A cloud-native SIEM solution that provides intelligent security analytics and threat detection across systems
Hello @Isabella Baker ,
This looks more like a Function App runtime/dependency issue than a SailPoint API permission problem.
The SailPoint IdentityNow connector is a community Azure Functions connector and is intended to run on Python 3.9, not 3.8. There is also a known issue where the function fails during SearchEvent module import/startup, so no logs are ingested even though the credentials are correct.
Also, changing the Python version in the portal alone is usually not enough. For Azure Functions, you need to rebuild and redeploy the app so dependencies are recreated for the new runtime. Using remote build is recommended.
So the practical fix is:
Redeploy the connector as a new Function App using Python 3.9
Use remote build
Verify all required app settings are present and case-sensitive
If it still fails with import/dependency errors, treat it as a connector package issue, not an auth issue
Because this connector is supported by SailPoint, not Microsoft, I would raise it with SailPoint support and reference the known GitHub issue if the built-in Sentinel deployment continues to deploy an incompatible runtime.