SailPoint Features

Users can request access to an application and be automatically provisioned if they meet policy requirements

Automates account/access rights creation, changes and removals for on-premise and cloud apps

Establish roles that create a set of authentication rights for each user in the role

Enables administrators to create access policies and applies policy controls throughout request and provisioning processes

Terminate access to multiple applications based on dates

Allow business stake-holders/managers to approve or reject requested changes to access via a defined workflow

Enables users to reset passwords without administrator interaction. Enforces password policies when resetting.

Change users and permissions in bulk

Keep identity attributes consistent across applications whether the change is made in the provisioning system or the application

Alerts administrators when inappropriate access occurs

Proactively audits access rights against policies

Standard and customized report creation to ensure appropriate access rights have been assigned

Provides mobile application that alerts administrators of potential issues and allows administrators manage access rights

Support for wide variety of cloud and on premise apps to automate provisioning for existing and new applications procured

Provides appropriate application interfaces to enable custom integrations for unique business requirements

Keep identity attributes consistent across applications whether the change is made in the provisioning system or the application.

Enables administrators to create access policies and applies policy controls throughout request and provisioning processes.

Provides or integrates with a cloud based directory option that contains all user names and attributes.

Integrates with common applications such as service desk tools.

Provides ability to track and/or map spending on all tools across departments with little to no manual entry.

Continuously tracks the number of licenses in use and how often they are being utilized. Tracks usage internally or through integrated applications.

Allows companies the ability to periodically survey users regarding the effectiveness of SaaS applications and their experience using the tools.

Provides administrative features to renew, track pricing, analyze terms, and outline expiration dates for SaaS contracts.

Allows companies to select a wide variety of applications to track and manage.

Presents information and analytics in a digestible, intuitive, and visually appealing way.

Provides recommendations on how to improve your use of existing SaaS tools and recommendations on new SaaS tools

Ability to project spend based on contracts signed. Identifies redundant transactions and unnecessary costs.

Facilitates the comparison of your software products, costs, sentiment, and/or utilization to that of peer companies

Creates reports outlining application utilization, cost, user sentiment, and/or functional overlap.

Allows users to set, change passwords easily without interaction from IT staff.

Integrates with your mobile device for use on mobile apps.

Accommodates multiple languages.

Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are.

Uses biometric trait or characteristic to authenticate. Additional hardware may be required to support this type.

Provides authentication capabilities outside standard authentication methods such as MFA and biometric .

Able to assign authentication requirements for different levels of users, such as more robust authentication for senior level executives.

Searches structured, semi-structured, and unstructured data for sensitive data.

Offers contextual search functions to understand factors such as file type, sensitivity, user type, location, and other metadata.

Has template rules and pattern matching algorithms (PII, PCI, PHI and more)

Offers the option to create custom templates and rules based on department, user type and data type.

Offers false-positive management functions

Search multiple file types (images, PDFs, etc.) and repository locations (such as on-premise databases, cloud storage, email servers, websites, etc.)

Monitors data stores in real-time searching for newly created sensitive data.

Offers a dashboard showing specific location of sensitive data.

Facilitates compliance and enables adherence to common industry regulatory standards such as GDPR, CCPA, HIPAA, PCI DSS, ISO, and others.

Offers reporting functionality.

Simplifies or automates user provisioning, deprovisioning, and other user role changes.

Offers password management tools to end users.

Offers single sign-on functionalities to end users, allowing them to authenticate once and be given access to all of their company accounts.

Enforces user-access policies based on individual, role type, group membership or other factors to prevent unauthorized access to company systems and data.

Authenticates users prior to granting access to company systems.

Offers multi-factor authentication methods to verify a user's identity.

Provides an IAM solution for on-prem systems.

Provides an IAM solution for cloud-based systems.

Tracks user activities across protected systems.

Provides reporting functionality.

Log and report all modifications to user roles and access rights.

Provide standardized reports for regulatory compliance and audits.

Investigate identity threats with contextual user information.

