SailPoint is seeking a motivated Financial Systems Administrator for our Financial Systems team within the global IT organization. This individual will focus on the development, configuration, and support of our core business applications, with a primary focus on Coupa (Procurement and Expense) and secondary responsibilities for Skilljar (LMS) and Egencia (Travel). The successful candidate will bring a strong problem-solving approach to enhancing and maintaining the performance, data integrity, and workflows of our Procure-to-Pay (P2P), Learning Management, and Travel applications. Additionally, this position will participate in the delivery of IT services and ensure internal client satisfaction. Ideal candidates will have a foundational understanding of procurement operations, SaaS applications, expense management, and systems integration in a dynamic, high-growth environment.
· System Configuration: Configure, develop, and maintain the Coupa platform (Procurement, Invoicing, Expense) as well as Skilljar and Egencia, tailoring features to meet evolving business needs.
· Quality Assurance & Testing: Lead QA and end-to-end testing cycles for system release upgrades and internal rollouts. Develop and execute test scripts to ensure system stability before deployment.
· Workflow Development: Assist in building and modifying approval chains, custom fields, forms, and workflow rules across all supported platforms to streamline internal operations.
· Integrations Management: Support the integration of Coupa with core financial systems (e.g., NetSuite) via APIs, flat files, and cXML. Monitor and assist with integrations for Egencia (e.g., SCIM Provisioning with Entra ID) and Skilljar (e.g., Avalara connectors, Proctoring).
· Production Support: Manage and resolve production support issues, acting as the escalation point for complex incidents across the Coupa, Skilljar, and Egencia environments.
· Documentation: Develop and maintain comprehensive technical documentation, including configuration guides, QA testing plans, integration data maps, and support procedures for all managed systems.
· Cross-Functional Collaboration: Collaborate with Procurement, Finance, HR, Education Services and IT teams to ensure effective communication and alignment on business processes.
· Compliance & Security: Ensure system configurations comply with IT security and regulatory standards (e.g., SOX, Information Security) during any enhancement or deployment.
First 30 Days (Learning & Onboarding):
· Complete initial onboarding and required internal system training.
· Shadow senior developer to understand SailPoint’s current architecture, integrations, Procure-to-Pay/Expense, and travel processes.
· Review existing technical documentation and business process maps.
· Begin handling Level 1 and Level 2 support tickets (e.g., user access, basic routing errors, expense policy inquiries) under supervision.
· Gain familiarity with the sandbox environment by executing basic test scripts.
First 60 Days (Contribution & Configuration):
· Take ownership of standard support tickets and resolve them independently.
· Execute small configuration tasks such as updating approval matrices, creating custom fields, or modifying expense auditing rules.
· Assist in the QA and testing phases for upcoming patches or minor system enhancements.
· Identify at least one area in the current support documentation that can be updated or improved.
· Participate in requirement-gathering sessions with business stakeholders alongside senior developers.
First 90 Days (Development & Ownership):
· Successfully develop and deploy a minor enhancement or workflow change from start to finish.
· Gain a solid understanding of the integration touchpoints between Coupa and the core ERP (NetSuite), assisting with integration monitoring and error handling.
· Proactively identify recurring user issues and propose sustainable configuration solutions or user-training opportunities.
· Act as a reliable point of contact for basic Coupa functionality and troubleshooting for the Procurement and Finance teams.
· 2–5 years of experience working with financial or business systems (SaaS platforms), with direct experience configuring or supporting Coupa being a strong advantage.
· Exposure to or experience with Learning Management Systems (e.g., Skilljar) or Travel Management platforms (e.g., Egencia) is a plus.
· Foundational understanding of Procure-to-Pay (P2P) and Expense Management processes.
· Exposure to systems integration concepts (APIs, flat-file transfers, cXML, SCIM Provisioning) and basic scripting is highly preferred.
· Experience running QA testing, creating test scripts, and managing sandbox environments.
· Solid knowledge of IT compliance frameworks (SOX, Information Security) as they relate to financial systems.
· Strong analytical, problem-solving, and organizational skills.
· Effective verbal and written communication skills across technical and non-technical teams.
