Frequently Asked Questions About Sailpoint

What if I am missing a group in Secret Server after syncing with SailPoint?

In certain scenarios, some groups may not appear in the Secret Server Groups section. This typically occurs when the groups are not yet synchronized with the Secret Server on the Platform. To address this, the Secret Server on the Delinea Platform provides a synchronization feature that allows administrators to sync all platform groups with Secret Server.

If any group is missing from the list, you can manually edit or add groups in the platform before initiating a sync.

Steps to edit or to add missing groups

  1. Log in to the Platform using an administrator account.
  2. Navigate to Access > Groups.

  3. Review the existing groups to confirm if the group is already created but may need to be updated.

  4. Click on the desired group name from the grid to open its details, then select the Edit button to update the group’s Name or Description.

  5. After making the changes, click Save. Once saved, the updated group will automatically sync with Secret Server and SailPoint.

To add a new group:

  1. Click Add Group, provide the required details (Name, Description), then save.

  2. Enter the appropriate Name and Description, then click Save. The new group will be created.

  3. To manage group membership, open the newly created group, go to the Members tab, and add or remove members as needed.

  4. Go to the Members tab to view the existing list of members.

  5. To add new members, click Assign Member, then select and add the desired members.

  6. To remove members from the group, select the members you want to remove, then click Unassign. The selected members will be removed from the group.

To sync all groups:

  1. Log in to the Platform using an administrator account.
  2. Navigate to Access > Groups.

  3. In the Secret Server section, click Platform Groups Sync.

  4. You will be redirected to the Platform Groups Sync page, where you can view all platform groups as well as any groups missing in the Secret Server.

  5. Click the Sync now button.

  6. After syncing, all platform groups will be synchronized between the platform and the Secret Server.

For SCIM frequently asked questions, see the SCIM FAQ topic.

Does SailPoint support folder permissions?

In SailPoint IIQ testing, there was no UI option to assign a group to a folder through the SailPoint interface; however, Delinea SCIM Cloud does support assigning both Users and Groups using the ContainerPermissions SCIM endpoint.

Please refer to SailPoint’s PAM module documentation for configuration details.