SaaS Release Notes - July 3, 2026

SaaS Connectors - Quick Compliance

Identity Security Cloud now supports the following connectors as Quick Compliance connectors:

• Exotel
• Grist
• SafetyCulture
• Tenable-io
• Zylo

You can now expediently configure read-only connections to these sources for account and entitlement aggregation. For a full list of supported Quick Compliance sources, refer to Quick Compliance.

Data Access Security

You can now create a custom Data Access Security Widget dashboard right on your MySailPoint homepage or add the now available Data Access Security insights to any dashboard.

Identity Security Cloud - Workflows

MySailPoint now includes four Workflow Execution Rate widgets, giving you quick visibility into execution rate limiting across your tenant.

You can monitor both live and historical trends at the organization level and individual workflow level, helping you identify patterns faster and troubleshoot with more context.

For more information, refer to the Understanding Execution Limits documentation.

Machine Identity Security

The v2025 List Accounts API has been updated to allow users to filter results by the recommendation.type field using eq, in, and isnull operators. An AGENT value has been added to the recommendation.type enum to identify accounts to associate with agents.

Identity Security Cloud - Provisioning and Task Manager

Updated the Create and Update Provisioning Policy APIs to allow users to add the attribute of “lenient”: “true” to a static field, enabling users to include Apache Velocity templating syntax like ${variable | 'default'} to set default values when variables are not defined. For cases where neither the variable nor fallback is defined, the value is instead set to ${variable}.

Identity Security Cloud - Workflows

The Workflows Send Email action now supports CC and BCC fields. This makes it easier to notify primary and secondary recipients in a single step, instead of needing to creating duplicate email actions or templates.

This update is reflected in all Send Email actions within existing workflows.

Refer to the Send Email action documentation for more information.

Connectivity - LDAP, OpenLDAP

The Generic LDAP and OpenLDAP connectors now support SASL certificate-based authentication. For more information, refer to the respective Connection Settings pages:

• LDAP: Connection Settings
• OpenLDAP: Connection Settings

SaaS Connectors - SAP IBP SaaS

The SAP IBP SaaS connector has been enhanced to support User Group aggregation and provisioning enabling streamlined management of permissions and access controls across your organization.

Connectivity - Microsoft Entra ID

The Microsoft Entra ID connector now supports PIM Groups azureADEligibleGroup and azureADActiveGroup as entitlement objects, including aggregation and adding or removing entitlements from accounts. For more information, refer to Azure PIM for Groups.

SailPoint Cloud Infrastructure Entitlement Management (CIEM)

CAM-31985

Fixed an issue where the CIEM AWS connecter tried to aggregate multi-region AWS Identity Center instances from non-primary regions. To enable this fix, you must add the sso:ListRegions action to your IAM role.

Identity Security Cloud - Identity Graph

DZ-2787

Fixed an issue where some larger graphs were not displaying as centered.

Connectivity - Atlassian Suite-Cloud

SaaS Connectors - Atlassian Suite-Cloud

CONCHORDS-4075 CONCHORDS-4084 CONCHORDS-4061 CONCHORDS-4072

Updated the Atlassian Suite Cloud connector and Atlassian Suite Cloud SaaS connector to use Atlassian Jira Cloud Platform API v3 for Jira user operations ahead of Atlassian Marketplace V2 API decommissioning on June 30, 2026. If you use these connectors, verify your existing Jira user workflows after this update. For more information, refer to Integration Sailpoint with Atlassian Suite Cloud .

Connectivity - Workday

CONETN-5426

The SailPoint Workday connector now prioritizes Future Termination over Future Hire events when preferFutureTerminatedRecord is set to true and both events occur within the effective date offset.

Connectivity - BeyondTrust-Cloud

CONETN-5446

The BeyondTrust Password Safe (Cloud) connector no longer fails during access requests with java.lang.NullPointerException.

SaaS Connectors - SCIM 2.0 SaaS

CONETN-5438

The SCIM 2.0 SaaS connector now populates multivalued extension attributes during account aggregation for compliant configurations.

Connectivity - BeyondTrust-Cloud

CONETN-5411

The BeyondTrust Password Safe (Cloud) connector now correctly handles entitlement removals without throwing a NullPointerException error during the provisioning process.