SaaS
SaaS Release Notes - October 1, 2026
Release notes cover new features, enhancements, and fixes that have been released to production.
SailPoint Identity Security is SailPoint's next-generation identity security solution. The release notes cover both SailPoint Human Fabric and SailPoint Agentic Fabric features.
New features
| Product | What's new |
|---|---|
SaaS Connectors - Quick Compliance | SailPoint Human Fabric now supports the following connectors as Quick Compliance connectors: You can now expediently configure read-only connections to these sources for account and entitlement aggregation. For a full list of supported Quick Compliance sources, refer to Quick Compliance. |
SaaS Connectors - Harness SaaS | The Harness SaaS connector is now available. The connector aggregates users as accounts, user groups and roles as entitlements, service accounts as machine identities, and API tokens and delegate tokens as credentials. For more information, refer to Integrating SailPoint with Harness SaaS. |
SailPoint Human Fabric - Identity Graph | Introduced new pagination of node sets in access graphs that have large numbers of child nodes. |
Connectivity - GitHub Enterprise Server | The GitHub Enterprise Server connector is now available. You can aggregate users, teams, roles, and repositories, and discover non-human identities including GitHub App installations, GitHub workflows, GitHub Action runs, and environment secrets. For more information, refer to Integrating SailPoint with GitHub Enterprise Server. |
SailPoint Human Fabric - Identity Graph | A new minimap displays when users are zoomed into a larger graph. |
Connectivity - HashiCorp OnPrem | The HashiCorp Vault (On-Premise) connector is now available. You can discover and aggregate non-human identities from on-premises HashiCorp Vault (Community version), including Vault token and userpass account metadata. This is a source connector and is not the HashiCorp Vault Credential Provider. For more information, refer to Integrating SailPoint with HashiCorp Vault NHI (On-Premise). |
SaaS Connectors - Akeyless SaaS | The new Akeyless SaaS connector is now available. Using SailPoint Agentic Fabric, the connector discovers and governs non-human identities (NHIs) and secrets metadata. For more information, refer to Integrating SailPoint with Akeyless SaaS. |
Enhancements
| Product | Feature enhancements |
|---|---|
Connectivity -Siebel | The Oracle ERP – Siebel connector now supports Oracle Siebel CRM versions |
SailPoint Human Fabric - Identity Graph | Changes to node and edge colors have been made when comparing identities. |
Access Risk Management | Access Risk Management customers using the bookmark feature to store filter preferences in online reports can now publish those for other users and set a default that will load automatically for all end users. |
SaaS Connectors - AWS SaaS | The AWS SaaS connector now supports the discovery of AWS Secrets Manager secrets, in addition to the existing Amazon Bedrock, Amazon Bedrock AgentCore, and Amazon Connect Customer datasets. The connector aggregates secret metadata such as Amazon Resource Names (ARNs), names, descriptions, Key Management Service (KMS) keys, rotation settings, tags, replication status, and resource policies. For more information, refer to Supported Datasets. |
SaaS Connectors - Google Workspace SaaS | The Google Workspace SaaS connector now supports Workforce and Workload Identity Federation principals and principal sets. For more information, refer to Supported Datasets. |
Access Risk Management | The What-If Request Details modal now shows the Security Extract file name instead of an internal extract ID, so users can more easily find and download the matching security extract in Activity History on the Security Extract tab. |
Access Risk Management | When viewing the request details for What If simulations in Access Risk Management, users will now see Security Extract dates converted into their local time zone. |
SaaS Connectors - SAP Ariba SaaS | The SAP Ariba SaaS connector now supports the |
SailPoint Human Fabric - Identity Graph | Access paths that represent rare and/or recently granted access are now indicated using the "warning" indicator, rather than edge colors. |
Connectivity - Oracle Database | The Oracle Database connector now supports Kerberos authentication, including Keytab and Password credential modes. For more information, refer to Connection Settings using Kerberos Authentication. |
SaaS Connectors - Atlassian Suite SaaS | The Atlassian Suite SaaS connector now aggregates Atlassian Cloud non-human identities. The connector loads them in the Atlassian Cloud Service Accounts and Agents dataset. That dataset includes the Atlassian Cloud Service Account, Atlassian Cloud Agent, and Atlassian Cloud Application Account resources. |
Connectivity - Delimited File | The Delimited File connector now supports IAM role-based authentication for AWS S3, so sources can read from S3 without storing a long-lived access key and secret. For more information, refer to Connection Settings. |
SailPoint Human Fabric - Core Access Model | Oversized entitlement custom attributes and direct permissions are now trimmed to 20 MB to reduce DMS outage risk from very large records. |
Fixes
| Product | Issue ID | Fixes |
|---|---|---|
Connectivity - SCIM 2.0 | CONETN-5688 | The SCIM 2.0 connector now applies extended-schema Uniform Resource Name (URN) fallbacks only on |
SaaS Connectors - Microsoft Entra SaaS | CONETN-5681 | The Microsoft Entra SaaS connector now attaches Azure role assignments to service principal accounts during account aggregation when available. Re-run account aggregation after updating the connector to apply these assignments to existing service principal accounts. |
SailPoint Human Fabric - Core Access Model | IDNARC-7555 | Fixed an API issue that blocked delimited file source (SFTP/FTP) aggregation over a virtual appliance. The API aggregation behavior now matches the UI aggregation behavior. |
SaaS Connectors - SAP Fieldglass SaaS | CONETN-5651 | Fixed an issue where the SAP Fieldglass SaaS connector failed Enable and Disable account operations with a 404 Not Found error when provisioning policies were active, because the after-provisioning Get Account request used a duplicated API path. Set |
Connectivity - SaP SuccessFactors SaaS | CONETN-5647 | The SuccessFactors SaaS connector now aggregates accounts with nested |
SailPoint Human Fabric - Core Access Model | IDNARC-7764 | We have restored the access model metadata POST and DELETE methods to the v2026 entitlements API. |
Connectivity - SCIM 2.0 | CONETN-5648 | The SCIM 2.0 connector now allows you to skip filters in |
Connectivity - Amazon Web Services (AWS) IAM Identity Center | CONETN-5637 | The AWS IAM connector now continues provisioning subsequent valid groups in a request even if a single group assignment fails. |
Connectivity - SAP SuccessFactors | CONETN-5611 | The SuccessFactors connector now resolves attribute labels across paginated user account aggregation results. Previously, some accounts received a code instead of the mapped label. This happened when the label was not on the first page of results. This issue affected attributes such as |
Connectivity - Oracle HCM Cloud | CONETN-5484 | The Oracle HCM Cloud connector now disables accounts and preserves the termination date during REST and Atom feed delta aggregations for workers terminated before the aggregation date. |
Access Risk Management | ARM-42575 | Fixed an issue with the Download button appearing in the center of the Access Risk Management emergency access request comment card. Now when users post or read comments, the Download button consistently appears on the bottom right side of the modal. |
Connectivity - SAP GRC | CONETN-5497 | The SAP GRC connector no longer overwrites the configured |