All posts

SailPoint Pricing: Suites, Cost Drivers and Quote Checklist

10โ€“16 minutes
SailPoint Pricing: Suites, Cost Drivers and Quote Checklist, featured image

SailPoint doesn't publish a per-identity price, so every figure you see on third-party sites is an estimate, not an offer. The current US suites page names the packages and sends buyers to a demo, and the cost that lands on your order form depends on the identities you govern, the capabilities you license and how much implementation work your environment needs. What follows is how the packaging works today, what drives the bill, and how to get a quote you can compare.

Quick verdict: Ask for an itemized written quote with the billable identity defined. Don't convert a blog post's dollars-per-identity figure into a SailPoint list price.

What does SailPoint cost in 2026?

SailPoint pricing is a sales-led enterprise quote. The official US suites page shows package descriptions and a Book a demo button, with no price table. A price quoted by an independent analyst may describe one deployment, one contract year or a guess, but it can't stand in for an offer, and you shouldn't budget from it.

The fastest defensible budget starts with three inputs, and you'll need all of them: how many identities you intend to govern, which modules you need, and how much integration work makes governance operational. Always ask for a written quote that separates the recurring subscription from implementation and ongoing services, then compare the three-year total instead of a single headline number.

Which SailPoint plans and suites can you buy?

The current suites page describes Standard for core human identity governance and two newer human-plus-agentic packages, Agentic Business and Agentic Business Plus. Standard emphasizes employee lifecycle automation, audit readiness and a single view of access. Agentic Business extends governance to non-human identities and includes Data Access Security. Agentic Business Plus adds Cloud Infrastructure Entitlement Management and Atlas Enterprise among its included capabilities. Other modules, such as Password Management and Non-Employee Risk Management, are listed as available add-ons rather than included.

  • StandardQuote only Book a demo
    • Employee lifecycle management
    • Audit and compliance readiness
    • Initial allotment of 2 non-human identities per licensed human identity
  • Agentic BusinessQuote only Book a demo
    • Governance for human and non-human identities
    • Least standing privilege
    • Data Access Security included
    • Initial allotment of 5 non-human identities per licensed human identity
  • Agentic Business PlusQuote only Book a demo
    • Zero standing privilege with just-in-time access
    • Cloud Infrastructure Entitlement Management included
    • Atlas Enterprise included
    • Initial allotment of 5 non-human identities per licensed human identity

Package scope as described on SailPoint's US suites page on November 3, 2026. SailPoint publishes no dollar prices for these suites. Confirm current SKU names and entitlements on your order form.

Older SailPoint material refers to Identity Security Cloud Standard, Business and Business Plus. Those names appear in the company's December 2025 Navigators announcement. They help when you read an older contract, but ask SailPoint to map legacy suite names to the current quote and entitlement schedule. Don't assume a 2025 package table is today's SKU catalog, because it probably isn't.

SailPoint's Navigators program sits beside the suites. It's a purchasing model built on a pre-negotiated commitment, and its product page lists three paths: Digital Identity Flex, Premier Flex and Modernization Flex. These are ways to buy, not a public dollar menu, so you'll want to confirm compatibility and commercial terms for your specific suite.

PackagingBest starting conversationPricing visibility
StandardHuman identity lifecycle and access governanceRequest a quote
Agentic BusinessHuman and non-human identity governanceRequest a quote
Agentic Business PlusExpanded controls and just-in-time accessRequest a quote
NavigatorsFlexible allocation of advanced capabilitiesNegotiated commitment
  • Lifecycle automation and audit readiness for employees onlyStart the quote conversation at Standard
  • Service accounts, machine identities and AI agents under governanceAsk for Agentic Business and its non-human identity allotment
  • Just-in-time access and cloud entitlement controlsAsk for Agentic Business Plus
  • Uncertain identity inventory or changing capability needsAsk how a Navigators commitment would be allocated
  • An IdentityIQ estate moving to the cloudAsk about Modernization Flex and migration terms

How is the number of licensed identities calculated?

Start with the contract's definition of an identity, because that's what you'll be billed on. An employee, a contractor, a service account, a machine identity and an AI agent aren't interchangeable commercial units.

The suites page describes an initial allotment of two non-human identities for each licensed human identity under Standard, and five for each licensed human identity under Agentic Business and Agentic Business Plus. It adds that extra capacity can be bought as an NHI Capacity Pack and that final terms sit in customer agreements. Never apply these ratios to a legacy quote without written confirmation.

