Virtual Appliance

Virtual Appliance Release Notes - September 17, 2026

Virtual Appliance (VA) release notes might contain references to SailPoint software and Flatcar operating system updates that SailPoint will automatically apply.

SailPoint Software

2026.9.17 - Version 2.36, CCG 1318

New features

ProductWhat's new

Connectivity - JDBC

The JDBC connector now supports the Dataset Resource model to aggregate non-human identity (NHI) entities, including Agent, MCP Server, and Tools, etc. The connector aggregates dataset resources such as Agent along with their capabilities and relationships between them. The connector also supports agent owner correlation for streamlined access governance. For more information refer to Dataset Management.

Connectivity - REST WebServices Connector

The WebServices connector now supports the Dataset Resource aggregation model to aggregate non-human identity (NHI) entities, including Agent, MCP Server, and Tools, etc. The connector aggregates dataset resources such as Agent along with their capabilities and relationships between them. The connector also supports agent owner correlation for streamlined access governance. For more information refer to Dataset Management.

Connectivity - N8N

The N8N connector is now available. The connector supports

  • Account and entitlement aggregation for N8N platform users and team projects.
  • Extended visibility into non-human identities (NHIs) by aggregating workflows, AI agents, tools, MCP clients, MCP servers, and stored credentials.

For more information, refer to Integrating SailPoint with N8N.

Enhancements

ProductFeature enhancements

Connectivity -Microsoft Entra ID

The Microsoft Entra ID connector now uses the Azure Resource Graph API to aggregate both resource-attached and policy-assigned system-assigned managed identities (SAMIs) in a single request, ensuring complete managed identity coverage.

Connectivity - SalesForce

SaaS Connectors - Salesforce SaaS

The Salesforce connector now persists Salesforce-rotated refresh tokens and renews access tokens automatically for sources configured with External Client Application authentication. This prevents reauthorization prompts following concurrent aggregation or provisioning operations.

Migrate your Salesforce source to External Client Application authentication to use this enhancement. For migration details, refer to Announcement: ISC Salesforce Connector Migration to External Client App and Announcement: Salesforce External Client App is now Available.

Connectivity - Oracle HCM Cloud

The Oracle HCM Cloud connector now supports the following employee feeds:

  • Person Work Relationship Canceled (cancelworkrelship) – Captures the cancellation of a worker’s period of service.
  • Employee Work Relationship Updated (workrelshipupdate) – Captures updates to a worker’s work relationship.

Fixes

ProductIssue IDFixes

Connectivity - Workday

CONETN-5498

Fixed an issue where the Workday connector preferred a future termination over a future hire during single account aggregation when a worker had multiple future actions within the effective date offset, even when preferFutureTerminatedRecord was set to true.

Connectivity - SAP Concur

CONETN-5500

Fixed an issue where the SAP Concur connector failed to deprovision roles that included EXP_EMPLOYEE_ADMIN::Global when they were removed with other roles in the same request.

Connectivity - SAP SuccessFactors

CONETN-5473

The SailPoint SuccessFactors connector Fixed a timeout error in single account aggregation. The error occurred on sources with large Cost Center master data. It affected account schemas that included the CostCenter and CostCenterID attributes. The connector now retrieves only the Cost Center record that the aggregated account requires.

Connectivity -ServiceNow

CONETN-5479

The ServiceNow Identity Governance connector now applies the configured connectionTimeout value to API requests. The default value is 180 seconds.