SECURITY ATLAS / EVALUATION BRIEF SailPoint Human Fabric / Identity Security Cloud Research reviewed: 2026-10-18 https://atlasofsecurity.com/landscape/vendors/sailpoint-identity-security/ THE ATLAS TAKE Atlas judgment: SailPoint Human Fabric, the current public destination for Identity Security Cloud, belongs in an identity-governance evaluation rather than a basic SSO comparison. Its value is connecting identity and entitlement information to lifecycle, requests and certification decisions. The decisive dependency is application integration: a manager approving or revoking access in a campaign is useful only when the underlying entitlement is accurately represented and the change reaches the target. Start with a few difficult applications and reconcile reality before scaling the program. Treat adjacent machine, agent and cloud entitlement capabilities as separately scoped additions to workforce governance. SCOPE Current public naming also uses Human Fabric and describes its relationship to Identity Security Cloud. Existing customer editions and migration requirements still need contract-specific verification. This profile is identity governance, not workforce single sign-on. WORTH A LOOK WHEN Organizations that need governed access requests, lifecycle changes and periodic reviews across an owned application roster. THINK TWICE WHEN Application owners cannot explain entitlements or the project expects access certification to replace authentication and runtime authorization. IMPLEMENTATION 1. Establish identity and entitlement ground truth Reconcile authoritative people records and application accounts, including contractors, orphan accounts and shared identities. 2. Pilot a meaningful certification Use one application with understandable access descriptions and reviewers who can justify each decision. 3. Prove fulfillment and failure ownership Verify target-side removal, detect unsuccessful changes and assign remediation to application owners before expanding campaigns. OPERATING REALITY Governance operators must maintain account correlation, connector permissions, entitlement descriptions and reviewer accountability. Atlas would measure closed-loop revocation rather than campaign completion alone; a tidy review dashboard can coexist with stale accounts if the connector only reads data or a downstream fulfillment task fails. COMMERCIAL CONSIDERATIONS Obtain an identity-and-module proposal tied to the application integration plan, including any virtual-appliance and implementation duties. - Governed identity population and selected modules - Application connectors and lifecycle/fulfillment scope - Data cleanup, reviewer operations and integration services EVALUATION PLAN / PROPOSED TESTS, NOT COMPLETED RESULTS 1. Find an orphaned entitlement Acceptance evidence: Seed a fictional unowned account and preserve source aggregation, correlation decision and reviewer-visible context. Owner: __________ Pass criterion: __________ Observed result: __________ Evidence location: __________ 2. Close a revoked access loop Acceptance evidence: Revoke an approved lab entitlement in a certification and retain target-side proof of removal plus failure handling. Owner: __________ Pass criterion: __________ Observed result: __________ Evidence location: __________ 3. Test a mover without access accumulation Acceptance evidence: Change a synthetic worker’s role and prove required new access arrives while obsolete access is removed or explicitly reviewed. Owner: __________ Pass criterion: __________ Observed result: __________ Evidence location: __________ QUESTIONS FOR THE VENDOR - Which current offering and edition does the proposal specify, and are any actual migration requirements documented? - For each in-scope application, does the connector both read entitlements and revoke them, or only list accounts? - How are just-in-time or zero standing privilege claims demonstrated on a real connector rather than a brochure? EVIDENCE GAPS - No independent connector-completeness, access-removal timing or reviewer-effort benchmark was performed. - Confirm exact Human Fabric packaging, write capabilities and virtual-appliance requirements for the chosen sources. SOURCES SailPoint Human Fabric current product scope (Product information) https://www.sailpoint.com/products/human-fabric SailPoint source management (Documentation) https://documentation.sailpoint.com/saas/help/sources/index.html SailPoint certifications (Documentation) https://documentation.sailpoint.com/saas/help/certs/understanding_certifications.html Use synthetic fixtures in an authorized environment. Agree rollback and acceptance criteria before enforcement. Documentation research and Atlas analysis. Independent hands-on effectiveness, effort, and complete price remain unassessed.