Advanced mode for full JSONPath authoring, including array expressions such as `$.changes[?(@.attribute == 'department')]`, alongside the new Basic mode. • View, Edit, Download, and List operations now present trigger filters in the new trigger filter format after this update is enabled. Breaking changes: • During the Staging-to-Production rollout gap, uploading a workflow JSON that uses the other environment's trigger filter format will fail. Remove the trigger filter from the definition first, then upload the file and re-add the filter in the UI of the target environment. This applies to both JSON and API updates. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Next-Gen Access Request (2026-09-08)

Tue, 08 Sep 2026 19:49:04 GMT

SailPoint Next-Gen Access Request replaces the legacy Request Center with enhanced search, multi-identity selection, machine identity support, and an AI agent.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces Next-Gen Access Request, replacing the legacy Request Center with a unified flow for requesting access for self, others, a team, or machine identities.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds cross-field catalog search in Find Access, searching across name, description, source, application, owner, privilege, and access model metadata — with filters for roles, access profiles, entitlements, and applications. • Adds effective privilege labels (HIGH, MEDIUM, or LOW) on each access item card so requesters can evaluate sensitivity before adding items to a request. • Adds identity search by name, email, or manager when requesting for others, with a toggle between All and My Team and support for filtering on up to five public identity attributes configured by an administrator. • Adds dedicated machine identity request support for customers with the Machine Identity Security add-on, including filtering by owner or type. • Adds the Harbor Pilot Access Request Agent for entitled customers, enabling natural-language access request search, interactive selection, form submission, request cancellation with a reason, and request status reporting. Breaking changes: • Opting a production tenant into Next-Gen Access Request is permanent — it cannot be rolled back to the legacy Request Center experience. All production tenants are forcibly migrated on February 16, 2027 if not opted in earlier. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Delimited File Connector - Beyond Basic Authentication - SSH Keys for SFTP and Client Certificates for FTPS (2026-09-04)

Fri, 04 Sep 2026 15:48:17 GMT

Delimited File Connector gains SSH key auth for SFTP and TLS client certificate auth for FTPS, beyond Basic username/password. • Adds `Public Key` option to the `Authentication Type` dropdown for SFTP (`File Transport = SFTP`), enabling SSH private key authentication with `SSH Private Key` (PEM, OpenSSH, or OpenSSH v1 format) and optional `SSH Private Key Passphrase` fields. • Adds `Client Certificate` option to the `Authentication Type` dropdown for FTPS (`File Transport = FTPS`), enabling TLS mutual auth via a Base64-encoded PKCS12 (`.p12`) certificate pasted into `FTPS Client Certificate`, with an optional `FTPS Client Certificate Passphrase` field. • SSH private keys, client certificates, and passphrases are stored as encrypted attributes in Identity Security Cloud source configuration — no key files need to be uploaded to the Virtual Appliance filesystem. • `Test Connection` now validates SSH key authentication (invalid keys, wrong passphrases, network errors) and FTPS TLS handshake and FTP login before aggregation is scheduled. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Easier Trigger Filter Testing in Workflows (2026-08-31)

Mon, 31 Aug 2026 14:08:17 GMT

SailPoint Workflows now warns on missing trigger filters and applies filters during test runs before you enable a workflow. • Adds missing-filter warnings in the workflow editor and on the Test Workflow experience when a filterable trigger has no filter configured. • Applies your trigger filter against the test input during test runs, showing whether the filter matches — previously, testing ignored the trigger filter entirely. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: HTTP Request Action - Sensitive Request Headers (2026-08-24)

Mon, 24 Aug 2026 15:58:29 GMT

ISC Workflows HTTP Request action adds Sensitive Request Headers field to mask API keys and tokens in definitions and execution history. • Adds `Sensitive Request Headers` field to the HTTP Request action in Identity Security Cloud Workflows — a dedicated masked key-value store for API keys, bearer tokens, and other secrets that are encrypted in workflow definitions and omitted from execution history. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: MySailPoint Managed Defaults, Dashboard Templates & Widget Sizing (2026-08-19)