· Bachelor’s degree in Information Systems, Computer Science, Finance, or a related field.
· Coupa Platform Certification is a strong plus.
SailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.
Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. Contact [email protected] or mail to 11120 Four Points Dr, Suite 100, Austin, TX 78726, to discuss reasonable accommodations. NOTE: Any unsolicited resumes sent by candidates or agencies to this email will not be considered for current openings at SailPoint.
SailPoint provides identity security solutions to help enterprises manage and secure digital identities. Its products IdentityIQ, IdentityNow, and File Access Manager offer identity governance, access provisioning, certification, and file access control to ensure compliance and reduce risk. The platform uses AI and machine learning to improve access decisions and detect anomalies across on‑premises and cloud environments. The company operates on a subscription model that combines software licenses, maintenance, and professional services, aiming to help large organizations meet regulatory requirements and minimize identity-related risk.
Company Size
1,001-5,000
Company Stage
IPO
Headquarters
Austin, Texas
Founded
2004
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
SailPoint unveils AI identity agents, runtime controls at Navigate. SailPoint (NASDAQ:SAIL) used its Navigate conference briefing to outline product updates centered on securing both human and AI identities, including autonomous agents, runtime authorization controls, expanded cloud infrastructure support and a redesigned user interface. Chandra Gnanasambandam, SailPoint's executive vice president of product and chief technology officer, said the company views identity security as a combined "human plus AI" challenge rather than one requiring separate platforms. He said large enterprises may face tens of millions of agentic interactions per day as AI agents interact with large language models, APIs and data systems. Autonomous agent vision and runtime controls. Gnanasambandam introduced SailPoint's vision for autonomous identity agents, grouped into red, blue and green categories. Red agents would identify potentially risky or unauthorized activity, such as an AI agent accessing information beyond its owner's permissions. Blue agents would investigate and, if warranted, stop the activity. Green agents would focus on "peacetime" governance tasks, including automation of access-certification processes. He said SailPoint has signed one of the world's largest banks as a design partner for a green certification agent, with a targeted delivery timeframe of December or January. The company also said its platform can support least-privilege and zero-standing-privilege access models for both humans and AI. SailPoint described its role as a policy decision point that evaluates whether access should be permitted in real time, even after a user or agent has been authenticated by an identity provider such as Okta, Microsoft Entra or Ping. Gnanasambandam said identity providers primarily handle authentication, while SailPoint's platform is intended to provide fine-grained authorization based on identity context, access behavior, policy compliance and risk. Entro integration and Agentic Fabric capabilities. SailPoint said its Agentic Fabric and Entro, which SailPoint acquired roughly 90 days before the briefing, are expected to be fully integrated and generally available in November. The company also said that a majority of the capabilities discussed during the presentation are expected to be generally available by Nov. 1 or by the end of the year, with a smaller group planned for the first quarter of the following year. Levent Besik, SailPoint's chief product officer, demonstrated the Agentic Fabric, which the company said is designed to inventory AI agents, non-human identities and credentials across enterprise environments. The platform uses connectors, endpoint sensors, browser plugins and integrations with AI, SaaS, security information and event management, and data-security platforms, according to Besik. In the demonstration, SailPoint showed how security administrators could review an AI agent's owner, credentials, activity history, access graph and risk factors. Besik said the platform can identify issues including unsanctioned AI platforms, exposed credentials, access to production systems and anomalous behavior. Administrators can deactivate agents, rotate credentials or establish authorization policies from the platform, he said. SailPoint also highlighted scheduled audit reports designed for frameworks including GDPR, HIPAA and the EU AI Act. Besik said the reports can be exported, scheduled and customized. The company plans to unify similar audit capabilities across its agentic and human-focused offerings. Human identity updates. Dan Martillotti, SailPoint's vice president of product management, outlined additions to the company's Human Fabric. These include posture management intended to show identity risk across human and non-human identities, along with recommended remediation actions. The company said it has automated the creation of entitlement descriptions when applications are onboarded and added tools to assess privilege severity. SailPoint also introduced "effective privilege" views intended to reveal access that may