Virtual Appliance

Virtual Appliance Release Notes - April 16, 2026

Virtual Appliance (VA) release notes might contain references to SailPoint software and Flatcar operating system updates that SailPoint will automatically apply.

SailPoint Software

2026.4.16 - Version 2.25, CCG 1212

New features

ProductWhat's new

Connectivity - LDAP

The SailPoint Lightweight Directory Access Protocol (LDAP) connectors now support account move and rename operations. This capability is supported by the following LDAP connectors:

Connectivity - Quick Compliance

Identity Security Cloud now supports the following connectors as Quick Compliance connectors:

You can now expediently configure read-only connections to these sources for account and entitlement aggregation. For a full list of supported Quick Compliance sources, refer to Quick Compliance.

Connectivity - Delimited File

The SailPoint Delimited File connector now has an option for VA-based connectivity. This new connectivity approach supports different file transport mechanisms for reading files from SFTP, FTPS, SCP servers, and Amazon Web Services S3 locations. This also supports encryption, filtering, parsing, and data merging capabilities. For more information, refer to Integrating SailPoint with Delimited File Source.

Enhancements

ProductFeature enhancements

Connectivity - Atlassian Data Center, Atlassian Suite-Cloud , Oracle Database, RACF (Read Only), TSS Read Only

Identity Security Cloud now governs direct account permissions for the following systems:

  • Atlassian Suite (Cloud)
  • RACF (read-only)
  • Top Secret (read-only)
  • Oracle DB
  • Atlassian - Data Center

Connectivity - Microsoft Entra ID

The Microsoft Entra ID connector now supports aggregating and provisioning External Member accounts. For more information, refer to External Member.

Connectivity - UKG Pro, UKG Pro Core HCM SaaS

The SailPoint UKG Pro connector has been enhanced to include a partner-id HTTP header in every API request, improving traceability, governance, and partner identification.

Connectivity - BMC ITSM, BMC Remedy, Service Desk Integrations

To support BMC connectors, SailPoint requires access to the organization's BMC sandbox or development environment.

Connectivity - Microsoft Entra ID

The Microsoft Entra ID connector now supports aggregation and provisioning of the sponsors attribute. For more information, refer to Configuring Sponsors for B2B users.

Connectivity - SAP GRC

The SailPoint SAP GRC connector is now enhanced to the Risk Analysis integration mode in IdentityIQ to remove the Axis2 dependency for API execution, improving stability and maintainability with no functional impact.

Fixes

ProductIssue IDFixes

Connectivity - SCIM 2.0

CONETN-5329

The SailPoint SCIM 2.0 connector now correctly handles complex, multi-valued attributes during an update operation for relaxed configurations, ensuring the payload is formed as expected.

Connectivity - Amazon Web Services (AWS) IAM Identity Center

CONETN-5345

The SailPoint Amazon Web Services (AWS) IAM Identity Center connector now correctly processes bulk provisioning operations for Permission sets.

Connectivity - Snowflake

CONETN-5313

The SailPoint Snowflake connector now throws an ObjectNotFoundException if a role does not exist on the target system during a getObject Operation for a Role.

Connectivity - IBM Tivoli DS

CONETN-5328

The SailPoint IBM Tivoli Direct connector now adheres to the disableDefaultGroupClassFilter: true setting in source configuration, skipping default group search filter creation during membership aggregation.