Wed, 19 Aug 2026 12:35:54 GMT

MySailPoint gains admin-controlled Home defaults, dashboard templates (including Admin Overview), and multi-size widgets. • Adds Managed Defaults: admins can draft and publish a global default Home layout (action tiles and widgets) that applies tenant-wide, overriding previous individual customizations; found under Dashboard Manager > Templates > Home Page Templates. • Adds a Default Home Pages section under Managed Dashboards > Default Home Pages where published managed defaults can be further edited or deleted (deleting reverts to the SailPoint baseline). • Adds Dashboard Templates: ready-made copyable dashboards covering persona, industry, or information type so admins can start with a pre-built layout instead of a blank canvas. • Adds an Admin Overview dashboard template available by default to all administrators regardless of license, recreating the classic Admin Overview page's capabilities inside Custom Dashboards. • Adds multi-size widget support: widgets built by SailPoint product teams now ship as Small (three per row), Medium (two per row — current default), or Large (one per row); size is set at widget creation and is not configurable by admins. • Users receive an in-app notification on their first Home visit after an admin publishes a Managed Default change, alerting them that the layout was updated and prior personalizations may need to be re-applied. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Workflow Audit and Visibility for Non-Employee Risk Management Workflows (2026-08-17)

Mon, 17 Aug 2026 21:59:27 GMT

Non-Employee Risk Management workflows now emit structured audit events and expose version context via the Audit Events API. • Adds dedicated audit events to the Audit Events API for Non-Employee Risk Management workflow definition lifecycle actions — create, fork, deprecate, and delete — each with structured payload fields including workflow identity, definition label, actor, and timestamp. • Adds dedicated audit events for workflow step changes (add, edit, delete, reorder) with definition context in the event payload, retrievable via the existing Audit Events query API. • Enriches existing workflow session audit events with a `workflow_version_label` field (and `workflow_version_id`) identifying the workflow definition version in effect when the session started, enabling correlation of session behavior to configuration without extra tooling. • Supports filtering of new workflow audit events by workflow subject and definition identifiers using the existing Audit Events query API. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Integration Service (IQService-August-2026) is now LIVE! (2026-08-17)

Mon, 17 Aug 2026 17:45:03 GMT

IQService-August-2026 requires explicit enablement and TLS for ScriptExecutor and gMSAPasswordData privileged services. • Adds `IQService.exe -g --enable ` command to explicitly enable privileged services; `ScriptExecutor` and `gMSAPasswordData` will not run unless enabled this way. • Extends mandatory TLS-only enforcement to the `ScriptExecutor` (native before/after script execution) and `gMSAPasswordData` (gMSA password retrieval) privileged services — both are silently disabled if TLS is not exclusively configured on the IQService instance. • Auto-update push via UpdateService begins October 19, 2026, with a 60-day manual configuration window starting August 18, 2026 for administrators to download, configure, and validate before auto-updates begin. Breaking changes: • `ScriptExecutor` and `gMSAPasswordData` privileged services will not run after upgrading to IQService-August-2026 unless TLS is exclusively configured on the IQService instance AND each service is explicitly enabled via `IQService.exe -g --enable `. Environments using either service without completing these steps will experience service interruptions on upgrade. • Non-TLS ports must be disabled when switching an IQService instance to a TLS port; running both simultaneously is no longer a supported configuration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Machine Identity Access Requests (2026-08-10)

Mon, 10 Aug 2026 15:45:52 GMT

SailPoint adds access request support for Machine Identities, letting users request entitlements on behalf of machine identities via the ISC Request Center. • Enables users to request entitlements on behalf of Machine Identities through the Identity Security Cloud (ISC) Request Center for Machine Identity Security customers. • Routes manager-assigned approvals for Machine Identity access requests to the Machine Identity owner instead of a human manager. • Requires requesters to select a target account when a Machine Identity has multiple accounts on a source, ensuring precise provisioning targeting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Non-Employee Risk Management Report Delete & Visibility (2026-08-10)

