{
 "categories": [
  "identity",
  "enterprise"
 ],
 "deployment": "saas",
 "evidence": [
  {
   "date": "2026-09-13",
   "fact": "homepage",
   "note": "SailPoint presents Identity Security Cloud / Human Fabric as the SaaS identity-security platform. FAQ copy states Human Fabric is the evolution of Identity Security Cloud, not a separate product identity.",
   "source": "https://www.sailpoint.com/products/identity-security-cloud",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "license",
   "note": "The page markets commercial SailPoint suites to enterprises. No public free-tier API is offered on the opened marketing page.",
   "source": "https://www.sailpoint.com/products/identity-security-cloud",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "deployment",
   "note": "Vendor copy describes a SaaS / cloud-native identity-security platform. Customers are not told to install IdentityIQ on the opened ISC page.",
   "source": "https://www.sailpoint.com/products/identity-security-cloud",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.api.exists",
   "note": "SailPoint documents first API calls against https://{tenant}.api.identitynow.com, including POST /oauth/token and GET /public-identities/v1.",
   "source": "https://developer.sailpoint.com/docs/api/getting-started",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.api.kinds[0]",
   "note": "The specification index is a collection of HTTPS JSON REST APIs for Identity Security Cloud admin resources.",
   "source": "https://developer.sailpoint.com/docs/api/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.api.auth[0]",
   "note": "Client credentials (including PATs, which are implicitly granted CLIENT_CREDENTIALS) POST to https://[tenant].api.identitynow.com/oauth/token?grant_type=client_credentials with client_id and client_secret.",
   "source": "https://developer.sailpoint.com/docs/api/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.api.auth[1]",
   "note": "Authorization code clients must include AUTHORIZATION_CODE as a grant type. The token request is POST https://[tenant].api.identitynow.com/oauth/token?grant_type=authorization_code. The authorize host is [tenant].login.sailpoint.com.",
   "source": "https://developer.sailpoint.com/docs/api/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.api.coverage",
   "note": "The spec index lists identities, accounts, sources, access requests, certifications, roles, entitlements, workflows, OAuth clients, personal access tokens, and many other admin collections. That is broad admin coverage, not a claim that every console control is exposed.",
   "source": "https://developer.sailpoint.com/docs/api/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.api.docs",
   "note": "Opened as SailPoint's current ISC API getting-started guide, including tenant discovery, PAT creation, the first token call, and the 100-request-per-token-per-10-seconds V3 rate limit.",
   "source": "https://developer.sailpoint.com/docs/api/getting-started",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.sdk.exists",
   "note": "SailPoint publishes official ISC SDKs and states they make it easier to call ISC APIs from preferred languages.",
   "source": "https://developer.sailpoint.com/docs/tools/sdk/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.sdk.languages[0]",
   "note": "The SDK index lists an official Golang SDK.",
   "source": "https://developer.sailpoint.com/docs/tools/sdk/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.sdk.languages[1]",
   "note": "The SDK index lists an official PowerShell SDK.",
   "source": "https://developer.sailpoint.com/docs/tools/sdk/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.sdk.languages[2]",
   "note": "The Python SDK page documents sailpoint >= 2.0.0, PAT configuration, and BaseURL https://[tenant].api.identitynow.com.",
   "source": "https://developer.sailpoint.com/docs/tools/sdk/python/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.sdk.languages[3]",
   "note": "The SDK index lists an official TypeScript SDK.",
   "source": "https://developer.sailpoint.com/docs/tools/sdk/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.sdk.languages[4]",
