SaaS Release Notes - May 23, 2025

Identity Security Cloud - Core Access Model

Identity Security Cloud now supports entitlement revocation by managers from the My Team page and by users for themselves from the My Access page. In addition, Admins and Access Revokers can now revoke users' entitlements from the Identity details > Access tab. This adds to the existing support for role and access profile revocation by these users from these same pages. For all of these users, entitlement revocation is limited to entitlements that were not granted to the user through role assignments. All revocation requests are subject to any configured revocation approval requirements for the item.

SaaS Connectors - SAP Ariba

The SAP Ariba SaaS connector now has a default correlation mapping for newly created sources. You can update the mapping as required for your organization.

Identity Security Cloud - Configuration Hub

During the upload of an object, Configuration Hub automatically adds the "objects" property in the JSON if it is missing.

Identity Security Cloud - GenAI Descriptions

On the Entitlements page, you can now bulk-select all entitlements that match the current search query or filter for GenAI description generation. When selecting all entitlements, you can also deselect individual entitlements to exclude them from description generation.

SaaS Connectors - Microsoft SharePoint Online SaaS

The Microsoft SharePoint Online SaaS connector now has a default correlation mapping for newly created sources. You can update the mapping as required for your organization.

Connectivity - SAP Fieldglass

The SAP Fieldglass SaaS connector now has a default correlation mapping for newly created sources. You can update the mapping as required for your organization.

SaaS Connectors - SAP Concur SaaS

The SAP Concur SaaS connector now has a default correlation mapping for newly created sources. You can update the mapping as required for your organization.

Identity Security Cloud - Access Requests

The Access Request for Other email template now has access to comments entered by the request’s submitter. Comments are part of the requestedObjectDetailsByType details and you can add them to a customized email message by iterating through the requested objects as follows:

#foreach($type in ${requestedObjectDetailsByType.keySet()})
#foreach($detail in ${requestedObjectDetailsByType.get($type)})
${detail.requesterComment}
#end
#end

Note the default template already includes these #foreach loops, so you may only need to add the ${detail.requesterComment} reference. Refer to Specifying Variables.

Connectivity - Workday

The Workday Students connector has been enhanced to manage prospect, applicant, pre-matriculant, and inactive matriculant student accounts in addition to active student accounts. For more information, refer to Aggregation Settings.

Non-Employee Risk Management

The SailPoint Status page now displays the system status of the Non-Employee Risk Management Dubai region under the region code me-central-1. Follow the Atlassian documentation to manage your subscriptions to system components.

Connectivity - SAP Concur SaaS

CONETN-5063

The SAP Concur SaaS Connector no longer throws random internal server errors during provisioning operations.

Identity Security Cloud - Certifications

ISCCOMPLI-5223

Fixed an issue where the wrong error message was displayed when a user tried to reassign and certify their own access.

SaaS Connectors - Workday

CONCHENAB-7218

Upgraded the vulnerable library axios jar to version 1.8.4 to mitigate a security vulnerability.

SaaS Connectors - Microsoft Entra

CONHOWRAH-5602

The Microsoft Entra ID SaaS connector now correctly fetches all the AzureRoleAssignments entitlements during the account aggregation process.