SailPoint IdentityIQ 9.0 explained, and how to upgrade from 8.x

SailPoint announced IdentityIQ 9.0 at its Navigate conference on October 6, 2026. We'd read it as a platform release first. 9.0 moves from Java EE to Jakarta EE and drops Oracle WebLogic and Oracle Solaris, so plan for your server and your custom code before anything else. It also adds start and end times on access, and SailPoint is shipping tooling that scans your environment before you upgrade.

SailPoint's press release talks about "the release of IdentityIQ 9.0", but there's no confirmed general-availability date. A March 2026 SailPoint community post gave a tentative target of Q4 2026, and as of October 22, 2026 there were no public release notes or 9.0 supported-platforms list. On October 7 an Expert Ambassador on SailPoint's developer forum wrote that no confirmed release date had been published, and on October 13 a forum member running IdentityIQ 8.5 called 9.0 "still not yet released". Most of what follows comes from SailPoint's own public pages. Where we lean on community forum posts, we say so. We'll update this post when the release notes go public.

Every card below is something SailPoint has said in public about 9.0, with a link to where it said it. In our view, read the Jakarta EEdefinitionJava EE's successor. Since Jakarta EE 9, packages are jakarta.*, not javax.*. 10 card first, because it decides how much of your custom code has to change.

The foundation: from javax to jakarta. Java EE is the set of standard Java APIs IdentityIQ 8.x uses for servlets, web services and similar plumbing. It became Jakarta EE when it moved to the Eclipse Foundation, and Jakarta EE 9, in December 2020, renamed its specification packages from javax.* to jakarta.*. Tomcat split along the same line. Tomcat 9 is the last major version for Java EE, 10.1 implements Jakarta EE 10 and 11 implements Jakarta EE 11. SailPoint spelled out what that meant in April 2025: no Tomcat 10.1 or 11 support until IdentityIQ became a Jakarta EE application, not in 8.5, and planned for the next major version. In March 2026 it named the version: 9.0 implements the Jakarta EE 10 specification, and your application servers must support Jakarta EE 10.

So look at your own code first. Plugins, custom JARs and rules that import Jakarta EE classes under javax.*, such as javax.servlet, need changing. Packages that belong to core Java itself keep their javax names. It's the same dependency that keeps IdentityIQ 8.5 off Tomcat 10 and 11, which a community Ambassador spelled out on SailPoint's developer forum in August 2026.

Time-based access, down to the time of day. You've had temporary access for a while. 8.4 calls them sunrise and sunset dates, 8.5 calls them start and end dates, and you put them on a role or on one person's access to a role or entitlement. Out-of-the-box workflows act on them, and a separate setting sends a notice before access expires. What SailPoint says 9.0 adds is exact start and end times, with time zone support, across roles and entitlements. It's pitched at privileged access on critical systems, where access should exist only while it's needed.

Less friction for reviewers and admins. Reviewers keep their preferences between sessions, and SailPoint says search returns complete results the first time. Application setup was redesigned for business administrators. Upkeep of governance data moves too. Business owners now review ownership records and entitlement descriptions on a schedule, so central administrators aren't left maintaining them. Worth showing each group in your rehearsal environment before go-live.

An upgrade tool, because upgrades are where on-premises programs stall. SailPoint's press release calls the manual work the main risk that stalls on-premises upgrades, and 9.0 comes with tooling that scans the environment, finds what has to change and handles most of it automatically. SailPoint has also described a pre-check utility for the Jakarta EE 10 move. It finds custom Java classes that conflict with Jakarta 10, rules, forms and workflows whose BeanShell scripts conflict, and custom applications whose formPaths point to XHTML files. Public sources don't say whether the pre-check and the upgrade tooling are the same tool, so ask SailPoint.

We kept the table to what's publicly documented for 8.4, 8.5 and 9.0. If a cell says a detail isn't public, SailPoint hasn't published it outside the customer login. That doesn't mean the feature is missing.

Two notes on the table. The WebLogic and Solaris rows for 8.5 come from SailPoint's own notices, which say support ends with 9.0 and send you to the 8.5 supported-platforms list for today's support. The 8.4 temporary access cell comes from the 8.4 docs. They call start and end dates sunrise and sunset dates.

Support timeline. SailPoint's support policy says each software version is supported for a fixed period after release, and that a version at End of Support is no longer eligible for software support. The per-version table lives on SailPoint's Compass community. The link in the public policy no longer resolves, and the supported-platforms matrix asks for a customer sign-in, so we can't state end dates for 8.3, 8.4 or 8.5 here. For scale, SailPoint's upgrade notes record that IdentityIQ 8.1 reached limited support on February 21, 2023 and dropped support on February 21, 2024. Ask your SailPoint Customer Success Manager for the dates that apply to your version.

From the outside, an IdentityIQ 9.0 deployment looks like an 8.5 one: people use the web interface, the application talks to its database and to your applications through connectors, and IQServicedefinitionIdentityIQ's Windows service, for anything only Win32 APIs can reach., the Windows service IdentityIQ uses for Win32 APIs, still has a job to do. The change is in the middle tier: the application server, the Java packages the code uses, and every piece of your custom code that touches them. The diagrams are simplified. The 9.0 side shows the changes SailPoint has announced; we've drawn the database and IQService as they are in 8.5 because SailPoint hasn't published 9.0 requirements for them.

SailPoint hasn't published an upgrade path to 9.0. Its public upgrade considerations page says versions can be skipped, but community members report different guidance from SailPoint directly. In a September 2026 forum thread, one member of SailPoint's Expert Ambassador program (a community member, not SailPoint staff) wrote that SailPoint Customer Success Engineering advises installing every intermediate GA release. Another said SailPoint confirmed to them that an upgrade from 8.3 should go through 8.4 and then 8.5. Get your path confirmed in writing for your exact version before you schedule anything. The steps below are the order we'd work in, based on what's public.

SailPoint aims 9.0 at customers with extensive data residency requirements, strict regulatory constraints or deeply customized programs. If that's you, you kept identity governance on premises on purpose, and the gains land differently depending on your job.

• Security leaders: exact start and end times on roles and entitlements.
• Platform teams: current app servers, before Tomcat 9.0.x support ends in 2027.
• Reviewers: saved review preferences and fuller search results.
• Business administrators: a redesigned application setup built for them.
• Owners and auditors: ownership data reviewed by the people who know it.
• Developers: one standard configuration approach for custom forms and scripts.

Who has the most work to do: teams on WebLogic or Solaris, which face a platform move as well as an upgrade, and teams with years of custom plugins and rules, where the javax-to-jakarta change concentrates. For them, the scan and a rehearsal matter more than the feature list.

Cohash's identity practice plans and runs IdentityIQ upgrades. For 9.0, we review custom rules, workflows and plugins for the Jakarta EE move and rehearse on a copy of production data first. See the SailPoint platform page, hire SailPoint engineers for your own team, or book a free assessment of your IdentityIQ estate.