SailPoint Integration

The SailPoint integration connects Strike Graph to your SailPoint identity governance environment, enabling automated evidence collection for access management and identity lifecycle controls. If your compliance program includes controls around user access reviews, role-based access, or identity governance, this integration pulls that evidence directly from SailPoint rather than requiring manual screenshots or exports.

Two ways to collect evidence

Strike Graph offers two methods for collecting evidence from SailPoint:

• Bridge API — use single GET API calls to collect basic information from any available API endpoint.

• Script Runner — write or customize collection scripts that call SailPoint's API endpoints. Script Runner gives you full control over exactly what data is collected and how it is formatted.

Both methods provide read-only access: Strike Graph retrieves data from your SailPoint environment but never modifies it.

What you can collect

Evidence you might collect from SailPoint includes:

• User access certifications and review campaigns

• Role definitions and entitlement assignments

• Identity lifecycle events (provisioning, deprovisioning)

• Access request and approval records

• Policy violation reports

• Separation of duties configurations

The specific data available depends on your SailPoint edition and API configuration. Refer to SailPoint's developer documentation for details on available API endpoints.

Setting up the SailPoint integration

Prerequisites

• An active SailPoint environment with API access enabled

• API credentials (client ID and secret, or personal access token) with read permissions

• Appropriate permissions within Strike Graph to manage integrations

Step 1: Configure the integration

Navigate to the Integrations Manager in Strike Graph and locate the SailPoint integration card. Click Add Integration and enter your API credentials. Strike Graph validates the connection before saving.

Step 2: Collect evidence

Navigate to the evidence item where you want to attach SailPoint data. Click Attach and select your SailPoint integration from the list of available sources. Define the API endpoint and parameters for the data you want to collect, then submit. For ongoing compliance, configure automated collection so Strike Graph recollects evidence on a schedule.

Need more help?

If you have questions about the SailPoint integration or need help identifying the right API endpoints for your evidence needs, contact our support team through the in-app messenger.