SailPoint initial non-human identity allotment per licensed human identity: 2 to 1 for Agentic Standard, 5 to 1 for Agentic Business and Business Plus
Initial allotments as described on SailPoint's suites page, November 3, 2026.

For a planning exercise, suppose a company has 4,000 licensed human identities. A 5:1 allotment would equal 20,000 non-human identities. That's arithmetic only. It isn't a price, and it doesn't guarantee any entitlement. Confirm the package, the definition of a non-human identity, how duplicates are treated, peak counts and renewal true-up rules. Ask whether inactive identities and external populations are billed, and whether discovery alone creates a billable identity. Don't let sales wave this away; it's your money.

Of course, a quote should list each meter, its committed quantity, its overage treatment and the effective date of any change.

What are the biggest SailPoint cost drivers?

The subscription is only one component, but it's the one buyers fixate on. The largest variables are identity population, licensed scope, application integrations, policy complexity, data cleanup, deployment services and support. A single HR-to-directory provisioning flow is a very different project from governing dozens of legacy systems with custom approvals and separation-of-duties rules.

Identity scope: Count workforce, non-employees, machines and agents separately.

Application scope: List every target system with its connector method, owner and integration status.

Governance depth: Decide whether you need basic lifecycle events, access requests, periodic certifications, role modeling, risk controls or just-in-time privileges.

Delivery: Price design, implementation, testing, data migration, training and post-launch administration as separate workstreams. SailPoint Expert Services offers hands-on configuration and troubleshooting, but there's no universal implementation price, so you'll need a statement of work, and you shouldn't sign without one.

Commercial structure: Record the support tier, subscription term, annual uplifts, invoicing currency, payment timing and renewal notice period.

How do you build a SailPoint budget without a public rate card?

Build a scenario model before you request the quote, but leave quote cells blank until a salesperson confirms the amounts. Third-party estimates really don't belong in the vendor's price column.

Budget inputBaseline exampleWhat to verify
Human identities4,000Licensed versus discovered identities
Non-human identities6,000Included capacity and extra packs
Connected applications35Standard versus custom connectors
Certification campaigns4 per yearWorkflow and reviewer needs
Contract term (months)36Escalators and exit terms
ImplementationQuote requiredFixed scope, acceptance criteria
Support and success servicesQuote requiredIncluded versus optional

The example is a worksheet. It isn't a recommended deployment or a market benchmark. Annual subscription is the sum of each confirmed meter times its confirmed unit price, plus fixed annual charges. Add one-time implementation, training and integration costs to get year-one cost, because that's the number finance cares about. For a three-year view, include agreed uplifts, expected growth and ongoing administration.

The calculator below only shows the formula. Both amounts are made-up inputs, and they aren't SailPoint prices.

Formula demonstration with invented inputs: 1 quote
  1. One-time implementation (invented input)Replace with the confirmed statement of work$80,000 per year one
  2. Annual subscription (invented input)Replace with the confirmed recurring quote$120,000 per year one

Added together, these invented inputs give $200,000 of year-one contracted spend before taxes and unpriced extras. None of it is a SailPoint estimate.

What does SailPoint Navigators change about pricing?

In December 2025, SailPoint announced Navigators as a flexible purchasing model that complements its suites. The company described a pre-negotiated commitment that can be allocated to eligible advanced capabilities. The Navigators page names Digital Identity Flex for machine and agent identities, Premier Flex for broader capability flexibility and Modernization Flex for IdentityIQ customers moving to the cloud.

This helps when your identity inventory is incomplete or your capability demand is shifting. Flexibility isn't unlimited usage, though, and it's easy to assume otherwise. Ask whether credits expire, whether allocations can move in both directions, whether there are minimum commitments and what happens at renewal. It's an easy question to skip, but it's costly to skip. Ask for a worked example of a midterm reallocation, because you'll want to see how it's invoiced.

A good contract includes a plain-English entitlement appendix, an agreed unit conversion method, a monthly usage report and a named owner for disputes. Without those, flexible purchasing is hard to audit, and you'll find that out at renewal.

How much do implementation and support add?

No verified universal implementation percentage exists. Third-party estimates vary widely and usually omit scope, country, project year and delivery partner, so treat them as prompts for questions; they aren't facts. Ask SailPoint and at least one qualified implementation partner for separately priced statements of work.