be inherited indirectly through roles and groups. For end users, SailPoint demonstrated an agentic access-request experience that can recommend entitlements based on a user's role and needs. For privileged access, the platform supports just-in-time sessions in which access is provisioned when a user begins a task and removed when the session ends. Martillotti also described certification automation that can recommend retaining or revoking access based on policy guardrails, such as whether privileged access has been used recently. Customer demand shifts toward action and compliance. In response to analyst questions, Gnanasambandam said customer conversations have shifted from discovery of agents and credentials toward acting on identified risks. He cited credential rotation, immediate removal of exposed access and runtime controls as key customer priorities. He also said audit and compliance discussions have increased, particularly around accountability and fine-grained controls for AI systems. SailPoint said its Agentic Fabric can operate alongside customers' existing IdentityIQ deployments and can connect to IdentityIQ to incorporate human identity context without requiring a migration. About SailPoint (NASDAQ:SAIL). SailPoint, Inc (NASDAQ:SAIL) is an identity security company that helps organizations manage and protect digital identities and access to applications, data, and other technology resources. Its software is designed to help enterprises determine who should have access to specific resources, enforce access policies, and identify and address inappropriate or excessive access. The company's offerings include its cloud-based identity security platform, which supports identity governance, access management, lifecycle automation, compliance, and analytics.
SailPoint unveils AI identity agents, runtime controls at Navigate. October 14, 2026 Key points. * SailPoint unveiled AI identity agents and runtime authorization controls designed to secure human and non-human identities, enforce least-privilege access, and detect or stop risky AI-agent activity in real time. * The company said its Agentic Fabric and recently acquired Entro technology are expected to be fully integrated and generally available in November, with tools to inventory AI agents, monitor credentials, manage risks, and support compliance reporting. * New human-identity features include identity-risk posture management, effective-privilege analysis, automated access recommendations and certifications, and just-in-time privileged access. SailPoint also reported rising customer demand for credential rotation, rapid access removal, runtime controls and AI compliance. * Five stocks to consider instead of SailPoint. SailPoint NASDAQ: SAIL used its Navigate conference briefing to outline product updates centered on securing both human and AI identities, including autonomous agents, runtime authorization controls, expanded cloud infrastructure support and a redesigned user interface. Chandra Gnanasambandam, SailPoint's executive vice president of product and chief technology officer, said the company views identity security as a combined "human plus AI" challenge rather than one requiring separate platforms. He said large enterprises may face tens of millions of agentic interactions per day as AI agents interact with large language models, APIs and data systems. Autonomous agent vision and runtime controls. Gnanasambandam introduced SailPoint's vision for autonomous identity agents, grouped into red, blue and green categories. Red agents would identify potentially risky or unauthorized activity, such as an AI agent accessing information beyond its owner's permissions. Blue agents would investigate and, if warranted, stop the activity. Green agents would focus on "peacetime" governance tasks, including automation of access-certification processes. He said SailPoint has signed one of the world's largest banks as a design partner for a green certification agent, with a targeted delivery timeframe of December or January. The company also said its platform can support least-privilege and zero-standing-privilege access models for both humans and AI. SailPoint described its role as a policy decision point that evaluates whether access should be permitted in real time, even after a user or agent has been authenticated by an identity provider such as Okta, Microsoft Entra or Ping. Gnanasambandam said identity providers primarily handle authentication, while SailPoint's platform is intended to provide fine-grained authorization based on identity context, access behavior, policy compliance and risk. Entro integration and Agentic Fabric capabilities. SailPoint said its Agentic Fabric and Entro, which SailPoint acquired roughly 90 days before the briefing, are expected to be fully integrated and generally available in November. The company also said that a majority of the capabilities discussed during the presentation are expected to be generally available by Nov. 1 or by the end of the year, with a smaller group planned for the first quarter of the following year. Discover more MarketBeat All Access Stock Average Calculator Stock Market News Levent Besik, SailPoint's chief product officer, demonstrated the Agentic Fabric, which the company said is designed to inventory AI agents, non-human identities and credentials across enterprise environments. The