   "note": "The SDK index lists an official Angular SDK.",
   "source": "https://developer.sailpoint.com/docs/tools/sdk/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.cli.exists",
   "note": "SailPoint documents the official sail CLI for ISC, with Windows MSI, Homebrew (sailpoint-cli), and Linux deb/rpm installers, plus OAuth and PAT authentication.",
   "source": "https://developer.sailpoint.com/docs/tools/cli",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.extensibility.scripting[0]",
   "note": "SailPoint Identity Services documents SaaS Workflows, including building, managing, triggers, actions, operators, templates, and JSONPath. That is a vendor workflow engine, not a public third-party plugin SDK.",
   "source": "https://documentation.sailpoint.com/saas/help/workflows/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.data_access.export[0]",
   "note": "Documented GET calls return JSON representations, for example a JSON identity from /public-identities/v1.",
   "source": "https://developer.sailpoint.com/docs/api/getting-started",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "modalities.agent_docs.llms_txt",
   "note": "https://developer.sailpoint.com/llms.txt returned 404 on 2026-09-13.",
   "source": "https://developer.sailpoint.com/llms.txt",
   "tier": "scraped"
  },
  {
   "date": "2026-09-13",
   "fact": "verdict.scores.api",
   "note": "The ISC REST API is public, documented, read/write for admin resources, and backed by OAuth plus official SDKs. Tenant-specific hosts and the V3 rate limit keep it in the broad-production tier rather than unusual completeness.",
   "source": "https://developer.sailpoint.com/docs/api/getting-started",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "verdict.scores.cli",
   "note": "The official sail CLI supports OAuth and PAT, has installers for Windows, macOS, and Linux, and documents connectors, search, SP-Config, transforms, and workflows. It is a practical batch path, not a full replacement for the REST catalogue.",
   "source": "https://developer.sailpoint.com/docs/tools/cli",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "related.alternatives",
   "note": "The developer portal keeps IdentityIQ on a separate documentation tree (plugin developer guide and IIQ API specs). This record does not merge IIQ into ISC.",
   "source": "https://developer.sailpoint.com/docs/iiq/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "freshness.watch[0].url",
   "note": "Opened and verified as the current ISC / Human Fabric product page.",
   "source": "https://www.sailpoint.com/products/identity-security-cloud",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "freshness.watch[1].url",
   "note": "Opened and verified as the current ISC API getting-started guide. Automated WebFetch returned 409; a browser-style GET returned 200.",
   "source": "https://developer.sailpoint.com/docs/api/getting-started",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "freshness.watch[2].url",
   "note": "Opened and verified as the current ISC authentication guide covering PAT, client credentials, and authorization code. Automated WebFetch returned 409; a browser-style GET returned 200.",
   "source": "https://developer.sailpoint.com/docs/api/authentication",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "freshness.watch[3].url",
   "note": "Opened and verified as the current ISC API specification index. Automated WebFetch returned 409; a browser-style GET returned 200.",
   "source": "https://developer.sailpoint.com/docs/api/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "freshness.watch[4].url",
   "note": "Opened and verified as the current sail CLI guide, including installers and OAuth/PAT configuration.",
   "source": "https://developer.sailpoint.com/docs/tools/cli",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "freshness.watch[5].url",
   "note": "Opened and verified as the current official SDK index listing Go, PowerShell, Python, TypeScript, and Angular.",
   "source": "https://developer.sailpoint.com/docs/tools/sdk/",
   "tier": "declared"
  },
  {
   "date": "2026-09-13",
   "fact": "freshness.watch[6].url",
   "note": "Opened and verified as the current SaaS Workflows documentation hub.",