Mon, 10 Aug 2026 15:33:12 GMT

Non-Employee Risk Management gains report deletion and permission-scoped report list visibility on the Reports All tab. • Report creators can now delete their own report definitions directly from the Reports page in Non-Employee Risk Management; deleting a report also removes all associated exports. • The Reports All tab now shows only reports the logged-in user created or reports shared with them, preventing exposure of sensitive metadata in report titles to unauthorized users. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Approvals Migration and Notification Reminders and Escalations, Regional Routing, and CC:/BCC: (2026-08-10)

Mon, 10 Aug 2026 15:18:23 GMT

SailPoint adds approval reminders/escalations UI, regional AWS SES routing, and CC:/BCC: support in email templates. • Adds `Admin > System Settings > Feature Settings > Approval Settings` tab for globally configuring approval reminders, escalations, and timeouts — including cron-string cadence, multi-level escalation chains, and a fallback approver set to an identity or governance group. • Adds per-access-item reminder and escalation configuration under the Access Requests section for Entitlements, Access Profiles, and Roles, overriding the global config for those items. • Adds a `region` field to `EMAIL_SENT` audit events, reflecting the AWS region used to send each email. • New identities (email addresses and domains) are now created and verified in the tenant's primary AWS region rather than always routing through `us-east-1`. • Email templates now support configuring CC:/BCC: recipients from Manager, Identity, Governance Groups, Org Admins, and/or a static email address (restricted on `cloud_user_password_expiration`, `cloud_user_password_reset_token`, `cloud_user_unlock_token`, `cloud_user_verification_token`, and `onboarding_password_reset` templates for security reasons). • Supports defining independent reminder and escalation configurations — reminders without escalations, escalations without reminders, and custom escalation targets outside the approver's management chain. Breaking changes: • Pending approvals that have been open for longer than 90 days will begin expiring starting August 10, 2026; any remaining open pre-migration approvals will be closed. • Domains with a custom `MAIL FROM` attribute configured will NOT be automatically migrated to the primary region — owners must manually re-add and re-verify the domain in their primary region or emails risk being blocked by SMTP servers. • Existing verified sender email addresses are not auto-migrated and continue to send from `us-east-1`; they must be manually removed and re-added to trigger verification in the primary region. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Data Segmentation for Identities (2026-08-10)

Mon, 10 Aug 2026 14:27:30 GMT

SailPoint Identity Security Cloud extends Data Segmentation to Human Identities, enabling least-privilege visibility across complex orgs. • Extends Data Segmentation to cover Human Identities, so administrators can restrict which identities a given user can see — not just Roles and Entitlements. • Enables delegated administration at subsidiary or team level without exposing cross-organizational identity data to scoped admins. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Roles Criteria in SoD Policy Definition (2026-08-03)

Mon, 03 Aug 2026 14:57:18 GMT

SailPoint SoD policies now support Roles and Access Profiles as criteria alongside entitlements in List A and List B. • Adds support for SailPoint Roles in Separation of Duty (SoD) policy List A and List B criteria, configurable via `Admin → Policies → Separation of Duty`. • Adds support for Access Profiles in SoD policy criteria, enabling mixed criteria across lists (e.g., entitlements in List A and a Role in List B). • Preserves existing conflict detection, access-request approval visibility, and violation management workflows for policies that use Role or Access Profile criteria. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Auto-Discovery of Privileged Entitlements (2026-08-03)