platform uses connectors, endpoint sensors, browser plugins and integrations with AI, SaaS, security information and event management, and data-security platforms, according to Besik. In the demonstration, SailPoint showed how security administrators could review an AI agent's owner, credentials, activity history, access graph and risk factors. Besik said the platform can identify issues including unsanctioned AI platforms, exposed credentials, access to production systems and anomalous behavior. Administrators can deactivate agents, rotate credentials or establish authorization policies from the platform, he said. SailPoint also highlighted scheduled audit reports designed for frameworks including GDPR, HIPAA and the EU AI Act. Besik said the reports can be exported, scheduled and customized. The company plans to unify similar audit capabilities across its agentic and human-focused offerings. Human identity updates. Dan Martillotti, SailPoint's vice president of product management, outlined additions to the company's Human Fabric. These include posture management intended to show identity risk across human and non-human identities, along with recommended remediation actions. The company said it has automated the creation of entitlement descriptions when applications are onboarded and added tools to assess privilege severity. SailPoint also introduced "effective privilege" views intended to reveal access that may be inherited indirectly through roles and groups. For end users, SailPoint demonstrated an agentic access-request experience that can recommend entitlements based on a user's role and needs. For privileged access, the platform supports just-in-time sessions in which access is provisioned when a user begins a task and removed when the session ends. Martillotti also described certification automation that can recommend retaining or revoking access based on policy guardrails, such as whether privileged access has been used recently. Customer demand shifts toward action and compliance. In response to analyst questions, Gnanasambandam said customer conversations have shifted from discovery of agents and credentials toward acting on identified risks. He cited credential rotation, immediate removal of exposed access and runtime controls as key customer priorities. He also said audit and compliance discussions have increased, particularly around accountability and fine-grained controls for AI systems. SailPoint said its Agentic Fabric can operate alongside customers' existing IdentityIQ deployments and can connect to IdentityIQ to incorporate human identity context without requiring a migration. About SailPoint (NASDAQ:SAIL). SailPoint, Inc NASDAQ: SAIL is an identity security company that helps organizations manage and protect digital identities and access to applications, data, and other technology resources. Its software is designed to help enterprises determine who should have access to specific resources, enforce access policies, and identify and address inappropriate or excessive access. The company's offerings include its cloud-based identity security platform, which supports identity governance, access management, lifecycle automation, compliance, and analytics. This instant news alert was generated by narrative science technology and financial data from MarketBeat in order to provide readers with the fastest reporting and unbiased coverage. Please send any questions or comments about this story to [email protected]. Before you consider SailPoint, you'll want to hear this. MarketBeat keeps track of Wall Street's top-rated and best performing research analysts and the stocks they recommend to their clients on a daily basis. MarketBeat has identified the five stocks that top analysts are quietly whispering to their clients to buy now before the broader market catches on... and SailPoint wasn't on the list. While SailPoint currently has a Moderate Buy rating among analysts, top-rated analysts believe these five stocks are better buys. The AI boom is creating opportunities across semiconductors, cloud computing, enterprise software, infrastructure, cybersecurity, and automation. Inside this report, you'll find 10 companies positioned to benefit as artificial intelligence moves from hype to real-world deployment and becomes a core growth driver for corporate America. Continue following MarketBeat
From chaos to control: SailPoint unlocks a secure agentic era with Autonomous Identity Security. October 9, 2026 Today at Navigate 2026, its annual flagship conference, SailPoint, Inc. (Nasdaq: SAIL), a leader in enterprise identity security, announced significant new capabilities across SailPoint Agentic Fabric(TM)(SAF) and SailPoint Human Fabric(TM)(SHF), the two purpose-built products of its Identity Security solution, built on SailPoint Atlas. These innovations give enterprises what they need most in the agentic era: full visibility into every hidden AI tool, continuous compliance across human and machine workflows, the replacement of permanent access keys with temporary permissions, and the transformation of identity security from a static compliance check into real-time, automated defence. According to the latest SailPoint Horizons of Identity Security report, 79% of enterprises are already running AI agents in production, yet only 2% have deployed identity security tools purpose-built