SaaS Release Notes - November 6, 2026

SaaS Connectors - HashiCorp Vault SaaS

The HashiCorp Vault Integration (Cloud) SaaS connector is now available. You can discover and aggregate non-human identities from HCP Vault Dedicated, including agents and machines, service accounts, tokens and PATs, secrets metadata, and API keys. Authenticate with AppRole. The connector reads metadata only and does not retrieve secret values. For more information, refer to Integrating SailPoint with HashiCorp Vault Integration (Cloud).

Connectivity - Meditech

The MEDITECH connector now uses public /v3/mis-person/{id}/restricted APIs instead of the internal /v1/view endpoint to read account details during aggregation. This change improves account read reliability without requiring changes to existing configurations or schemas.

Connectivity - Workday

The Workday connector can now skip contingent worker lookups during get object operations. Set skipContingentWorker to true in the application configuration to enable this behavior and reduce unnecessary Workday API calls.

Connectivity - Workday

The Workday connector can now skip employee worker lookups during get object operations. Set skipEmployeeWorker to true in the application configuration to enable this behavior and reduce unnecessary Workday API calls.

SaaS Connectors - SAP Ariba SaaS

The SAP Ariba SaaS connector now supports configurable retry with incremental backoff for account update, enable, disable, and Get Object operations when the target returns transient errors such as HTTP 429. Configure aribaRetryableErrors, aribaMaxRetryCount, and aribaRetryWaitTimeSeconds on the source to customize this behavior.

SaaS Connectors - Oracle Fusion HCM Accounts SaaS

The Oracle Fusion HCM Accounts SaaS connector now supports OAuth 2.0 JWT user assertion authentication.

Connectivity - Oracle Fusion HCM Accounts

The Oracle Fusion HCM Accounts connector now supports OAuth 2.0 JWT user assertion authentication.

SaaS Connectors - Oracle HCM Cloud SaaS

The Oracle HCM Cloud SaaS connector now supports OAuth 2.0 JSON Web Token (JWT) user assertion authentication for the API connection.

Connectivity - Oracle HCM Cloud

The Oracle HCM Cloud connector now supports OAuth 2.0 JSON Web Token (JWT) user assertion authentication for the API connection.

Connectivity - RACF LDAP

The RACF LDAP connector now supports z/OS 3.2.

Connectivity - Oracle HCM Cloud

The Oracle HCM Cloud connector now processes a currently effective, active Pending Worker relationship even if Oracle marks it as nonprimary and an inactive or terminated primary Employee work relationship is present.

Connectivity - Atlassian Suite-Cloud

The Atlassian Suite Cloud connector now aggregates non-human identity credentials. The connector loads them in the Atlassian Credentials dataset. That dataset includes organization-level API keys, service account API tokens, and service account OAuth 2.0 clients. Each credential includes its creator, its access, and its expiration date.

SaaS Connectors - Oracle Cloud Infrastructure SaaS

The Oracle Cloud Infrastructure SaaS connector now aggregates OCI Hosted Applications as machine identities in the OCI Hosted Application Agents dataset, and OCI IAM groups and OCI IAM policies as entitlements. For more information, refer to Integrating SailPoint with Oracle Cloud Infrastructure SaaS.

SailPoint Human Fabric - Workflows

Workflows now has a configure-mode UI to build complex trigger filters using AND/OR conditional logic. Use the Advanced editor to author the filter directly using JSONPath expressions or the Basic editor to make field and operator selections based on the trigger input. Refer to Using Trigger Filters for more information.

SaaS Connectors - SAP S/4HANA Cloud SaaS

CONETN-5765

The SAP S/4HANA Cloud SaaS connector now assigns Business Roles when you create a Business User account. The connector reports Business Roles as committed only when SAP assigns them successfully. If role assignment fails, the connector reports the roles as failed and returns an error message while keeping the account creation successful. For information on creating Business User accounts, refer to Create Business User Account.

SailPoint Human Fabric - SoD

ISCSOD-3377

Fixed an issue with the Request Center separation of duties (SoD) check failing to detect potential violations on dynamic access role (DAR) access items.

SaaS Connectors - Microsoft Entra SaaS

CONETN-5731

The Microsoft Entra SaaS connector now reports account create or update requests as failed when Microsoft Graph rejects a directory role assignment or removal. The connector continues processing other changes in the request, and directory roles successfully assigned before the failure remain assigned.

Connectivity - Microsoft Entra ID

CONETN-5660

Fixed an issue in the Microsoft Entra ID connector where a group membership call could change the query used on later pages of account aggregation. Every aggregation page now uses the same query.

Connectivity - IQService

CONETN-5656

IQService can now stop child processes before a restart or stop when you set the killChildProcessesOnServiceStop source configuration attribute to true. This applies only to IQService.exe -k and -t commands run from an interactive terminal, and you must confirm before any processes are stopped. Because the setting applies to the whole IQService instance, use one instance per source or turn on the attribute for every source that shares the instance.

SaaS Connectors - Workday SaaS

CONETN-5676

Fixed an issue where the Workday SaaS connector deleted additional email addresses when updating work or personal email addresses during account update if the same sync included other account attributes.