Search

Understanding Identity Refresh Options

Overview The Identity Refresh task of IdentityIQ is a critical component of any IdentityIQ installation. Identity Refresh tasks are used to update Identity attribute details, synchronize attributes to downstream systems, evaluate workflow triggers, evaluate policies and execute many other crucial ...

SailPoint File Upload Utility

Overview The SailPoint File Upload Utility provides a way for SailPoint customers to upload files to Identity Security Cloud automatically, for automatic account and entitlement aggregations. This is an executable Java-based JAR which can be executed with a set of options, or scheduled via CLI uti...

Identity Security Cloud Common Search Queries

This document aims to provide a quick set of commonly-used example search queries.  This should not only give you a good reference of syntax and features, but also how to easily find what you are looking for. For additional information on building search queries, refer to the Search-related topics...

Flat File (Generic) Source Configuration Reference Guide

Overview This document is designed to give specific information about the requirements and field definitions needed to get a working instance of a Flat File (Generic) source in IdentityNow. NOTES: You also have the option to use Delimited File Source Configuration Reference Guide​. After l...

Enhancement: Identity Graph UI Updates

Identity Graph is a highly visual tool that seeks to make easier for organizations to understand and engage with their identity data. To this end, we’ve recently taken steps to simplify Identity Graph’s UI. These updates cover a variety of individual components but ultimately prioritize working spa...

Enhancement: Admin Access Search

The Admin page for viewing identities’ access now has a Search function!

Enhancement: Removing Inactive (long-term) Identities from Overnight Internal Synchronization Job

Identities in the Inactive (long-term) lifecycle state are no longer included in the daily 1:00 AM CT synchronization job. This reduces overnight processing time, particularly for tenants with large numbers of terminated or archived identities.

New Capability: Delete Accounts on Termination via Lifecycle Management

With this release, we’ve added the ability to automatically delete accounts through Lifecycle Management on supported downstream connectors. This highly requested capability (323+ votes in the Ideas Portal) eliminates the need for custom BeforeProvisioning rules. All lifecycle state changes and acco...

Enhancement: Microsoft Entra - Supporting system assigned managed Identities

The SailPoint Microsoft Entra (SaaS) and VA based Connector (Microsoft Entra ID/Azure Active Directory) now supports system assigned managed identities. These are classified as machine accounts (Workload identities in Microsoft Entra)!

New Capability: Machine Account Subtypes

As machine account usage continues to grow, teams need a way to organize and manage accounts that serve very different purposes, such as service accounts, bots, agents, and test accounts. Without clear categorization, these accounts become more difficult to govern and even more challenging to secure...

Enhancement: Refreshed User Experience for Identity Profiles!

We’ve updated the user experience for administrators by bringing Identity Profiles in alignment with our modernized design!

Deprecation: Identity States AI Mapping

With the introduction of Lifecycle Management of Inactive Identities in March 2024, SailPoint provided a more robust means for marking identities as Active, Inactive Short-Term, and Inactive Long-Term. By introducing this capability, administrators have an alternative option to the previously used A...

Enhancement: Refreshed User Experience for Governance Groups

We’ve updated the user experience for administrators by bringing Governance Groups in alignment with our modernized design!

Enhancement: SailPoint® application onboarding – Application Discovery via SSO Okta SaaS sources

SailPoint® application onboarding is introducing an exclusive mechanism for discovering applications via Okta sources.

Enhancement: Exclude Inactive Identities from Attribute Sync!

SailPoint is excited to announce that Inactive (long-term) identities will be excluded from the attribute sync process! This enhancement is available in all sandbox tenants. It will begin rolling out to production tenants on October 7th, 2024.

New Capability - New Identity Attributes, Default Identity Profile Mapping and Transforms

We are excited to share that the new Identity attributes, default Identity profile mapping and two new transforms are now available in the Identity Security Cloud tenants onboarded after 2024-02-07 which will save a significant amount of time for configuring Identity Profile and utilizing the new at...

Business Value Review [IIQ]

Page has been moved to the new Customer Success Knowledge Base here.

Identify exception entitlements shared by all members of same role

Symptoms New Role Members or role owners or leaders report they do not have all the access they need, after role is provided/provisioned.   Diagnosis Roles do not fully provide new members all the access they need.   Solution Review all members and their shared exception entitlemen...

Identity Photos Plugin

Description Identity Photos Plugin Once the Plugin is Installed IdentityIQ will start showing the Photos of Identities on below UI’s : Manage User Access Manage Account Edit Identity View Identity   Integration Info Integration Name/Version Identity Photos 1.0 ...