to govern and secure them. Meanwhile, enterprises are stuck between static reviews that are outdated the moment they finish and posture dashboards that flag risks but can't fix them. Introducing SailPoint Autonomous Agents. When AI agents invoke MCP tool calls at machine speed, human review of every action is impossible. SailPoint announced Autonomous Agents, a fleet of specialised AI agents built to govern and protect the agentic ecosystem. Unlike generic tools that simply shut agents down when anomalies occur, Autonomous Agents use identity context to tell legitimate intent from malicious activity, stopping threats while keeping productive agents running. These Autonomous Agents actively govern the agentic lifecycle: continuously monitoring runtime actions, intercepting threats, and right-sizing permissions to enforce zero standing privilege at machine speed. Matt Mills, President of SailPoint, said: "Autonomous agents are no longer just experimental copilots; they are becoming the primary execution layer of modern enterprises. Enterprises cannot afford to slow down AI innovation out of fear, nor can they afford ungoverned access chaos. Moving beyond Zero Trust to Autonomous Identity allows organisations to master the converged human-plus-AI workforce, eliminate invisible risk, and innovate with complete confidence." Chandra Gnanasambandam, EVP of Product and Chief Technology Officer said: "The idea that a security admin is going to review and approve access for a group of autonomous agents making 10,000 tool calls a second isn't just outdated - it's a fantasy. The only way to govern autonomous machines is with autonomous machine defense. We've built Autonomous Agents so enterprises can stop the threat, save the good agents, and bring human and non-human identity into real-time. In a near-AGI world, standing privilege is dead." Autonomous Identity Security posture management (A-ISPM) goes beyond the dashboard. Using the live identity context in SailPoint Atlas, SailPoint's new A-ISPM continuously detects dormant accounts, partially offboarded identities, orphaned access, shadow admins, and privileged outliers hidden deep in access paths. It then closes the loop on each organisation's terms, with remediation ranging from one-click fixes, such as revoking access, disabling an identity or AI agent, or assigning an owner, to fully automated policy enforcement. New automation and global compliance upgrades. SailPoint is advancing global identity security with powerful new updates across its platform. The company introduced new updates to the SailPoint Atlas engine with advanced automation workflows to help enterprises scale security, while also launching IdentityIQ 9.0 to make everyday access governance simpler and more secure for business users. To support this growth, SailPoint is also expanding its global footprint - opening a new data center in South Korea and preparing to meet some of the strictest federal and financial compliance standards, including FedRAMP High, PCI DSS 4.0, and EU Sovereign Cloud. Delivering four core customer outcomes through new innovations. SailPoint delivers autonomous identity and a host of customer benefits and improved security outcomes across its Identity Security platform. New product innovations showcased at Navigate enable customers to realise these four critical business outcomes: Comprehensive discovery: Security teams can't govern what they can't see. Every agent, credential, and data store that never reach the identity program becomes access no one owns. New endpoint and browser sensors, SIEM and XDR telemetry, and vault and pipeline NHI discovery bring MCP servers, tools, credentials, and data stores into view. Data Access Security adds classification integrations with Microsoft Purview and BigID, plus new connectors for Atlassian Confluence, Google BigQuery, and AWS Redshift. Enabling compliance: Auditors are asking how AI agents are governed, and most organisations can't yet produce the evidence. New Agent Audit turns agent inventory and governance activity into framework-aligned evidence reports that can be exported in one action, customised, or scheduled, making audit preparation repeatable. Strengthening security posture: Standing privilege is invisible risk. Every always-on account is an open door for attackers. Just-in-Time provisioning (JIT-P) grants access only when needed, with conditions such as business justification or reauthentication and activation through Slack or ServiceNow. Agentic Fabric delivers prompt monitoring with policy-based redaction and blocking and behavioral risk detection. Human Fabric features a CrowdStrike Foundry App and SecOps containment actions with a full audit trail. Streamlining operations: Governance has become too admin-heavy, and manual processes can't keep pace with the volume of human and agent access. Human Fabric will now offer next-generation access requests with an embedded Harbor Pilot Access Request Agent. The upcoming Harbor Pilot Policy Agent lets administrators explain and draft access policies for people and agents in plain language, and Agentic Fabric provides one-click agent lifecycle controls and an agent kill switch. Platform milestone: SailPoint Agentic Fabric + Entro integration. Also announced during Navigate, the Entro Security integration into SailPoint Agentic Fabric will soon be complete. The