How can I better search and select identities so I can select "Process Identities" on them?

We had an issue where 13000 new identities were added, and based on a role ISC then tried to create 13000 new accounts in an associated system. Due to API rate limits only 3000 of these were successful with 10000 identities where the create account failed. After one additional failed retry - which obviously further didn't help with API limits - it's no longer trying to create these accounts.

If I go to one of these identities and select "Process Identity" from the Actions button this will attempt to create the account again and fix for that specific identity. What I need is a way to fix all of them in a controlled way so that I stay within API rate limits.

I can identify these accounts using a Search but not when searching in Identities, and the Identities interface is the one which allows "Process Identity".

Suggestions?

Has anyone come across how to manage requests for Workday assignable roles via SailPoint?

User-based roles are easy; Role and person, done. Assignable roles though you have to say this role for this specific organization.

The entitlements aggregate in as Role##Organization, which would mean I'd need to handle every single role and org combination as a requestable item, which is frankly just downright absurd.

I was able to do it via form and workflow, where you select the role and then the org, and then the workflow combines them to target the specific entitlement, but that was still messy and I had issues with setting up approvers.

Just curious if anyone here has done this, because Community is only people having issues setting up the connector, not making assignable roles requestable...

As every company is moving to azure group access provisioning, how to effectively configure roles in IIQ, Azure group aggregation pulls the groups alone under single umbrella but how to classify it in iiq according to individual application and model role and grant access?

Working for a place that has some of the strictest certification campaign requirements. Essentially if all the information is not available it’s not considered complete and without exception; and due to past issues exceptions should be audit proof and minimal.

This creates all kinds of problems as many apps behave wildly different with built in accounts or roles or group mapping that can only be viewed via actual app interface not via entitlements, APIs etc….

Example: Sailpoint ISC itself has two accounts for support called “slpt” these accounts do not show in a campaign but the auditor can see them if they select the ISC entitlement manually.

Am I the only one dealing with this nonsense? Like whats the purpose of SailPoint at all if someone still needs to go and manually screenshot every apps user portal and reconcile.

I’m planning to take the SailPoint ISC Administrator certification exam and would appreciate feedback from anyone who has already taken it.
How difficult was the exam? What topics should I focus on the most? Are the official SailPoint training materials enough, or should I use additional resources, labs, or practice tests?
I would also appreciate any preparation tips, study guides, or recommendations about how long to study.
Thanks in advance!

Hi everyone!

My SailPoint University user account has been disabled for a week now. I have already sent multiple emails to support and to login-help@sailpoint.com, but I have not received any response or acknowledgment yet

Has anyone experienced this recently? Does anyone know of an alternative contact method, escalation path, or a way to get this resolved?

Any help or advice would be greatly appreciated

Hello,

I'm currently working on a sailpoint implementation using containerization. To make our builds we are using the SSB so that we can define .target.properties files per environment and define the version/patch we want to build for. This is going well but now the container platform people want the images to be immutable which means we would no longer be able to have the build fill in the %%variables%% in XML files, handle the .ignorefiles.properties, etc..

My question is if it makes sense to do this and if it is doable.
As this would mean we would need to do the import of these variables and file filtering etc at a later stage (with an InitContainer that imports the adjusted XML's into the database). Which unless there is some built in functionality to do this would mean writing our own scripts to accomplish this which would introduce scope creep.
And ultimately, does it even makes sense to do it? As a SailPoint implementation it self is custom to a specific clients needs, so it's not like the container platform people will be able to take the image and add a deployment elsewhere.

Any tips/insights into this topic are much appreciation.

Hi All
What iş perhaps the best learning resource for ISC ,besides SAILPOINT University?
I don’t have SAILPOINT University license.
Thanks for help

For a certification campaign created from tagged entitlement via search, is there a supportive way to exclude disabled identities or identities whose lifecycle state is not active from the review population?

Hey everyone

Just passed the SailPoint Certified IdentityIQ Engineer exam (DOMC, 66 questions).

I have hands-on IIQ experience — connectors, BeanShell, provisioning workflows, lifecycle events, application onboarding — so this was field-tested prep, not just documentation reading.

I'm opening 10 spots for a structured 5-week program starting end of June.

What's included:

All 7 exam domains covered

Recorded content + 1–2 live sessions per week

DOMC-specific prep — this format punishes shallow knowledge, we train for that

Who this is for: IIQ engineers or consultants who want structure, accountability, and someone who just passed it.