Mon, 03 Aug 2026 14:33:29 GMT

SailPoint adds rule-based auto-discovery of privileged entitlements with accept/reject workflows and auditable classification records. • Surfaces recommendations for potentially privileged entitlements based on aggregate privilege classification pattern analysis, covering access that falls outside vendor-published lists or custom criteria. • Integrates recommendations into existing entitlement and source pages, allowing administrators to accept or reject each recommendation and assign a privilege level when marking an entitlement as privileged. • Enables delegation of recommendations to entitlement owners, source owners, governance groups, or other subject matter experts using the existing approvals flow. • Maintains an auditable record of all privilege classification decisions for governance and compliance tracking. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Smarter Output Handling for HTTP Request (POST) (2026-07-28)

Tue, 28 Jul 2026 16:58:38 GMT

SailPoint Workflows now auto-trims HTTP POST response payloads inside loops, matching existing GET behavior. • Extends automatic payload trimming to HTTP Request (POST) steps — loop inputs now retain only the fields referenced in downstream steps, reducing data stored and transferred per run. • Full POST response remains accessible during test/build mode so practitioners can inspect all fields while authoring workflows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Introducing the connectivity agent for simplified web services configuration in SailPoint (2026-07-27)

Mon, 27 Jul 2026 19:11:02 GMT

SailPoint introduces an AI-guided connectivity agent wizard to configure Web Services sources without deep API expertise. • Adds a connectivity agent: an AI-powered, wizard-based setup experience for configuring Web Services connector sources directly within the SailPoint application onboarding workflow. • Supports AI-recommended configuration for authentication endpoints, account aggregation with data preview, pagination rules for large datasets, attribute mapping for accounts and entitlements, and identity-to-account correlation. • Enables detection of compatible REST and SCIM public APIs for any target application, compressing multi-day Web Services configuration into hours. • Includes provisioning endpoint recommendations covering Get Object, Create Account, Account Update, and Add/Remove Entitlement. • Each AI recommendation is validated in-UI with a live data preview before the administrator accepts — no changes are applied without explicit approval. • Standard manual Web Services configuration flow remains available alongside the new wizard for teams requiring full control. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Access Model Metadata Adhoc Values (2026-07-27)

Mon, 27 Jul 2026 16:00:37 GMT

SailPoint ISC Access Model Metadata now supports free-form ad hoc values on roles, access profiles, and entitlements. • Adds `Allow Ad Hoc Values` option when creating or editing a custom metadata attribute, enabling free-form values up to 100 characters per value — no pre-defined list required — on roles, access profiles, and entitlements. • Adds `Allow Multivalued Assignment` option on custom metadata attributes, permitting more than one value to be assigned to a single attribute (note: once enabled, cannot be undone). • Expands value capacity to up to 5,000 different values per custom attribute and up to 250 custom metadata attributes per access object type. • Enables search for roles, access profiles, and entitlements by ad hoc metadata attribute values. • Ad hoc values entered while `Allow Ad Hoc Values` is enabled are retained even if the option is later disabled. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: US Region Deployment for SAAM (2026-07-27)

Mon, 27 Jul 2026 15:51:20 GMT

SailPoint SAAM now available in AWS US East (us-east-1), enabling US customers in-region data residency and full app discovery-to-governance workflows. • Adds AWS US East (us-east-1) region hosting for SAAM, giving US customers in-region data residency and lower latency. • Enables the App Switcher Application Visibility portal in the US region for full SAAM configuration, discovery, risk & usage analytics, and privacy controls. • Supports Browser Extension (BE) connector in ISC for US-region customers, syncing SAAM discovery and risk data into ISC's Discovered Applications page with risk score, sensitivity, exposure, and credential/MFA signal columns. • Provides a direct discovery-to-governance path within ISC, enabling access reviews, certifications, and app onboarding without leaving the platform. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Centered Navigation Bar for Enhanced User Experience (2026-07-24)