   "source": "https://documentation.sailpoint.com/saas/help/workflows/",
   "tier": "declared"
  }
 ],
 "freshness": {
  "last_verified": "2026-09-13",
  "volatility": "high",
  "watch": [
   {
    "type": "docs",
    "url": "https://www.sailpoint.com/products/identity-security-cloud"
   },
   {
    "type": "docs",
    "url": "https://developer.sailpoint.com/docs/api/getting-started"
   },
   {
    "type": "docs",
    "url": "https://developer.sailpoint.com/docs/api/authentication"
   },
   {
    "type": "docs",
    "url": "https://developer.sailpoint.com/docs/api/"
   },
   {
    "type": "docs",
    "url": "https://developer.sailpoint.com/docs/tools/cli"
   },
   {
    "type": "docs",
    "url": "https://developer.sailpoint.com/docs/tools/sdk/"
   },
   {
    "type": "docs",
    "url": "https://documentation.sailpoint.com/saas/help/workflows/"
   }
  ]
 },
 "homepage": "https://www.sailpoint.com/products/identity-security-cloud",
 "id": "sailpoint-identity-security-cloud",
 "license": "commercial",
 "modalities": {
  "agent_docs": {
   "llms_txt": false
  },
  "api": {
   "auth": [
    "oauth2-client-credentials",
    "oauth2-authorization-code"
   ],
   "coverage": "partial",
   "docs": "https://developer.sailpoint.com/docs/api/getting-started",
   "exists": true,
   "kinds": [
    "rest"
   ]
  },
  "cli": {
   "exists": true
  },
  "computer_use": {
   "issues": [],
   "viability": "unknown"
  },
  "data_access": {
   "export": [
    "api-json"
   ],
   "import": []
  },
  "extensibility": {
   "scripting": [
    "workflows"
   ],
   "webhooks": "unknown"
  },
  "integrations": {
   "make": "unknown",
   "n8n": "unknown",
   "power_automate": "unknown",
   "zapier": "unknown"
  },
  "mcp": {
   "first_party": "unknown",
   "third_party": [],
   "verdict": "unknown"
  },
  "rpa": {
   "drivability": "unknown",
   "notes": "No repeatable UI probe was run. The documented machine paths are the Identity Security Cloud REST APIs, official SDKs, the sail CLI, and the SaaS workflow engine, not browser control of the admin console. IdentityIQ is a separate product.\n",
   "ui_stack": [
    "web-dom"
   ],
   "vendor_support": []
  },
  "sdk": {
   "exists": true,
   "languages": [
    "go",
    "powershell",
    "python",
    "typescript",
    "angular"
   ],
   "official": true
  }
 },
 "name": "SailPoint Identity Security Cloud",
 "platforms": [
  "web"
 ],
 "related": {
  "alternatives": [
   "okta",
   "microsoft-entra-id",
   "hashicorp-vault"
  ],
  "our_products": []
 },
 "schema_version": 1,
 "score_version": 1,
 "status": "active",
 "vendor": "SailPoint",
 "verdict": {
  "best_path": "api",
  "scores": {
   "api": 8,
   "cli": 7,
   "computer_use": null,
   "integrations": null,
   "mcp": null,
   "overall": 8,
   "rpa": null
  },
  "summary": "SailPoint Identity Security Cloud is automatable today through a public REST API on https://{tenant}.api.identitynow.com, official SDKs, and the official sail CLI. Getting Started shows personal access tokens exchanged with grant_type=client_credentials at /oauth/token; PATs are limited to 10 per user. The authentication guide also documents OAuth 2.0 client credentials for API clients and authorization code (plus a desktop/CLI PKCE variant) against {tenant}.login.sailpoint.com/oauth/authorize and {tenant}.api.identitynow.com/oauth/token. The spec index lists identities, accounts, sources, access requests, certifications, roles, entitlements, workflows, OAuth clients, and many other admin resources. A V3 gateway rate limit of 100 requests per access token per 10 seconds is declared. Official SDKs exist for Go, PowerShell, Python, TypeScript, and Angular. The sail CLI installs from Windows MSI, Homebrew, or Linux deb/rpm, supports OAuth and PAT, and documents connectors, search, set, spconfig, transform, VA, cluster, and workflow commands. SaaS Workflows are a vendor JSON engine, not a third-party plugin SDK. Human Fabric is the current marketing name for the ISC evolution, not a separate API. IdentityIQ is documented on a separate developer tree and is outside this record. First-party MCP ownership is not established. Computer-use viability is unassessed. API scores 8 and is the best path.\n"
 }
}