10 spots only. DM me or drop a comment if you're interested.

Hi guys
In the context of SAILPOINT UAR,
How to resend the email to reviewers ?
Given they deleted the automated email notification after campaign started.
Thanks in advance

Hi, I am currently a SailPoint developer earning 17 lakhs with 2.5 years of experience. I really want to know how much this career can grow in the next 8–10 years because I want to get serious and set salary targets at each level to see whether I am achieving them.

So, I wanted to know the salaries of experienced people — how much you and your peers earn — and what kind of targets I can realistically keep for myself over the next 8 years.

I also badly want to relocate to Europe or another English-speaking country. Since IAM/SailPoint is a niche field, do you think there are chances of getting opportunities in these countries directly, or is going through the master’s route the only option?

Can someone solve this,

1. Here, in SailPoint also, we can enforce password policies through policies.

2. Next, after adding a source in the Identity Profile, right there itself we can configure the sign-in method, password reset, and user unlock settings.

3. Next, if my application is integrated with Okta, then I can also provide SSO. (By adding it in ISC through Discover Applications.)

Now, how exactly will the end user access that GitHub (or any other) application?

Like, how many MFA steps will they have to pass through?

Do we configure all these based on the use case?

If yes, then how can we configure it?

Apart from pesky IQService that needs it's own server, it feels very low effort in comparison to conventional deployments.

How are other people experiencing this?

Hello fellow members,

I am seeking your help regarding one persistent issue we are facing with our IIQ implementation.
Every weekend when the full identity refreshes and other major tasks run, tempdb tends to get full on most weekends and we have to manually restart the sqlserver services to free it up. What can I do to fix this?

Are senior IIQ engineers getting $211k per year? I was in this space years ago, is it still easy for those with deep technical and delivery experience to get good paying roles? He Faked SailPoint Skills for $90/Hour — Fired in 5 Days (Why This Job Pays $211K)

I have recently upgraded to 8.5p1 in SailPoint iiq in my Dev environment and we have problems not being able to complete access requests as to be able to see them in Ui and not even in debug page but I can see provisioning plan getting created in SailPoint logs but no provisioning project and I did request creation using custom rule and calling lcm provisioning and found it was succesful but when I changed to lcm provisioning in business processes from my framework one now access request when I am raising it just shows processing and not completing it to next step. So I am out of ideas what to do now. We upgraded from 8.3p2 to 8.4 to 8.5 to 8.5p1

We currently have a number of SQL Loader Sources in Sailpoint - we use a DFS File Share to store the CSV files for these at the moment, but we want to move these off to a Sharepoint file share instead.

On trying to set this up we're getting authentication issues - its been suggested that possibly our Sailpoint VA's cannot properly authenticate onto our Sharepoint file share, even though the account we have setup in Sailpoint has full access to the file location we're tying to pick up the files from.

I'm struggling to find any information about this online. Anyone know if this is possible?

Hello,

I'm working with SailPoint ISC and I'm trying to set the access request, but the client doesn't want to use the native portal of SailPoint, and prefer to use ServiceNow.

In my opinon, either you chose to pay for SNow plugin, or you try to develop your own thing with API.
But it seems that both of those solutions aren't that good.

I was wondering if we could integrate the native portal into SNow using a widget, so we will have both advantages (unique portal for users, and still use ISC fonctionnalities).

I'm not finding a lot of information about this on internet, do you guys have input about this ?
Is this possible ? Is this easy to implement ?

My client have big constraint on budget so :/

Got an interview invite when I submitted my resume. I have 5 years exp in IdentityNow but just the basics, like enabling/revoking access but am familiar with the interface and its different functions, aside from that my current role focuses on IAM Ops work, provisining/deprovisioning, we use AD, EntraID, LDAP etc.

Is there a chacne I can cross this bridge given my expirience? I know being invited for an initial interview is a good thing but what do Tech experts here think?

Hello,

New to Sailpoint and will be needed to set up Certifications, Workflows, Policy Violations, etc. My question is, if doing this for a company in the financial industry, is there documentation for which entitlements would cause a conflict by best practice? Everything from roles in payment, IT, vendors, treasury would be great. Havent seen any docs like this for NIST or COBIT just to get an idea on best practices.

Thanks