SailPoint Identity Security Cloud review: lifecycle and certifications

SailPoint's SaaS platform, built on SailPoint Atlas, automates joiner, mover and leaver events so that it 'provisions, adapts, and corrects access automatically'. It is sold in three suites: Standard (human identities), Agentic Business and Agentic Business Plus (human and non-human identities), with add-ons including Accelerated Application Management, Non-Employee Risk Management and Access Risk Management.

SailPoint documents Manager, Source Owner and Search campaigns, with role composition campaigns in its legacy campaign platform, and 'AI-driven certifications' that auto-certify low-risk access so reviewers focus on anomalies. SailPoint says its reports map to SOX, PCI DSS, GDPR, FISMA and FIPS, and the platform collects audit evidence and generates audit-ready reports on demand.

SailPoint frames the problem as onboarding: customers 'often have hundreds or thousands of applications which need to be connected'. Its Application Management offering gives application owners a self-registration portal and reuses integration templates, and SailPoint reports onboarding time reductions of 45-70%. Discovery of applications nobody has registered, and of local accounts inside them, is not described on the pages we reviewed. In August 2026 Orchid Security joined SailPoint's Technology Alliance Partner ecosystem to supply that discovery.