Skip to content
SailPoint logo

SailPoint

Verified

IT & Security · www.sailpoint.com/

Is this your tool? Claim this listing →

Overview

SailPoint is an identity security and identity governance platform that helps enterprises manage, govern, and secure access for every worker, application, system, and increasingly AI agent. Its cloud SaaS offering, Identity Security Cloud (formerly IdentityNow), automates access certifications, joiner-mover-leaver provisioning, role management, and segregation-of-duties compliance across on-prem and cloud applications. SailPoint also sells IdentityIQ, a self-hosted/on-premises version for organizations needing deep customization.

The problem SailPoint solves

Enterprises with large, complex application portfolios struggle to manually track who has access to what, enforce segregation-of-duties policies, and produce audit-ready evidence for compliance reviews. SailPoint automates identity lifecycle management, access certifications, and SoD enforcement across a broad connector ecosystem, which is why it's best suited to large and regulated mid-market organizations — though its cost and configuration complexity make it a poor fit for smaller, budget-constrained teams.

Decision context

Use these points to test whether the product fits your operation, not just whether it has a long feature list.

  • Published starting price: Custom pricing. Confirm user, usage, and feature limits for the plan you would actually buy.
  • Deployment: cloud, on_premise. Check security, data-residency, and access requirements for every team that will use it.
  • Verified integrations include Microsoft Active Directory, Microsoft Entra ID (Azure AD), Workday, ServiceNow, Salesforce, SAP S/4HANA. Validate sync direction and plan limits for the connections that matter.
  • This record was last checked on 8/5/2026; pricing and features can change.

How to evaluate SailPoint

A listing helps create a shortlist; a trial with the team’s real workflow decides whether the tool fits. Use this reading with the structured facts and confirm changes with the vendor.

Workflow fit

The record describes it as a fit for Large enterprises with dedicated IAM/security teams. Check that this context matches the volume, roles, and processes your team needs it to support.

Pilot questions

  • Can SailPoint complete the critical workflow without manual work outside the product?
  • Do the recorded connections (Microsoft Active Directory, Microsoft Entra ID (Azure AD), Workday, ServiceNow) support the sync direction, permissions, and volume we need?
  • What user, usage, storage, support, or security limits appear after the headline starting price?

Evidence and freshness

This record was checked on 8/5/2026. That date tells you when the record was reviewed, not that the vendor has left its terms unchanged since then.

Best for

  • Large enterprises with dedicated IAM/security teams

Not a fit if

  • Small companies needing a quick, low-overhead SSO/IAM setup

Why it’s listed

  • Broadest prebuilt connector catalog evaluated for aggregating and governing access across SAP, Workday, AD, and cloud apps.
  • FedRAMP Moderate authorization alongside SOC 2 and ISO 27001, suited to regulated identity-governance programs.

Features

Audit logsCertification campaigns, access history, and compliance reporting produce detailed audit trails.
Compliance reportingPurpose-built for SoD policy enforcement, access certifications, and audit-ready compliance reporting.
Device managementIdentity governance platform, not MDM; no device management capability found.
Multi-factor authenticationSupports strong authentication via external providers (PingFederate, RSA SecurID, Okta Verify) rather than native MFA.
Privileged access managementPAM module integrates with dedicated PAM vendors (CyberArk, BeyondTrust, Delinea) rather than providing PAM itself.
Public APIREST APIs and a public developer portal (developer.sailpoint.com).
Role-based access controlRole-based access control, role mining, and role management are core IGA capabilities.
SCIM / directory provisioningSCIM 2.0 supported for incoming and outgoing provisioning.
Self-hosting / on-premIdentity Security Cloud SaaS is cloud-only, but IdentityIQ is a separate self-hosted product.
SSO / SAMLActs as SAML 2.0 service provider via an external IdP, not a general-purpose SSO provider for other apps.

Integrations

Microsoft Active DirectoryMicrosoft Entra ID (Azure AD)WorkdayServiceNowSalesforceSAP S/4HANASAP SuccessFactorsSAP ECCOracleAWSSnowflakeOktaCyberArk Privileged Access ManagerCisco DuoRSA SecurIDPingFederate

Security & compliance

SOC 1SOC 2SOC 3ISO 27001ISO 27017ISO 27018ISO 27701FedRAMP Moderate (Authorized)CSA STAR Level 2

Pros & cons

Pros

  • Comprehensive identity governance and lifecycle automation
  • Hundreds of enterprise connectors and integrations
  • Trusted at scale — used by 53% of the Fortune 500

Cons

  • Complex, time-consuming implementation
  • Steep learning curve for smaller/less experienced teams
  • Pricing not public; requires sales engagement

What we found

4.5/5
147 reviews aggregatedLast checked 2026-07-31

Enterprise reviewers value its user lifecycle management, automation, and access-governance depth, but consistently flag complex configuration and a steep learning curve, especially for smaller teams.

Ratings and review counts come from public review platforms. We link to the original source and keep the underlying review text out of this profile.

User reviews

Written by Audyense accounts · moderated before publishing

No user reviews yet.

Used SailPoint? Be the first to tell other buyers what actually worked.