SaaS Release Notes - May 9, 2025

Identity Security Cloud - SAP Cloud Identity Access Governance SaaS

The SailPoint SAP Cloud Identity Access Governance (IAG) SaaS integration enhances the management of user access and compliance within SAP systems. It enables customers to leverage SailPoint as a central hub for initiating access requests across their SAP landscape, including SAP IAG. Ultimately streamlining access provisioning, SOD analysis on the request process, and strengthening governance. For more information, refer to Integrating SailPoint with SAP Cloud Identity Access Governance (IAG) SaaS.

Identity Security Cloud - Access Requests

Revocation functionality in Identity Security Cloud has been expanded to allow revocation of roles and access profiles by users for themselves, by admins for any user, and by designated Access Revoker users for any user. Access Revoker is a new ISC user level that grants revoke-for-others access to users who are not otherwise admins or the manager of the target user. This release also includes the ability to configure approval requirements for entitlement revocation; this can be done globally, per source (API only), or per entitlement. Admins can configure required approvals now so that they are in place when entitlement revocation is enabled for managers, self, admins, and access revoker users in two weeks. Refer to Enhancement: Access Revocation! for a feature overview.

Identity Security Cloud - JDBC

In the SailPoint JDBC connector, you can now configure provisioning directly from the Identity Security Cloud (ISC) user interface, significantly enhancing its functionality. This update enables administrators to perform key provisioning actions such as Create, Update, Enable, Disable, Unlock, and Modify seamlessly through the UI.

Machine Identity Security

Delete Machine Identity Passed audit events are now triggered when machine identities are deleted.

Machine Identity Security

Update Machine Identity Passed audit events are now triggered when machine identities are updated.

SaaS Connectors - Oracle EPM Cloud - AR SaaS

SailPoint’s Oracle EPM Cloud - AR SaaS connector now has a default correlation mapping for newly created sources. You can update the mapping as required for your organization.

SaaS Connectors - CrowdStrike

CONJUBILEE-3401

The CrowdStrike connector no longer fails when the riskScore value is changed from double to string on the target system.

Connectivity - Dynamics 365 - F&O

CONETN-5059

The Microsoft Dynamics 365 Finance and Operations connector now properly uses the Account Request native identity during provisioning operations.

SaaS Connectors - Microsoft Entra

CONHOWRAH-5610

The Microsoft Entra SaaS connector now updates all primary attributes during the create operation for Guest (B2B) users and Local (B2C) users.

Connectivity - Jack Henry

CONETN-5057

The Jack Henry Symitar connector now correctly handles errorCompareString attributes if the API response error contains \n used as a new line character.

Connectivity - SCIM 2.0

CONETN-5048

In the SCIM 2.0 connector, Create Account processes no longer fail with Class Cast Exception errors when an account’s native identity attribute (id) is an integer type.

Connectivity - Oracle EPM Cloud

CONETN-5058

SailPoint’s Oracle EPM Cloud connector no longer fails with error "User with same name already exists" when the create operation is triggered on the module for the existing IDCS user.