Your implementation quote should list source-system discovery, identity correlation, connector build, role and policy design, certification configuration, testing, security review, administrator training and handover. For each workstream request a deliverable, an owner, an acceptance test and a change-order rule. Budget internal staff time as well as external invoices, since it's rarely free.

A staged rollout reduces risk: begin with a few high-value applications, validate identity matching and approvals, then expand. Staging can stretch the project, but it lowers risk, so compare the total cost of a phased program with a single launch, including parallel-run effort.

How should you negotiate a SailPoint contract?

Frankly, you should negotiate a measurable scope, not a speculative discount percentage. Start by requesting a bill of materials with each SKU, entitlement metric, unit price, committed quantity, included add-ons and service line. Ask the vendor to identify any promotional credits and their expiration.

Next, request three scenarios: current population, planned growth and a conservative overage case. Keep the same functional scope across offers so the comparison is meaningful. For an IdentityIQ migration, ask specifically about Modernization Flex and whether migration assistance, dual running or license transition provisions are included.

Then address renewals, where most surprises hide: define price increases, true-up timing, reduction rights, minimums, termination assistance, export rights and the process for contesting usage counts. Ask for a written definition of billable identity. Finally, require an implementation milestone schedule with objective acceptance criteria. A lower first-year subscription can end up costing more if custom connector work or a steep renewal uplift is excluded.

How does SailPoint compare with alternatives on cost?

Compare SailPoint with identity governance platforms on a common requirements sheet. Saviynt is the closest IGA comparison (see SailPoint vs Saviynt), while Microsoft Entra ID and Okta cover adjacent identity functions. Our Microsoft Entra ID pricing guide shows what a published price list looks like by comparison. They aren't automatically equivalent substitutes for a full governance deployment.

Build a capability matrix for joiner-mover-leaver automation, access certifications, entitlement visibility, role design, policy conflicts, non-human identities, connectors and audit evidence. Price only the modules needed to meet the same acceptance tests. A low per-user SSO price isn't comparable to a broader IGA package unless the governance functionality is included.

Ask each vendor to estimate time to first production application and the effort required to onboard the next ten applications. This exposes deployment economics that annual license comparisons miss. Date every competitor price, and don't take it from a review site; take it from the vendor's own US commercial page.

What should I ask SailPoint sales before signing?

Use the following procurement checklist in the discovery call and attach the answers to the purchase approval.

  1. Which current suite and SKU names will appear on the order form?
  2. Which human and non-human identity types are billable?
  3. What's the committed quantity and what happens when it changes?
  4. Which governance capabilities are included, and which require add-ons?
  5. Are all listed connectors included, supported and production-ready?
  6. What's the implementation statement of work and acceptance plan?
  7. Which support and success services are included?
  8. What are the annual uplift, true-up and renewal notice provisions?
  9. How do Navigators credits or capacity packs work in this quote?
  10. Can we see a sample invoice and monthly consumption report?

A procurement-ready answer is specific enough to reproduce the invoice from the entitlement data. If the answer is only a sales slide, request an order-form appendix.

Frequently asked questions

Does SailPoint publish a price per user?

No. The US suites and Navigators pages show no universal per-user rate. Get a dated quote for the exact package and identity definition.

Is SailPoint free?

No free enterprise subscription is advertised. The suites page directs buyers to book a demo, so ask sales about any evaluation terms.

Is SailPoint priced by employee or identity?

SailPoint's metric depends on the package and contract. The suites page talks about licensed human identities plus non-human identity allotments for the agentic packages. Confirm the definitions in your agreement.

Is SailPoint IdentityIQ priced the same as Identity Security Cloud?

SailPoint IdentityIQ and Identity Security Cloud aren't priced alike, since they're sold and deployed differently. Request a product-specific order form and migration terms.

Can I get a fixed three-year price?

A fixed three-year price is worth requesting, but it isn't standard. Negotiate written annual price schedules, growth assumptions and overage provisions.

What's the most useful number to compare?

Three-year total cost for an identical functional scope, covering subscription, implementation, support and internal operations.

The IT Lead

Know who owns every service account.

Import a CSV, nominate owners, collect attestations and keep a review trail an auditor can follow. No credit card required to create a workspace.

Cookie settings · Privacy policy · Imprint