SaaS Release Notes - August 28, 2026

Connectivity - Delimited File

The Delimited File connector now supports SSH key authentication for SFTP and TLS client certificate authentication for FTPS, in addition to existing Basic (username/password) authentication.

SaaS Connectors - Cursor SaaS

The Cursor SaaS connector now supports activating and deactivating Cursor agents. For more information, refer to Supported Features.

Connectivity - Generic SDIM

The Generic Service Desk Integration Module now supports the Client Credentials grant type for OAuth 2.0 authentication.

SaaS Connectors - N8N SaaS

The N8N SaaS connector now supports activating and deactivating N8N agents. For more information, refer to Supported Features.

Data Access Security, Identity Security Cloud, Non-Employee Risk Management, SailPoint Agentic Fabric

The main navigation items are now centered within the primary navigation bar. This update applies to Data Access Security, Identity Security Cloud, NERM, and SailPoint Agentic Fabric.

Machine Identity Security

In machine account creation, form input variables can now be passed into generators using the $(userInput.technicalkey) pattern.

SailPoint Cloud Infrastructure Entitlement Management (CIEM)

SailPoint CIEM AWS minimum IAM permissions in AWS Permission Sets and CloudFormation stack templates now exclude unused services, including AWS Config, Amazon OpenSearch Service, Amazon EventBridge, and CloudWatch Logs. Customers who use custom IAM policies or redeploy CloudFormation stacks can adopt the reduced permission set without affecting CIEM collection.

SailPoint Cloud Infrastructure Entitlement Management (CIEM)

You can now use Search to query by cloud-native AWS and Azure tags and GCP labels to help you locate cloud resources and verify which identities can access those cloud resources. Refer to Searching on Cloud Resources by Tag or Label for more information.

Identity Security Cloud - MySailPoint

You can now set the default widgets and tiles on the Home Page using a template. You can use additional templates to customize an admin overview dashboard or create dashboards focused on specific products and features. For more information, see Managing Dashboards.

Connectivity - Active Directory

CONETN-5456

The Active Directory connector now supports retrieving the numeric value of msDS-SupportedEncryptionTypes for gMSA accounts during aggregation. To enable this, set gmsaMsDSSupportedEncryptionTypesInNumeric to true in the source configuration. For more information, refer to Additional Configuration Parameters.

Connectivity - SAP HR/HCM

CONETN-5477

Fixed an issue where the SAP HR connector failed account aggregation when the PersonIDExternalattribute was included in the account schema.

Connectivity - Siebel

CONETN-5508

The Oracle ERP - Siebel connector now supports updating the entitlement responsibilities containing special characters.

Connectivity - SAP Analytics Cloud

CONETN-5492

The SAP Analytics Cloud connector now updates custom.idpUserId to match the email attribute during attribute sync.

Connectivity - Oracle HCM Cloud

CONETN-5525

The Oracle HCM Cloud connector now supports the Published-Min and Published-Max filters derived from lastAggregationDate when the publishForEffTermAssignment parameter is set to true in the application configuration during delta aggregation.

Connectivity - SAP Direct

CONETN-5491

The SAP Direct connector no longer aggregates duplicate role entitlements from SAP Central User Administration (CUA) systems when the same role is assigned with different validity dates.

SaaS Connectors - Web Services SaaS

CONETN-5517

The Web Services SaaS connector now provides the URL with resolved placeholders as an input for both before and after customized operations.

Identity Security Cloud - Sources and Account Management

PLTCONN-10672

Fixed a connector template issue that prevented updates to the Identity Security Cloud source.