Fri, 24 Jul 2026 18:54:59 GMT

SailPoint ISC gets a centered navigation bar for admins, end users, and Data Access Security. • Moves the Admin tab and its megamenu to the top center of the screen for a symmetrical, at-a-glance view of all menu and submenu items. • Relocates the + Add/Create quick-access button to the center of the main menu bar, making it reachable from anywhere on the page. • Centers core navigation items (home icon, primary product tabs) in the header for end users to reduce eye and mouse fatigue. • Applies the same centered navigation layout to Data Access Security, creating a consistent visual experience when switching between ISC and DAS. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Forms for Access Request (2026-07-24)

Fri, 24 Jul 2026 18:33:35 GMT

SailPoint ISC adds custom Forms for Access Request, collecting contextual data from requesters before submission. • Enables admins to define custom forms and attach them to Roles, Access Profiles, or Entitlements, prompting requesters for supplementary data before submitting an access request. • Passes submitted form data to approvers as name-value pairs, giving decision-makers full context at approval time. • Makes form data accessible throughout the request flow, including before-provisioning rules, enabling custom provisioning logic driven by requester-supplied data. • Automatically copies form data across multiple form instances when a requester asks for several items that each require the same form. • Supports external access request portals (e.g., SailPoint ServiceNow Catalog Integration) by allowing supplementary form data to be passed into the request flow independent of the native UI. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Dark Mode Support Across SailPoint Agentic Fabric and Limited Support Across Identity Security Cloud (2026-07-22)

Wed, 22 Jul 2026 17:22:25 GMT

SailPoint adds Dark Mode across Agentic Fabric and select Identity Security Cloud pages. • Adds Dark Mode support across SailPoint Agentic Fabric and a select number of Identity Security Cloud pages, user-configurable per account. Breaking changes: • Custom branding colors will not be applied in Dark Mode — they continue to appear in Light Mode only. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Product: SailPoint Agentic Fabric (2026-07-22)

Wed, 22 Jul 2026 02:16:42 GMT

SailPoint Agentic Fabric launches in Sandbox, delivering unified discovery, governance, and protection for AI agents and non-human identities across 32+ frameworks. • New `Agentic Fabric` tab in top navigation (MIS and AIS tenants) surfaces a dedicated governance workspace for AI agents and non-human identities (NHIs). • New `Applications` and `Accounts` left-nav items consolidate machine accounts (IAM roles) and machine/application identities into a single view. • Adds approval routing for agent provisioning (activation/deactivation) configurable under `Global → System Settings → Approval Settings → Agent Requests`. • Introduces a unified NHI registry — a single registry for discovering and governing all AI agents and non-human identities across enterprise, endpoint, and browser surfaces. • Supports 32+ agent frameworks from day one across three surfaces: endpoint agents (Claude Code, Claude Desktop, Cursor, Cline, Windsurf, GitHub Copilot, OpenAI Codex, Gemini CLI, and others), enterprise agents (Amazon Bedrock, Amazon Bedrock AgentCore, Anthropic Claude Console, Databricks Mosaic AI, Google Vertex AI, Microsoft Copilot Studio, Microsoft Foundry, Salesforce Agentforce, ServiceNow AI Platform, Snowflake Cortex AI, N8N, WIZ, and custom agents via BYO schema/API), and browser agents (Zendesk, MS Office Copilot 365, Cursor, Dify, Claude, OpenAI). • Embeds an Identity Graph for visualizing relationships between agents, identities, and resources. • Adds endpoint and browser discovery capabilities to detect agents running on managed devices and in browsers. • Adds owner correlation and lifecycle controls for AI agents, with optional default owner mapping configurable in Datasets and Resources for automated ownership assignment. • Adds CLI threat detection and remediation capability for endpoint agents. • Adds prompt and response security monitoring for AI agents. • Adds agent audit and compliance reporting for audit-ready governance of AI agent activity. • Adds agent authorization controls as part of the Protect capability set. • AWS IAM Roles / Datasets & Resources integration available via the AWS SaaS connector, with automatic migration for existing MIS and AIS customers who already have AWS configured. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Support for Stronger Integrations (2026-07-20)

