SaaS

SaaS Release Notes - July 3, 2023

Production release notes - July 3, 2023

Release notes might contain references to new features, enhancements, and fixes that will be gradually turned on in production over the next several weeks. See the SaaS Functional End of Life and Major Changes Policy.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

New features

Product	What's new
Connectivity - Azure AD	The Azure Active Directory connector now supports the aggregation of the Azure Active Directory group hierarchy. For more information, refer to Group Hierarchy Information.
Connectivity - Azure AD	The Azure Active Directory connector now supports managing Service Principal for Enterprise Applications as an Account. For more information, refer to Service Principal Account Management.
SaaS Connectors	SailPoint is pleased to announce the availability of net new “Web Services SaaS” Connector. The Web Services SaaS connector allows you to configure a managed system that supports REST Web Services with JSON response format without the need for a Virtual Appliance. You can perform aggregation, provisioning and deep level of governance operations. For more detail, refer Web Services SaaS Connector.
Forms	Forms is a new feature that allows organizations to create custom forms for use in workflows. Forms are used to ingest user data into the data flow of a workflow and then use that data in the actions or activities of the workflow. This new Forms feature enables users to: Create new custom forms using an intuitive builder to configure sections and fields. The fields include single and multiple line text, date, toggle, and a multiple select dropdown. The multiple select dropdown displays static values, predefined values from IdentityNow, or values from a custom search. Create dynamic forms by configuring conditional logic rules for how sections and fields are displayed to the end user. Define form inputs that work together with conditions to map data from workflow data flows into the form using the Form Action. Administrators can manage and create new forms, as well as view which workflows are using their forms from the Forms page. The Forms feature works with Workflows to enable users to: Assign a selected form to a recipient as a step in a workflow using the Form Action. The workflow sends an email notification to the recipient with a link to the assigned form and the workflow is suspended while waiting for the form to be submitted. Initiate a workflow when a form is submitted using the Form Submitted Trigger. The trigger can be configured to initiate a workflow when a form is submitted or when a form is submitted with specific attribute values. Using JSON operations, you can configure the workflow to trigger on more than one form, more than one element, or more than one value for a multi-select field. Refer to the Forms documentation for more information.
Connectivity - Oracle HCM Fusion	On December 31, 2023 the Oracle Fusion HCM Connector will be deprecated, and support for it will no longer be provided. Customers may use the newly released Oracle HCM Cloud Connector. Documentation for the new connector can be found at this link.
Connectivity	SailPoint is pleased to announce a new IdentityNow source for connecting to an Azure SQL Database. For more information, refer to Integrating SailPoint with Azure SQL Database.
Connectivity - SuccessFactor	The SuccessFactors connector now supports adding additional attributes and custom attributes related to user entities using the ODATA API data dictionary. For more information, refer to Adding Attributes From ODATA API Data Dictionary.
Connectivity	SailPoint’s Integration for the SAP Fieldglass Vendor Management System offers governance capabilities for contingent workers. It offers seamless governance of external users, management for joiners, movers, leaver workflows, and separation of duty (SOD) checks based on user roles, attributes, and entitlements.

Enhancements

Product	Feature enhancements
Platform	The sp-config API export operation has been expanded to include SOD_POLICY, WORKFLOWS, and FORMS objects.
Connectivity - Workday	The Workday connector now supports connecting to Workday HRMS using a proxy server. For more information, refer to Support for Application Level Proxy.
Connectivity - Okta	The Okta connector now provides an option for multi-threading while creating cache of the Groups and Applications associated with Okta accounts during Okta account aggregation.
Connectivity - EPIC	The Epic Healthcare connector now supports “PrimaryManager“ and “UserManagers“ user fields as account attributes.
Connectivity	The new Oracle Enterprise Performance Management (EPM) Cloud governance connector provides the capability for managing user accounts, and reading and associating of predefined roles, application roles and groups. The integration supports EPM Cloud Services for Planning, Financial Consolidation and Close Service (FCCS), Account Reconciliation (ARCS), and Narrative Reporting (NR).
Connectivity - EPIC	The Epic Healthcare connector now supports the Epic version of May 2023.
Connectivity - SuccessFactor	The SuccessFactors connector is now able to manage external users and their entitlements who are in the onboarding stage.
Connectivity - Workday Accounts	The Workday Accounts connector now provides the option for multithreading during account aggregation. Adding multithreading to your aggregation will help improve your aggregation times.
Connectivity - SAP GRC	The SAP GRC integration has been enhanced to provide support for additional attributes out-of-the-box.
Connectivity - ACF2, RACF Connector, TSS	The Mainframe Connectors (RACF-Full, ACF2-Full, and TopSecret-Full) now support mutual TLS authentication for communication between an IdentityNow Virtual Appliance, the Connector Gateway, and the Mainframe Connector itself.

Fixes

Product	Issue ID	Fixes
Connectivity - Azure AD	CONETN-4192	The Azure Active Directory connector now does not throw an error, "Your password has expired." when a user logins with the new password that was reset by the user through the IdentityNow using Pass-through authentication (PTA).
Connectivity - ACF2, RACF Connector, TSS	SET-12638	The Mainframe Connector now sets provisioning results at the attribute level. The connector also provides a warning in the event of a partial success so users are notified and can choose to reattempt the provisioning process for failed attributes.
Connectivity - SAP Concur	CONUMSHIAN-5769	The SAP Concur connector was showing an exception, which has been fixed by handling the attribute mapping(s) required for provisioning.