SaaS
SaaS Release Notes - October 8, 2026
Release notes cover new features, enhancements, and fixes that have been released to production.
SailPoint Identity Security is SailPoint's next-generation identity security solution. The release notes cover both SailPoint Human Fabric and SailPoint Agentic Fabric features.
New features
| Product | What's new |
|---|---|
SaaS Connectors - Okta SaaS | The Okta SaaS connector now supports SailPoint Non-Human Identity (NHI) Discovery. By default, the connector discovers OpenID Connect applications as non-human identities, with the option to configure all Okta application types. It also discovers associated OpenID Connect client secrets and public keys (JWKs), and correlates Okta admin API tokens to the users who created them. For more information, refer to Integrating SailPoint with Okta SaaS. |
SaaS Connectors - OpenAI SaaS | SailPoint introduces a new OpenAI SaaS connector. The connector manages OpenAI users, roles, and groups, and discovers API keys and certificates as credentials. For more information, refer to Integrating SailPoint and OpenAI SaaS. |
SaaS Connectors - Sources and Account Management | SailPoint SaaS connectors now have an option to download the connector operations log from the respective source configuration UI. |
Enhancements
| Product | Feature enhancements |
|---|---|
SaaS Connectors - Azure DevOps SaaS | The Azure DevOps SaaS connector now supports Azure DevOps Secret and Azure DevOps Secure File as non-human identity (NHI) credential types through SailPoint Agentic Fabric. For more information, refer to Dataset Management. |
SaaS Connectors - Google Workspace SaaS | The Google Workspace SaaS connector now supports Google API Keys as non-human identity (NHI) credential types through SailPoint Agentic Fabric. For more information, refer to Supported Datasets. |
SaaS Connectors - Microsoft Entra SaaS | The Microsoft Entra SaaS connector now supports app client secrets, certificates, federated credentials, and SAML certificates as non-human identity (NHI) credential types through SailPoint Agentic Fabric. For more information, refer to Dataset Management. |
Connectivity - Delimited File | The Delimited File connector now supports SMB file transport to aggregate account and entitlement files from SMB2 or SMB3 shares on Windows File Server or Samba using Kerberos authentication. |
Connectivity - Microsoft Entra ID | The Microsoft Entra ID connector now includes default identity profile mappings. When you create a new identity profile on a Microsoft Entra ID source, identity attributes are automatically mapped from the account schema. You can edit or remove these mappings as needed. Existing identity profiles remain unchanged. For more information, refer to Identity Profile Mapping. |
Connectivity - Okta | The Okta connector now includes default identity profile mappings. When you create a new identity profile on an Okta source, identity attributes are automatically mapped from the account schema. You can edit or remove these mappings as needed. Existing identity profiles remain unchanged. For more information, refer to Identity Profile Mapping. |
SaaS Connectors - Okta SaaS | The Okta SaaS connector now includes default identity profile mappings. When you create a new identity profile on an Okta SaaS source, identity attributes are automatically mapped from the account schema. You can edit or remove these mappings as needed. Existing identity profiles remain unchanged. For more information, refer to Identity Profile Mapping. |
SaaS Connectors - Microsoft Entra SaaS | The Microsoft Entra SaaS connector now includes default identity profile mappings. When you create a new identity profile on a Microsoft Entra SaaS source, identity attributes are automatically mapped from the account schema. You can edit or remove these mappings as needed. Existing identity profiles remain unchanged. For more information, refer to Identity Profile Mapping. |
SaaS Connectors - Microsoft Entra SaaS | The Microsoft Entra SaaS connector now supports owner information in string format. For more information, refer to Service Principal as Accounts Attributes. |
SaaS Connectors - Atlassian Suite SaaS | The Atlassian Suite SaaS connector now supports Atlassian service account personal access tokens for authentication. You can use a service account for Test Connection, account aggregation, entitlement aggregation, and provisioning. Enable and disable operations still require an organization admin token. |
SaaS Connectors - Web Services SaaS | The Web Services SaaS connector now supports a Custom Authentication |
SaaS Connectors - Microsoft Entra SaaS | The Microsoft Entra SaaS connector now supports aggregation and provisioning of custom security attributes for service principals and managed identities. |
Connectivity - SAP SuccessFactors | The SuccessFactors connector now generates SAML assertions using native Java APIs instead of the ESAPI library. |
Fixes
| Product | Issue ID | Fixes |
|---|---|---|
SaaS Connectors - Snowflake SaaS | CONETN-5682 | The Snowflake SaaS connector now resolves an account aggregation failure caused |
Connectivity - JDBC | CONETN-5687 | The JDBC connector now logs the update SQL query in the connector logs at the DEBUG level. |
SaaS Connectors - SAP S/4HANA Cloud SaaS | CONETN-5690 | The SAP S/4HANA Cloud SaaS connector now supports |
SaaS Connectors - Snowflake SaaS | CONETN-5669 | The Snowflake SaaS connector now sends an empty |
Connectivity - REST WebServices Connector | CONETN-5649 | Resolved an issue where the Web Services connector's long-running account aggregations failed during token renewal with a |
SailPoint Human Fabric - Identity Graph | DZ-4035 | Improvements have been made to the dynamic layout in order to properly set zoom level upon graph render. |
SaaS Connectors - Workday SaaS | CONETN-5650 | Fixed an issue where the Workday SaaS connector treated workers with a future termination date as already terminated during aggregation when the Terminated attribute was mapped and the termination date fell within the effective date offset. |
Connectivity - SAP SuccessFactors | CONETN-5612 | The SuccessFactors connector no longer fails full account aggregation with a |
SaaS Connectors - Web Services SaaS | CONETN-5605 | The Web Services SaaS connector now omits unresolved |