Extending SailPoint Identity Security to Microsoft Entra

[AmyL]

As more enterprises adopt SailPoint to meet demanding identity security needs, customers are also demanding increased connectivity for Microsoft Entra ID (formerly known as Azure Active Directory). Dinesh Mishra, product manager for SailPoint Connectivity, explains more about how SailPoint is doing just that...

Applying core SailPoint identity security – including access certifications, access requests, separation-of-duty policies, role management, and audit reporting -- to the critical applications that businesses use every day is key to a solid security posture. 

Nearly every SailPoint customer uses Microsoft Entra ID. Its feature-rich enterprise-level access management capabilities give hybrid computing users the ability to seamlessly access both on-premises and cloud applications.   

Extending SailPoint identity security to both Active Directory and Entra ID access management capabilities is important to enterprise customers. SailPoint’s expansion of deeper Microsoft integrations – including direct SaaS connectivity – delivers a more powerful and complete identity security solution. 

Focus on expanded Microsoft connectivity 

The Microsoft connectivity landscape has been one of SailPoint’s strategic initiatives for the last several years and has been especially focused on deeper integration of Microsoft capabilities within our holistic identity security solution. 

SailPoint has delivered deeper and expanded Microsoft connectivity over the last year to meet the evolving needs of customers, including:

SailPoint has delivered deeper and expanded Microsoft connectivity over the last year to meet the evolving needs of customers, including: 

• Identifying and delivering support for such critical and complex features as managing Service Principals for enterprise applications as accounts – for which our customers need added identity security capabilities. 
• We’ve also extended this initiative beyond Service Principals to manage all types of accounts, including workload identities and contacts. This includes managing user-assigned managed identities as “accounts,” and supporting Azure contact objects as “accounts.” 
• Expanded SaaS-to-SaaS connectivity with the introduction of a Microsoft Entra SaaS connector for our Identity Security Cloud SaaS solution. Customers can now connect with Microsoft Entra without a virtual appliance (VA). And the addition of more configuration options directly from the UI means customers experience much quicker source onboarding. 
• More security capabilities, including support for MFA attributes (aggregation and provisioning); support for identity governance access packages; and support for group hierarchy/nested groups.  
• Provisioning improvements, including support for customized messages in the invitation email for B2B guest users; provision support of the userIdentities attribute. 
• Performance optimization, including the ability to support filters during entitlement aggregation for available and supported object types; and improvements to the Azure AD Delta Aggregation. 
• Certifications for business continuity, including the ability to certify the connector for Exchange Online PS V3 API. 
• Additional Active Directory capabilities, including support for the domain NetBIOS attribute as a part of account and group aggregation; and the ability to use an updated GUID/DN during provisioning operations. 

Get stronger enterprise identity security with Microsoft connectivity 

SailPoint’s core identity security capabilities enhance Microsoft Entra’s unique access management and identity protection services for a more complete enterprise identity security solution. 

This focus on strategic connectivity with Microsoft and other critical applications and systems gives enterprises the increased compliance, security, and identity management requirements they need to stay both competitive and secure. 

Questions? Comments? Let us know! 

We want to hear your stories and experiences about your identity security journey and better understand how SailPoint’s expanded connectivity options can spur your success.

You can also send requests and suggestions for other connectivity here. We look forward to your feedback!