Monitor & detect malicous identity and privileges activity

Identify identity-related misconfigurations.

Offers integrations to identity store providers.

Provide full coverage of identity estate with granular detail.

Remove unauthorized accounts and excessive privileges

Provides full audit trail with notifications, ticketing, and compliance information.

Helps define policies for access management

Uses principle of least privilege to ensure access control at granular level of specific resources and apps

Enables organization to define roles and assign access based on these roles

Streamlines the management of user access through AI

Tracks and logs user activities, access requests, and changes to entitlements

Detects and remediates risky, misconfigured permissions for human and machine identities using AI

Provides visibility into all users and identities across the system

Provides reporting capabilities to demonstrate compliance

Tracks SaaS application usage by user, team, and department.

Enables creation of tailored automations for IT and admin tasks.

Identifies both sanctioned and unsanctioned SaaS applications in the environment.

Allows employees to request and access approved SaaS applications.

Offers a unified interface for managing licenses, users, and applications.

Automates workflows for provisioning and deprovisioning user access.

Assigns access based on user roles and policy rules.

Sends alerts on unauthorized access or app misconfigurations.

Tracks regulatory compliance across SaaS applications.

Populates custom app metadata using AI.

Provides real-time answers to questions about licenses, apps, and usage.

Tracks SaaS application spend against allocated budgets.

Identifies opportunities to reduce spend by consolidating redundant or overlapping vendors.

Sends alerts for upcoming contract renewals.

Uses AI to extract line items, auto-renewals, and key terms from SaaS contracts.

Assigns SaaS costs to departments, teams, or business units.

Projects upcoming renewal costs based on contract and license data.

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Works across multiple software systems or databases

Anticipates needs and offers suggestions without prompting

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Works across multiple software systems or databases

Improves performance based on feedback and experience

Engages in human-like conversation for task delegation

Anticipates needs and offers suggestions without prompting

Makes informed choices based on available data and objectives

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Works across multiple software systems or databases

Improves performance based on feedback and experience

Engages in human-like conversation for task delegation

Anticipates needs and offers suggestions without prompting

Makes informed choices based on available data and objectives

Grant access based on user attributes, location, device posture or risk.

Automate onboarding, offboarding, and access reviews throughout user lifecycles.

Enable users to reset passwords and update profiles without admin support.

Identify unusual access patterns using machine learning models.

Dynamically adjust access policies based on risk and AI-generated insights.

Suggest appropriate user roles based on usage patterns and peer behavior.

Provide real‑time visibility into data exposures and activities.

Automatically scan across cloud, SaaS, on‑prem environments to locate and tag sensitive data.

Allow business‑specific or regulatory data labels beyond default frameworks.

Identify over‑permissioned users, roles, or accounts in combination with misconfigurations.

Assess data risks against regulatory frameworks and internal policies.

Prioritize findings based on data sensitivity, exploitability, and business impact.

Provide context‑aware recommendations for fixing exposures (e.g., revoke access, encrypt, misconfiguration remediation).

Integrate with CSPM, CIEM, SOAR, SIEM for automated policy enforcement.

Monitor posture over time and track remediation efforts.

Supports automated rotation and revocation of credentials or tokens for non-human identities.

Automates the creation of non-human identities (devices, bots, service accounts) according to policy.

Removes or disables non-human identities when they are no longer required or the workload is retired.

Enforces least-privilege access for non-human identities via granular permissions and scopes.

Supports authenticating non-human identities using tokens, certificates, or machine-native credentials rather than human-oriented logins.

Provides dynamic, context-based access for non-human identities (e.g., JIT elevation, temporal constraints).

Applies and enforces policies (e.g., least-privilege, separation-of-duties) specifically for non-human identities.

Logs and monitors all access and usage of non-human identities for forensic and compliance purposes.

Integrates non-human identity management with existing identity-access systems, DevOps pipelines, and cloud infrastructure.

Discovers, classifies, and maintains an inventory of all non-human identities across environments.