Non-employee risk management workflows: Improving visibility and control
Source: YouTube · SailPoint · published Jul 1, 2026 · 29:26
SailPoint is introducing new workflow enhancements for its Non-Employee Risk Management (NeRu) product—specifically a visual workflow trace and in-flight session continuity—to solve the critical challenges of opaque execution and operational friction 0:22.
Key Takeaways:
• Non-employee workflows orchestrate the entire identity lifecycle, from onboarding and in-flight changes to off-boarding, connecting human approvals with system-to-system tasks 1:20.
• Historically, when a workflow failed, "opaque execution" made debugging difficult because errors lacked actionable context and nested child workflow logic was hidden 3:16.
• "Operational friction" occurred when publishing even minor workflow updates canceled active sessions, forcing admins into manual rework or causing dangerous change paralysis during go-lives 4:44.
• The new workflow trace visualization provides an interactive, searchable timeline mapped directly to raw logs, allowing users to instantly pinpoint failures and nested logic errors 11:00.
• In-flight session continuity decouples updates from active work, ensuring existing sessions run on their original configuration while new requests automatically use the updated workflow 14:02.
These updates eliminate the need for change freezes, drastically reduce support tickets, and empower teams to safely iterate on workflows at any time 17:28.
Sources:
- 0:22 Introduction to NeRu workflow challenges and solutions
- 1:20 Definition of a non-employee workflow and its lifecycle scope
- 3:16 Explanation of opaque execution and debugging difficulties
- 4:44 Operational friction caused by configuration updates
- 11:00 Workflow trace visualization and search capabilities
- 14:02 In-flight session continuity and safer iteration
- 17:28 Impact on support tickets and mean time to resolution
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[music] >> Uh hello. Uh my name is Jeff Lakey. I'm a product manager here at SailPoint working on the non-employee risk management product. Uh today, we're going to talk about a critical part of your non-employee risk management program, the workflows that power it all. We'll be focusing on new capabilities uh designed to give you much greater visibility and control over how you improve those workflows over time. Uh so, here's a quick look at what we're going to cover today. Uh going to start with a brief overview of what a non-employee risk management workflow is, what it does, uh and then we'll dive into some common challenges that our customers have reported, uh opaque execution and operational friction. Um after we define those problems, uh the majority of our time is going to be spent…