specification: FinOps Framework
specificationVersion: '1.0'
schema: https://www.finops.org/framework/
provider: SailPoint
providerId: sailpoint
created: '2026-05-04'
# Provenance stamped 2026-08-11: this artifact was written by the API Evangelist
# bulk sweep dated 2026-05-04, not harvested from the provider. See roadmap#35.
method: generated
modified: '2026-05-05'
reconciled: false
tags:
  - Identity Security
  - IAM
  - B2B
  - FinOps
  - FOCUS
description: 'FOCUS-aligned FinOps shape for SailPoint Identity Security Cloud: annual subscription priced
  per identity / per module rather than per API call. API consumption is bounded by a 100 / 10s per-token
  rate limit and is not separately metered for billing.'
sources:
  - https://www.sailpoint.com/products/identity-security-cloud
  - https://developer.sailpoint.com/docs/api/getting-started
notes: SailPoint does not publish per-identity prices or invoice-line schemas publicly. The financial
  unit of consumption is the identity covered by the subscription, not the API request.
alignedWith:
  framework: FinOps Foundation Framework
  frameworkUrl: https://www.finops.org/framework/
  dataSpec: FOCUS
  dataSpecVersion: '1.3'
  dataSpecUrl: https://focus.finops.org/focus-specification/v1-3/
publisherName: SailPoint Technologies, Inc.
serviceCategory: Identity Security / IGA
billingModel:
  pricingCategory: Subscription / Contact Sales
  billingFrequency: Annual
  billingCurrency: USD
  chargeCategories:
    - Purchase
focusColumns:
  ServiceName: SailPoint Identity Security Cloud
  ServiceCategory: Identity Security
  ProviderName: SailPoint
  PublisherName: SailPoint Technologies, Inc.
  InvoiceIssuerName: SailPoint Technologies, Inc.
  BillingCurrency: USD
meters:
  - name: subscribed_identities
    unit: identity
    aggregation: max
    dimensions:
      - tier
  - name: enabled_modules
    unit: module
    aggregation: count
  - name: api_requests
    unit: request
    aggregation: sum
    dimensions:
      - access_token
principles:
  - name: Visibility
    description: Pull identity counts, source coverage, and module enablement from the SailPoint admin
      console; correlate with internal HR and joiner/mover/leaver feeds to validate billed identity counts
      against active workforce.
  - name: Allocation
    description: Allocate the SailPoint subscription by business unit using identity ownership (HR org
      mapping). Tag non-employee identities (contractors, vendors) separately, since they often drive
      add-on cost.
  - name: Optimization
    description: Reduce orphaned and dormant identities ahead of renewal; consolidate sources where possible;
      avoid token-spam patterns that hit the 100 / 10s gateway limit and cause runaway retry traffic.
  - name: Accountability
    description: Identity / IAM team owns SailPoint spend with finance; renewal review cycles should reconcile
      paid identity counts against active populations and model expected delta for the next term.
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com