SailPoint Identity Security Cloud API

SailPoint Identity Security Cloud (formerly IdentityNow) REST API for identity governance and administration. Enables AI agents to manage user access certification and review campaign automation, handle identity lifecycle and joiner-mover-leaver provisioning workflows, access role and entitlement management data, retrieve Separation of Duties (SoD) conflict detection and remediation, manage access request and approval workflow automation, handle identity analytics and risk scoring data, access connector management for application provisioning, retrieve audit log and compliance evidence data, manage password policy and reset workflows, and integrate identity governance with HRMS, Active Directory, and enterprise application provisioning.

Evaluated Mar 06, 2026 (0d ago) vcurrent
Homepage ↗ Repo ↗ Developer Tools sailpoint iga identity-governance access-certification provisioning sod role-management
⚙ Agent Friendliness
70
/ 100
Can an agent use this?
🔒 Security
88
/ 100
Is it safe for agents?
⚡ Reliability
81
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
28
Documentation
88
Error Messages
82
Auth Simplicity
78
Rate Limits
85

🔒 Security

TLS Enforcement
98
Auth Strength
88
Scope Granularity
85
Dep. Hygiene
82
Secret Handling
88

Identity governance. SOC2, ISO27001, GDPR, FedRAMP, HIPAA. OAuth2. Multi-region. Identity entitlements and access governance data.

⚡ Reliability

Uptime/SLA
85
Version Stability
82
Breaking Changes
78
Error Recovery
80
AF Security Reliability

Best When

An enterprise using SailPoint wants AI agents to automate access certifications, identity lifecycle provisioning, SoD compliance, access risk scoring, and HRIS-driven identity governance.

Avoid When

COMPLIANCE+LEGAL RISK: Identity governance automation that approves or removes access without human oversight creates compliance violations (SOX, HIPAA, PCI). Automated SoD remediation that removes access without notification can disrupt business operations. Access certification automation must preserve evidence for audit.

Use Cases

  • Automating access certification campaigns from identity governance agents
  • Managing joiner-mover-leaver provisioning from HR lifecycle agents
  • Detecting SoD violations from compliance automation agents
  • Integrating identity data with HRIS from people ops agents

Not For

  • Consumer identity management without enterprise IGA requirements
  • Simple SSO without governance, certification, and provisioning workflows
  • PAM for privileged credentials without identity governance context

Interface

REST API
Yes
GraphQL
Yes
gRPC
No
MCP Server
No
SDK
Yes
Webhooks
Yes

Authentication

Methods: oauth
OAuth: Yes Scopes: Yes

SailPoint uses OAuth 2.0 for Identity Security Cloud API. Client credentials with identity, certification, access, and reporting scopes. Developer portal at developer.sailpoint.com with interactive docs. Webhooks for identity lifecycle and certification events. SDKs for Python, TypeScript, Go, Java, PowerShell. GraphQL for complex identity queries. Strong open-source community (sailpoint-oss on GitHub).

Pricing

Model: enterprise
Free tier: No
Requires CC: No

Austin, Texas. Founded 2005. NASDAQ: SAIL. Identity Security Cloud leader. $500M+ annual revenue. 3,000+ customers globally. AI-powered identity security with Atlas platform. Strong financial services, healthcare, and manufacturing verticals. Competes with Saviynt and ForgeRock for IGA market.

Agent Metadata

Pagination
cursor
Idempotent
Full
Retry Guidance
Documented

Known Gotchas

  • COMPLIANCE RISK: Access certification automation must preserve human decision audit trail — automated approve/reject without reviewer action violates SOX and HIPAA compliance evidence requirements
  • Rate limits documented — 100 req/10s and 10K/hr; implement token bucket or leaky bucket rate limiting in agent
  • GraphQL and REST both available — GraphQL for complex identity graph queries; REST for provisioning actions
  • SoD remediation automation must notify affected users — removing access for SoD violations without communication disrupts operations
  • Well-documented developer portal — strong SDK support makes this one of the better enterprise IGA APIs for agent integration
  • Tenant-specific base URLs — each org has unique API endpoint; configure base URL per environment

Alternatives

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for SailPoint Identity Security Cloud API.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

$3

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

Scores are editorial opinions as of 2026-03-06.

5691
Packages Evaluated
26151
Need Evaluation
173
Need Re-evaluation
Community Powered