As a leading systems integrator of BeyondTrust and SailPoint we're delighted that this integration is available because it's a key goal of ours to offer clients a broad identity platform.
Identity Solutions Leader and Principal at Deloitte


As a leading systems integrator of BeyondTrust and SailPoint we're delighted that this integration is available because it's a key goal of ours to offer clients a broad identity platform.
Identity Solutions Leader and Principal at Deloitte

Get visibility into Privileged and Non-Privileged activity from the same platform.
Get a complete view of an identity’s access and its associated privileged accounts, meet compliance regulations, and eliminate overentitled users.
Earn centralized control over all privileged and non-privileged accounts, enabling privileged access based on user role or lifecycle event changes.
Enable storage and management of service account credentials with credential cycling, retrieving them only when performing identity tasks.
Use the SCIM API to intuitively automate the exchange of identity data to your organization's specifications.



The integration of BeyondTrust's Privileged Access Management (PAM) Platform & SailPoint Predictive Identity Platform enables IT organizations to manage user access for privileged and nonprivileged accounts, as well as gain full visibility into user and session activity, centralized governance, and more — all using industry standards to reduce implementation time and cost.
Identity governance solutions help IT teams answer “who has access to what?” The integrated BeyondTrust and SailPoint solution allows organizations to answer “is that access appropriate for privileged users?” and “is that privileged access being used appropriately?”
The System for Cross-Domain Identity Management (SCIM) API built into the SailPoint IdentityIQ & IdentityNow PAM Modules allows privileged account vaults and associated entitlements to be visible and managed throughout the identity governance process.
This allows the automated provisioning of privileged accounts to new end users who require them based on their job function, group membership, or business role, and allows managers to recertify or remove privileged accounts on a periodic and/or event-driven basis.
BeyondTrust Password Safe provides privileged password management and privileged session management in one unified solution. With secure discovery, management, auditing, and monitoring for any privileged credential, Password Safe customers can achieve complete control and accountability over privileged accounts throughout the cross-platform enterprise.
The resulting benefits of the integration include:
Automated Access: Immediately empower IT admins, specialists and executives with the privileged access they need to do their job.
Centralized Management: Provide a complete, centralized view of each identity’s access across all standard and privileged/shared/system accounts.
Reduced Risk: Continuously remove unnecessary privileged accounts as users switch jobs or leave the company.
Complete Import
Importing a user provides direct access to the BeyondTrust PAM Platform, providing controlled privileged access and an activity audit. The account and its entitlement access data are fed back to the SailPoint Predictive Identity Platform via API, providing visibility into user access.
Dynamic Entitlement Export & Reporting
All entitlements granted by the BeyondTrust PAM Platform are provided directly to SailPoint via API, providing complete support of out-of-station processes defined in the Predictive Identity Platform by including ad hoc reviews of user access.
Automated Safe API
Direct API-based integration provides immediate provisioning of and visibility into all privileged access. Depending on role membership, users may be granted immediate run time access to request passwords or sessions for privileged accounts and be provided granular least privilege policies.
Dynamic Activity Audit & Reporting
The BeyondTrust PAM Platform provides complete visibility and control of privileged access and extensive reporting, allowing organizations to effectively answer: Is that access being used appropriately?

The integration of BeyondTrust's Privileged Access Management (PAM) Platform & SailPoint Predictive Identity Platform enables IT organizations to manage user access for privileged and nonprivileged accounts, as well as gain full visibility into user and session activity, centralized governance, and more — all using industry standards to reduce implementation time and cost.
Identity governance solutions help IT teams answer “who has access to what?” The integrated BeyondTrust and SailPoint solution allows organizations to answer “is that access appropriate for privileged users?” and “is that privileged access being used appropriately?”

The System for Cross-Domain Identity Management (SCIM) API built into the SailPoint IdentityIQ & IdentityNow PAM Modules allows privileged account vaults and associated entitlements to be visible and managed throughout the identity governance process.
This allows the automated provisioning of privileged accounts to new end users who require them based on their job function, group membership, or business role, and allows managers to recertify or remove privileged accounts on a periodic and/or event-driven basis.
BeyondTrust Password Safe provides privileged password management and privileged session management in one unified solution. With secure discovery, management, auditing, and monitoring for any privileged credential, Password Safe customers can achieve complete control and accountability over privileged accounts throughout the cross-platform enterprise.
The resulting benefits of the integration include:
Automated Access: Immediately empower IT admins, specialists and executives with the privileged access they need to do their job.
Centralized Management: Provide a complete, centralized view of each identity’s access across all standard and privileged/shared/system accounts.
Reduced Risk: Continuously remove unnecessary privileged accounts as users switch jobs or leave the company.

Complete Import
Importing a user provides direct access to the BeyondTrust PAM Platform, providing controlled privileged access and an activity audit. The account and its entitlement access data are fed back to the SailPoint Predictive Identity Platform via API, providing visibility into user access.
Dynamic Entitlement Export & Reporting
All entitlements granted by the BeyondTrust PAM Platform are provided directly to SailPoint via API, providing complete support of out-of-station processes defined in the Predictive Identity Platform by including ad hoc reviews of user access.
Automated Safe API
Direct API-based integration provides immediate provisioning of and visibility into all privileged access. Depending on role membership, users may be granted immediate run time access to request passwords or sessions for privileged accounts and be provided granular least privilege policies.
Dynamic Activity Audit & Reporting
The BeyondTrust PAM Platform provides complete visibility and control of privileged access and extensive reporting, allowing organizations to effectively answer: Is that access being used appropriately?