integration includes Entro-powered credential lineage, exposed secret discovery, and prompt-intent monitoring into Agentic Fabric, extending governance to secrets and credentials that AI agents and NHIs depend on. Availability. Capabilities across SailPoint Agentic Fabric, SailPoint Human Fabric, and SailPoint Atlas are rolling out globally beginning at Navigate 2026. A-ISPM, the Harbor Pilot Policy Agent, and the Proofpoint integration are expected in Q4 FY27. New Success Acceleration service packages combine expert-led roadmaps, vertical-specific deployment accelerators, AI-driven risk reduction, and continuous compliance support to help customers reach zero standing privilege and realize value faster. To watch Navigate 2026 keynotes and product demonstrations live or on demand, visit www.sailpoint.com/navigate. About SailPoint. SailPoint (Nasdaq: SAIL) is defining the new era of adaptive identity security. In a world where non-human identities now significantly outnumber humans, its AI-powered platform unifies identity, security, and data intelligence to protect today's enterprise from advanced identity-based threats. I4.0 Today deliver the identity solution that spans both the breadth of identities and the depth of context needed to drive real-time access with confidence. Built on principles like zero-standing privilege and contextualized risk, its SailPoint platform transforms identity from a point of vulnerability into a powerful security advantage. Trusted by many of the world's leading organizations, SailPoint secures the enterprise with intelligent, autonomous identity security. Hot this week
SailPoint announces modernization capabilities for both cloud and on-premises identity security. New SailPoint Human Fabric capabilities and SailPoint IdentityIQ 9.0 release deliver security and governance built for enterprise scale, ensuring no customer is left behind in their security evolution. Today at its annual flagship conference, Navigate, SailPoint, Inc. announced a significant modernization across its entire identity platform. The company unveiled new enterprise-scale capabilities for SailPoint Human Fabric and the release of IdentityIQ 9.0, a major update to its on-premises solution. These updates demonstrate a unified commitment to modernizing identity security for every customer, whether in the cloud, on-premises, or in a hybrid environment. The announcements address a challenge facing the industry as a whole: most identity governance infrastructure can't keep pace with how enterprises operate today. SailPoint is closing that gap with substantive updates that re-platform core services for scale and strengthen governance, not simple UI refreshes. Chandra Gnanasambandam, EVP of Product and Chief Technology Officer at SailPoint, said "Most vendors ask their customers to choose between a growth story or a stewardship story, but the reality of the modern enterprise is not that simple. Today, we are delivering on both fronts. We are advancing the frontier of cloud identity security with Human Fabric while also demonstrating our commitment to the customers who rely on IdentityIQ for identity security. This is one modernization effort on two fronts, ensuring every customer has a path forward without compromise." Governance built for enterprise scale: The SailPoint Human Fabric SailPoint announced three new major updates for Human Fabric, its cloud-native identity security product, designed to operate at enterprise scale: * Access certifications enhancements: A completely re-platformed certification engine built to handle enterprise-scale access reviews without record limits or data delays. The new engine removes the need for administrators to manually split large campaigns and includes a faster, more intuitive reviewer interface and cryptographic, GxP-compliant sign-off for regulated industries. * Proactive Separation of Duties (SoD): Moving beyond after-the-fact alerting, SailPoint's enhanced SoD engine provides real-time evaluation that proactively blocks toxic access combinations at the moment of request. It uniquely flags conflicts created by other pending requests still in-flight, preventing violations before they occur. * Conversational Access Requests: A new AI-powered agent allows users to make access requests in natural language directly from their chat tools. With support for custom forms, employees can provide necessary business justifications and compliance details seamlessly within the chat flow. No customer left behind: IdentityIQ 9.0 For customers with extensive data residency requirements, strict regulatory constraints, or deeply customized programs, SailPoint is delivering IdentityIQ 9.0. The release provides a parallel modernization path for hybrid and on-premises deployments, centered on three pillars: a stronger governance, including granular, time-based access for roles and entitlements, and a rebuilt technical foundation running on modern application servers, with a refreshed user experience that streamlines access reviews and application definition. Critically, SailPoint is also offering an automated upgrade tool with the release. This utility scans a customer's environment and automates much of the manual work required to update, addressing the primary risk that stalls on-premises upgrades and proving that customers can confidently evolve their existing deployments.
