Beyond employees: Building better visibility for your non-employee workforce
Source: YouTube · SailPoint · published Jul 1, 2026 · 59:28
SailPoint's Non-Employee Risk Management (NERM) solution addresses the hidden security risks of fragmented non-employee access by providing purpose-built visibility, which developers can further extend using newly released SDKs and a UI Development Kit 0:50-1:00.
Key Takeaways:
• NERM manages contractors and vendors who fall outside traditional identity lifecycle management, utilizing a flexible data model based on core profile types like organizations, locations, departments, people, and assignments 1:48-2:32.
• SailPoint's TypeScript, Python, PowerShell, and Golang SDKs now fully support NERM APIs, enabling automated data generation and management via standard Personal Access Token (PAT) authentication 5:30-6:03.
• A custom TypeScript data generator using FakerJS can rapidly populate a NERM tenant with realistic test data—creating people, locations, departments, organizations, and assignments in sequential batches 10:13-11:00.
• The UI Development Kit (built on Angular and Electron) allows developers to create custom dashboards that visualize metrics, filter assignments, and trigger actions like extending or ending assignments directly from the interface 25:04-26:36.
• Custom dashboard actions integrate seamlessly with existing NERM workflows, ensuring that extending or offboarding a non-employee respects pre-configured approval processes rather than bypassing them 49:12-49:54.
This demonstration highlights how developers can leverage SailPoint's open-source tools and AI-assisted development to build robust, actionable NERM dashboards tailored to their organization's compliance needs.
Sources:
- 0:50-1:00 Introduction to NERM and the hidden risk problem
- 1:48-2:32 NERM definition, target audience, and core data model
- 5:30-6:03 Announcement of NERM APIs in all major SailPoint SDKs
- 10:13-11:00 Generating fake non-employee data using FakerJS
- 25:04-26:36 Overview of the UI Development Kit and custom dashboard
- 49:12-49:54 Triggering extend/end assignment workflows from the custom UI
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hello everyone. My name is Tyler Myrose, senior staff developer advocate here at Sailpoint. And my you'll see me all around the developer community. My job is to help you uh the customers, the partners, the extenders of Salepoint um extending Salepoint's products. Uh this could be through our developer documentation, our SDKs, our CLI, as well as any other tools that we offer. Today, we're going to be going beyond employees, building a better visibility into your non-employee workforce. So, what are we going to be talking about today? First thing is what is NERM? NERM stands for non-employee resource management. We'll get into that in just a minute. We'll talk about the hidden risk problem. Then we're going to talk about NERM and its data model. Uh the different profile types that you'll n…