SailPoint Non-Employee Risk Management enables you to execute and automate risk-based identity access and lifecycle strategies for your entire population of non-employees.
Recent product updates and upcoming enhancements
Blog
New Capability: Non-Employee Risk Management Report Delete & Visibility
Report creators can remove obsolete report definitions, and every user sees only report names they are authorized to access on the Reports All tab—improving report hygiene and reducing exposure of sensitive metadata in report titles.
Blog
Action Required: Update Personal Access Tokens for NERM Scope by September 15, 2026
To improve API security, Non-Employee Risk Management will begin requiring an explicit Non-Employee Risk Management scope on Personal Access Tokens (PATs) starting September 15, 2026. Today, administrator accounts can access Non-Employee Risk Management APIs with the default sp:scopes:default scope....
Blog
Enhancement: Disable Failure Email Notifications per Workflow in NERM Classic
Administrators can configure a top-level workflow option on individual Non-Employee Risk Management workflows. When enabled, that workflow will not send failure / error email notifications for failures on that workflow. Failure events, logging, and non-email behavior (for example Workflow Tracing) s...
Important resources you should know about
Documentation
Non-Employee Risk Management documentation
Learn about all of Non-Employee Risk Management's features and functionalities.