SailPoint Workflow Enhancements: Driving Smarter Automation and Governance

Introduction

Workflows are really important in automating identity-related tasks in SailPoint Identity Security Cloud. As companies grow their identity programs they need workflows that're flexible, secure and efficient.

Recently SailPoint made some improvements to workflows. These updates help companies automate tasks better make governance controls stronger and make workflow management easier. The updates focus on making workflows scalable improving access governance, managing approvals securing credentials and optimizing performance.

In this article we will explore the workflow enhancements, in SailPoint Identity Security Cloud and how they can benefit organizations that use it.

SailPoint has made some changes to its workflow limits. One of the important updates is that SailPoint now supports more active workflows for each subscription level.

Workflow Limit Enhancement

Here are the new workflow limits, for each SailPoint subscription level:

• Business subscription level: the old limit was 25 and the new limit is 50.

• Business Plus subscription level: the old limit was 100 and the new limit is 200.

• Atlas Enterprise subscription level: the old limit was 200. The new limit is 300.

SailPoint subscription levels now have more workflow limits. This means that the Business subscription level of SailPoint now supports 50 workflows. The Business Plus subscription level of SailPoint now supports 200 workflows. The Atlas Enterprise subscription level of SailPoint now supports 300 workflows.

Why This Matters:

When companies get bigger they need to automate things. Before there were limits on how much they could automate.. Now that these limits are gone companies can do a lot more. They can:

• Automate things that have to do with identity processes.

• Help their business run more smoothly.

• Save time by not having to do things..

• Make sure they are following all the rules with their workflows.

• Make their automation projects bigger without having to start all over.

This is a big deal because it lets companies come up with better plans, for automating identity processes. At the time they can still keep everything running in a simple and efficient way. This means companies can focus on identity automation and make their operations better.

Enhanced Access Request Workflows

We all know managing temporary access is a governance headache. SailPoint now offers access request controls. When users ask for access they have to give an end date.

How It Works:

Here's how the new workflow works:

• Users have to give an end date for the access they want.

• The system checks if the time they want is within the allowed limits.

• The request goes through the approval process.

• After approval the system gives them access.

• When the end date arrives the system automatically takes away the access.

Benefits:

• This will stops people from getting access they don't need.

• It makes our security better.

• It helps us follow the rules.

• It lets us give people access, in a controlled way.

• It reduces the work needed to take away access manually.

By making access expire automatically organizations can cut down on risks related to access while still being able to work.

Approval Workflow Enhancements

The approval process is important for keeping everything in order and making sure people's access are accountable. SailPoint has made some changes that make it easier to see what is going on and control the approval workflows.

Approval Expiration:

One big problem with approval workflows is when requests just sit there for a time and nothing happens.

1. With approval expiration organizations can do a things. They can:

• Automatically get rid of approval requests that are not being used.

• Stop approvals from getting stuck.

• Make sure decisions are made on time.

• Make it easier to give people access to what they need.

2. Now administrators and stakeholders can see more about what is going on with:

• Who is assigned to approve things

• Governance groups

• The status of approvals

• What decisions have been made

This makes it easier for organizations to keep everything in order and be ready, for audits. Approval workflows are a part of this. By having better approval workflows organizations can make sure they are doing things the way. The approval process is a part of this.

HTTP Request Action V3 Enhancements

When we connect to systems our workflows often need to use special codes, keys or secret passwords.. Handling these codes manually across many workflows can be a real headache and create security problems.

Here's What's New:

Our HTTP Request Action V3 now works with storage for these codes called SailPoint Parameter Storage.

Good Things About This Update:

1. Better Security

• We do not have to write codes directly into our workflow actions anymore.

2. One Place, for All Codes

• Now organizations can keep all their codes in one place. Use them in many workflows.

3. Easier Updates

• If codes change administrators can just update them in one place without having to change each workflow.

4.  Still Works with Old Versions

• If you are still using HTTP Request Action V2 do not worry. It still works fine so you can move to the version when you are ready.

• This update helps make things more secure and easier to manage.

Data Trimming, Update Variable, and Number Transform Enhancements

SailPoint has introduced powerful workflow optimization capabilities that simplify workflow design and improve performance.

Update Variable Action:

Previously, administrators often needed multiple "Define Variable" actions throughout a workflow whenever a value needed to be modified.

The new Update Variable capability allows administrators to:

• Modify variable values after creation

• Update strings, dates, and numbers dynamically

• Simplify workflow design

• Reduce unnecessary workflow steps

Number Transform:

Organizations frequently needed external services to perform mathematical calculations within workflows.

Number Transform now provides built-in support for:

• Addition

• Subtraction

• Multiplication

• Division

• Modulo operations

Additional controls include:

• Precision handling

• Rounding configuration

This reduces workflow complexity and dependency on external systems.

Data Trimming:

Large workflow payloads can negatively impact performance, especially in workflows containing loops or multiple actions.

Data Trimming addresses this challenge by retaining only the data required for subsequent workflow steps.

Benefits:

• Faster workflow execution

• Reduced payload size

• Improved scalability

• Better performance in complex workflows

These improvements help organizations build cleaner and more efficient workflow automations.

Best Practices for Adopting These Enhancements

To maximize the value of these new capabilities:

• Review existing workflows for optimization opportunities.

• Replace hardcoded credentials with Parameter Storage.

• Implement approval expiration policies.

• Use temporary access controls wherever possible.

• Leverage Update Variable and Number Transform actions to simplify workflow design.

• Apply Data Trimming in workflows that process large datasets or loops.

Conclusion

The new changes to SailPoint Workflow are a deal. SailPoint always try to make things better for people who use their Identity Security Cloud. They wants to make sure it is easy to use and safe.

These changes include things like being able to do more with workflows and making sure the right people have access to the things. They also help keep information safe and make the workflows run more smoothly. This means that companies can make their identity processes better and still keep everything

As companies keep changing and growing using these changes can really help. It can make things easier to do. Require less work from the people in charge. It can also make the whole identity process stronger and more secure, for SailPoint Identity Security Cloud and SailPoint Workflow.