SailPoint adds cloud identity tools & IdentityIQ 9.0. Wed, 7th Oct 2026 (Today) SailPoint has introduced updates to its cloud identity security platform and released IdentityIQ 9.0 for on-premises deployments, extending its product changes across cloud, hybrid and on-premises environments. The update covers SailPoint Human Fabric, the company's cloud-native offering, and IdentityIQ, its on-premises identity governance product. The changes target organisations whose identity systems must support larger access review workloads, tighter governance controls and more complex operating environments. In the cloud platform, SailPoint outlined three additions: a rebuilt access certification engine for large-scale access reviews, a separation-of-duties function that evaluates conflicts at the point of access request, and a conversational access request tool that lets staff request access through chat interfaces using natural language. The certification changes are intended to remove the need for administrators to break large review campaigns into smaller parts. The updated engine is designed to process access reviews without record limits or delays in data handling, while also adding cryptographic sign-off features for regulated sectors that require GxP compliance. The separation-of-duties update shifts checks earlier in the process. Instead of identifying problematic combinations of access after approval, the system evaluates requests in real time and can flag conflicts created not only by existing access but also by other requests still waiting to be processed. The third cloud update introduces an artificial intelligence agent for access requests inside workplace chat tools. Users can submit requests in natural language and complete custom forms within the same interaction, including business justification and compliance information. On-premises path Alongside the cloud changes, SailPoint released IdentityIQ 9.0 for customers that continue to run identity governance tools in their own environments or in hybrid settings. Those users often face data residency rules, regulatory constraints or heavy customisation that make a full move to the cloud less practical. IdentityIQ 9.0 focuses on governance changes, infrastructure updates and a revised user interface. The release adds more granular and time-based controls for roles and entitlements, runs on modern application servers, and streamlines access reviews and application definition. The release also includes an automated upgrade tool. SailPoint said the utility scans a customer environment and automates much of the work involved in updating older installations, addressing a common obstacle for organisations that delay upgrades because of the operational risk and manual effort involved. Chandra Gnanasambandam, Executive Vice President of Product and Chief Technology Officer at SailPoint, linked the dual release to different customer needs across deployment models. "Most vendors ask their customers to choose between a growth story or a stewardship story, but the reality of the modern enterprise is not that simple. Today, we are delivering on both fronts. We are advancing the frontier of cloud identity security with Human Fabric while also demonstrating our commitment to the customers who rely on IdentityIQ for identity security. This is one modernisation effort on two fronts, ensuring every customer has a path forward without compromise," said Gnanasambandam. Broader market The announcement reflects a continuing split in the identity security market between companies adopting cloud-based systems and those maintaining a mix of older and newer infrastructure. Many large organisations still run long-established governance platforms that are heavily integrated with internal systems, making migration slower and more complex than in other software categories. That has left suppliers under pressure to update cloud products without abandoning customers that remain on-premises for operational or regulatory reasons. SailPoint's latest release suggests it is trying to serve both groups at the same time, while also framing governance and scale as central issues for large enterprise customers. Identity governance tools have taken on a broader role as companies manage not just employee access but also temporary access, role-based permissions and compliance reporting across multiple systems. In that context, functions such as real-time separation-of-duties controls and large-scale certification reviews address practical governance tasks that often become harder to manage as organisations expand. SailPoint did not disclose pricing or customer deployment figures alongside the product announcements. The company said the changes are part of a wider effort to update its identity platform across both cloud and on-premises products. SailPoint described the automated upgrade utility in IdentityIQ 9.0 as a way to reduce the manual work that has often stalled upgrades for customers with complex existing deployments.