Mon, 20 Jul 2026 19:27:13 GMT

SailPoint ISC admins must now specify an approved integration when creating API or Personal Access Tokens. • Requires admins to select an approved integration when creating API or Personal Access Tokens, enabling per-integration traffic visibility. • Introduces the Unified Platform Access Program, enabling deeper product integrations tied to specific tokens. Breaking changes: • When creating an API or Personal Access Token, admins must now specify the approved integration — existing token-creation workflows that do not supply an integration will require updating. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint New Capability: Personal Access Token Management for Admins (2026-07-20)

Mon, 20 Jul 2026 19:08:41 GMT

SailPoint admins can now view, edit, and bulk-manage all Personal Access Tokens org-wide, plus a new Bulk update PAT expiration API. • New admin screen under Admin → Security Settings → Personal Access Tokens lets admins view and manage all PATs in the environment, not just their own. • Admins can edit individual PATs or modify multiple tokens at once using bulk operations. • Admins can change or remove expiration dates on any PAT across the organization. • New Bulk update PAT expiration API enables programmatic management of PAT expiration dates at scale. Breaking changes: • Any Personal Access Token created before February 5, 2026 that has never had an expiration date added or removed will automatically be assigned an expiration date 6 months (180 days) from the release date (production rollout: 7/28/2026), which may break long-lived integrations relying on those tokens remaining non-expiring. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Closed Preview: Next-Generation Mainframe Connectors for RACF, ACF2, and Top Secret (2026-07-16)

Thu, 16 Jul 2026 16:21:40 GMT

SailPoint previews next-gen mainframe connectors for RACF, ACF2, and Top Secret that eliminate the Connector Gateway layer. • Introduces direct connectivity from SailPoint Identity Management products to the SailPoint agent on the mainframe, removing the requirement to deploy and maintain a Connector Gateway. • Adds new security and maintainability improvements to the RACF, ACF2, and Top Secret integrations on z/OS. • Includes migration tooling to help transition existing configurations and customizations from the legacy connector to the new architecture. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: Non-Employee Risk Management Users Connector - Automatic Synchronization (2026-07-14)

Tue, 14 Jul 2026 21:42:30 GMT

NERM Users connector gains real-time ISC sync toggle and UI-based role assignment for non-employee accounts. • Adds a new 'Sync with Identity Security Cloud' toggle in Admin > System > Identity Security Cloud Connection Settings > USERS tab, triggering immediate account or entitlement aggregation on any NERM user/role change instead of waiting for periodic aggregation. • Adds a Source ID field to the USERS tab, allowing NERM to auto-detect an existing NERM Users connector source or optionally create one automatically when the sync toggle is first enabled. • Enables NERM admins to assign and unassign roles directly to users from Admin > Lifecycle > User Roles in the Non-Employee Risk Management Admin UI, a capability previously limited to the API. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint

SailPoint Enhancement: SailPoint MCP Server Now Supports Global URL and OAuth — Connect Any AI Client in Minutes (2026-07-09)

Thu, 09 Jul 2026 19:47:13 GMT

SailPoint MCP Server adds a global tenant-agnostic URL and OAuth 2.1/PKCE auth, plus native Cursor IDE support. • New global MCP endpoint (`https://mcp.api.cloud.sailpoint.com/latest/access-requests/mcp`) works for all non-FedRAMP tenants — no per-org URL construction needed. • Replaces manual PAT/token workflow with OAuth 2.1 + PKCE: browser-based login, SSO support, consent screen, and automatic token refresh for up to one month. • Adds native Cursor IDE support: configure the global URL and Client ID in `~/.cursor/mcp.json`, and the full OAuth flow is handled automatically on connect. • AI assistants can now manage ISC access requests conversationally — search the access catalog, submit requests, check approval status, and cancel requests. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sailpoint