SailPoint Identity Security Cloud

Large enterprises face a growing challenge in managing thousands to millions of identities across on-premises and cloud environments, where security, compliance, and seamless access must coexist. Identity and Access Management (IAM) aims to ensure the right people have the right access at the right time for the right reasons, and requires a modern, agile platform. Within IAM, Identity Governance and Administration (IGA) focuses specifically on governing and administering identities through two core elements: Identity Provisioning and Access Governance. Provisioning automates the creation and management of users and high-level entitlements across many systems, while Access Governance adds oversight to monitor and mitigate access risk, analyze entitlements, strengthen reviews and recertifications, and govern access controls.

IGA remains difficult due to the complexity of identity data visualization, the effort required to build role-based entitlements with discipline and structure, and the need to automate provisioning and recertification to reduce manual work. This is driving increased adoption of AI and machine learning to make identity security more autonomous, intelligent, and integrated. SailPoint’s Identity Security Cloud is presented as a pioneering multi-tenant SaaS platform that applies AI-driven capabilities to IGA and cloud governance. It offers Business and Business Plus packages with shared features such as access requests/approvals, automated provisioning, certifications, cloud governance, role modeling, separation of duties, access insights, recommendations, and low-code SaaS workflows.

Business Plus adds advanced capabilities including access modeling, Cloud Infrastructure Entitlement Management (CIEM), and SaaS management to address complex cloud privilege paths, least-privilege posture, and shadow IT. Overall, the platform is positioned as robust and autonomous, with strengths in AI-driven features, certifications, self-service, and access history, while challenges include simplifying identity data, implementation complexity, and integration dependencies.

• Identity Governance and Administration (IGA) includes Identity Provisioning and Access Governance.
• Identity Provisioning can automatically create and manage users and high-level entitlements across many systems and applications.
• Access Governance focuses on monitoring and mitigating access risk, analyzing entitlements, and improving reviews and recertification.
• SailPoint is headquartered in Austin, Texas.
• SailPoint Identity Security Cloud is delivered as a multi-tenant SaaS platform.
• SailPoint Identity Security Cloud has two offerings: Business and Business Plus.
• Both packages include access requests and approvals, automated provisioning, access certifications, cloud governance, role modeling, separation of duties, access insights, recommendations, and SaaS workflows.
• The Identity Outlier capability identifies identities with access that is out of the norm and assigns an outlier score based on multiple factors.
• Business Plus adds access modeling, Cloud Infrastructure Entitlement Management (CIEM), and SaaS management.
• SailPoint CIEM supports governing and remediating access across Microsoft Azure, Amazon Web Services, and Google Cloud Platform.

• “Ensuring that only the right people have access to the right resources at the right time for the right reasons is the goal of Identity and Access Management (IAM) systems.”
• “IGA, in fact, is a subset of IAM that deals with the governance and administration of user identities.”
• “Unfortunately, IGA has its problems too.”
• “Essentially, identity today needs autonomous, intelligent, and integrated approaches.”
• “The SailPoint Identity Security Cloud is a single platform that adds AI-based capabilities to IGA and cloud governance via multi-tenant SaaS deployment.”
• “The Business package provides core identity governance capabilities while the Business Plus provides additional advanced features.”
• “This feature uses AI with machine learning to understand what access users should and should not have, and provide recommendations to help stakeholders make fast and accurate access decisions.”
• “Identity Outlier consists of spotting and identifying identities that have access that is out of the norm either structural or individual.”
• “IGA must become agile and comprehensive to serve the business needs in today's digital transformation.”
• “Moving to a modern IGA platform is not just a simple project, it is a journey, in the context of the broader digital journey of the organization.”