SaaS

SaaS Release Notes - October 16, 2026

Release notes cover new features, enhancements, and fixes that have been released to production.

SailPoint Identity Security is SailPoint’s next-generation identity security solution. The release notes cover both SailPoint Human Fabric and SailPoint Agentic Fabric features.

New features

Product	What's new
SaaS Connectors - Quick Compliance	SailPoint Human Fabric now supports the following connectors as Quick Compliance connectors: Dispatch iMeet Central Lightdash Pumble You can now expediently configure read-only connections to these sources for account and entitlement aggregation. For a full list of supported Quick Compliance sources, refer to Quick Compliance.
SailPoint Human Fabric - Effective Privilege	Effective privilege is now calculated for access objects. Admins can view hidden inherited privileges resulting from relationships with other access objects, including nested relationships. Effective privilege appears throughout the admin and user interfaces and can be used in Search to find classified access objects. Refer to Effective Privilege for more information.
SailPoint Human Fabric - SoD	Organizations with SailPoint Access Intelligence Center (AIC) can now create visualizations using separation of duties (SoD) data to help correct, manage, or audit violations in line with their control processes.

Enhancements

Product	Feature enhancements
SaaS Connectors - AWS SaaS	The AWS SaaS connector now supports policy aggregation such as managed, customer-managed, and inline policies for Machine Identity Security and Agentic Identity Governance tenants, with no changes to existing Cloud Access Management and Cloud Infrastructure Entitlement Management (CIEM) behaviors.
Connectivity - Guidewire PolicyCenter	The Guidewire PolicyCenter connector now supports the Guidewire Olos release (2025.11), with application version 50.15.x. For more information, refer to Supported Managed Systems.
Connectivity - Guidewire ContactManager	The Guidewire ContactManager connector now supports the Guidewire Olos release (2025.11), with application version 50.15.x. For more information, refer to Supported Managed Systems.
Connectivity - Guidewire ClaimCenter	The Guidewire ClaimCenter connector now supports the Guidewire Olos release (2025.11), with application version 50.15.x. For more information, refer to Supported Managed Systems.
SaaS Connectors - Guidewire ContactManager SaaS	The Guidewire ContactManager SaaS connector now supports the Guidewire Olos release (2025.11), with application version 50.15.x. For more information, refer to Supported Managed Systems.
SaaS Connectors - Guidewire BillingCenter SaaS	The Guidewire BillingCenter SaaS connector now supports the Guidewire Olos release (2025.11), with application version 50.15.x. For more information, refer to Supported Managed Systems.
SaaS Connectors - Guidewire ClaimCenter SaaS	The Guidewire ClaimCenter SaaS connector now supports the Guidewire Olos release (2025.11), with application version 50.15.x. For more information, refer to Supported Managed Systems.
SaaS Connectors - Guidewire PolicyCenter SaaS	The Guidewire PolicyCenter SaaS connector now supports the Guidewire Olos release (2025.11), with application version 50.15.x. For more information, refer to Supported Managed Systems.
Connectivity - Microsoft Entra ID	The Microsoft Entra ID connector now supports aggregation and provisioning of custom security attributes for service principals and managed identities.
Non-Employee Risk Management	Lifecycle workflows in Non-Employee Risk Management now include a History tab. On this tab, administrators can review updates to the workflow and its steps. Select an event to see more details about that event. The History tab includes events that took place after this functionality was enabled. For more information, refer to Tracking Workflow Updates.
SailPoint Human Fabric - Core Access Model	AI Privilege Discovery has been enhanced to display entitlements that are candidates for privilege classification on the Entitlement Recommendations page. Reviewing and tuning these candidates will improve future privilege level recommendations.
Connectivity - Guidewire BillingCenter	The Guidewire BillingCenter connector now supports the Guidewire Olos release (2025.11), with application version 50.15.x. For more information, refer to Supported Managed Systems.
SaaS Connectors - AWS SaaS	Administrators onboarding an Amazon Web Services (AWS) account to SailPoint Agentic Fabric through AWS Identity and Access Management (IAM) Temporary Delegation can now retry a partially successful deployment without restarting onboarding, running the retry only on the failed accounts.
SailPoint Human Fabric - Just-In-Time	Privilege on Demand adds the following capabilities to Just-In-Time (JIT) access provisioning: Activation policy, including business justification, ServiceNow ticket validation, and reauthentication. Duration policy. Slack integration. Admins can require checks when a user activates Just-In-Time access and set how long that access lasts using policy-based context. Refer to Privilege on Demand and Configuring Just-In-Time Access for more information.
Access Risk Management	The User Risk Details report now has the option to display directly assigned SAP profiles on the Action Level Details and the Permission Level Details tabs. Enable this column by right-clicking anywhere on the table grid and selecting Chart exploration, then selecting the checkbox next to the SAP Profile column.
SailPoint Human Fabric - Provisioning and Task Manager	Manual provisioning tasks on a source can now be assigned to a governance group. Only one member of the group is required to complete the task. Completions are audited per member, and existing task notification templates are sent to each member of the group.

Fixes

Product	Issue ID	Fixes
SaaS Connectors - SAP Fieldglass SaaS	CONETN-5663	Fixed an issue where the SAP Fieldglass SaaS connector failed account creation when the User Upload step ran before SAP Fieldglass finished propagating the newly created user, causing failures from propagation delays in SAP Fieldglass.
SaaS Connectors - SAP SuccessFactors SaaS	CONETN-5664	The SuccessFactors SaaS connector now populates attributes for pre-hire accounts during full account aggregation when Aggregate Pre-Hire is enabled and the start date is in the future. Set `prehireFutureBucket` to true on the source to apply this fix. The connector disables these pre-hire accounts.
SaaS Connectors - SAP BTP Cockpit Cloud Foundry SaaS	CONETN-5636	The SAP BTP Cockpit Cloud Foundry SaaS connector now supports opt-in retry for provisioning failures, including a 429 Too Many Requests error. To enable it, set btpEnableRetry to true on the source. For more information, refer to Integrating SailPoint with SAP BTP Cockpit Cloud Foundry SaaS.
SailPoint Cloud Infrastructure Entitlement Management (CIEM)	CAM-32833	Fixed an issue where SailPoint CIEM stopped processing and displaying cloud scopes after the first 10,000 results. All cloud scopes are now shown on the Cloud Scopes page.
Connectivity - SAP Direct	CONETN-5624	Fixed an issue where the SAP Direct connector left the Roles attribute empty on Organization Data entitlements during entitlement aggregation when a large number of organization objects caused the role query to exceed database parameter limits. Set `enableOrgDataRolesBucketing` to `true` to enable this behavior.
SaaS Connectors - CyberArk Privilege Cloud SaaS	CONETN-5555	Fixed an issue where the CyberArk Privilege Cloud SaaS connector reported provisioning operations as successful in SailPoint Human Fabric when the operation failed at the connector.
Connectivity - Workday	CONETN-5434	Fixed an issue where the Workday connector incorrectly marked workers as rescinded during delta aggregation when Hire Date and Termination Date were missing from the response. Set `skipWorkerWithoutHireAndTerminateDate` to `true` to enable this behavior.