SaaS

SaaS Release Notes - November 7, 2025

Production release notes - November 7, 2025

Release notes cover new features, enhancements, and fixes that have been released to production.

Identity Security Cloud is SailPoint's next-generation identity security solution. It encompasses and builds on features and functions from IdentityNow. The release notes cover both Identity Security Cloud and IdentityNow features.

New features

Product	What's new
Connectivity - CyberArk Privileged Cloud Shared Services	Your VA-based CyberArk Privilege Cloud Shared Services source can now be migrated to a corresponding SaaS source while ensuring data (users and entitlements) remain intact and maintains your source configurations like access profiles, roles, password settings, and correlation configurations. For more information, refer to Migrate VA-based Source to a SaaS Source.

Enhancements

Product	Feature enhancements
Identity Security Cloud - Core Access Model	We have improved aggregation for entitlement Distinguished Name (DN) changes in Active Directory and Azure sources! When an entitlement’s DN is changed, Identity Security Cloud is now able to correctly correlate the modified entitlement to its associated entitlement in Identity Security Cloud. Previously, entitlement DN changes in Active Directory and Azure sources resulted in invalid entitlement references within roles and access profiles and the loss of entitlement owner, display name, and access request information.
Connectivity - SAP Fieldglass	The SAP Fieldglass Connector has been enhanced to optionally skip connector-level resource object validation during the Create Account operation.

Product

Feature enhancements

Identity Security Cloud - Core Access Model

We have improved aggregation for entitlement Distinguished Name (DN) changes in Active Directory and Azure sources! When an entitlement’s DN is changed, Identity Security Cloud is now able to correctly correlate the modified entitlement to its associated entitlement in Identity Security Cloud.

Previously, entitlement DN changes in Active Directory and Azure sources resulted in invalid entitlement references within roles and access profiles and the loss of entitlement owner, display name, and access request information.

Connectivity - SAP Fieldglass

The SAP Fieldglass Connector has been enhanced to optionally skip connector-level resource object validation during the Create Account operation.

Fixes

Product	Issue ID	Fixes
SaaS Connectors - Microsoft Entra SaaS	CONHOWRAH-6157	The Entra ID SaaS connector now properly verifies key existence for attributes with falsy values.
Connectivity - Atlassian Suite-Cloud	CONCHORDS-3543	The Atlassian Suite Cloud connector is able to skip the membership aggregation of Project Roles during single account aggregation when `skipProjectRoleForGetObjects` is set to true in the source.
Connectivity - Okta	CONETN-5217	The Okta connector now supports aggregation retry based on configurable retryable errors.
Connectivity - SAP HR/HCM	CONETN-5235	The SailPoint SAP HR/HCM connector will no longer fail with null pointer exception for account aggregation.
Connectivity - SAP GRC	CONETN-5230	The SAP GRC connector no longer truncates values which contain backslashes (`/`) during provisioning operations.