Identity and Access Management (IAM/IAG/IGA)

Explore SailPoint IdentityIQ to discover the identity model, including identities, attributes, roles, and rights, and examine how application accounts and authorizations define access in an IAM framework.

In SailPoint IIQ, identify identity types in the identity warehouse by authoritative source, distinguishing employees from contractors. Job title appears for employees; contractors may have empty attributes.

Learn to modify identity information via authoritative sources in SailPoint IIQ, using csv data, aggregation tasks, and optional edit mode to manage location and region attributes.

Explore the identity lifecycle from creation to deletion, covering states like active, deactivated, locked, disabled, and archiving, and how IAG solutions consolidate updates across IT systems.

Explore identity lifecycle examples, including contract expiration and extensions, 30-day deactivation delays, and advance notifications to anticipate extensions and keep identities active.

Identify how robust and effective unique identifiers in identity and access governance distinguish users, link authoritative source identifiers with logins, and support secure access via technical identifiers.

Identity certification verifies identity legitimacy in the information system and removes illegitimate accounts via an IAG solution, with compliance managers launching campaigns and deletions to reduce security risks.

Discover eight access rights management capabilities within identity and access governance. Learn to define access rights objects, manage roles, and apply entertainment aggregation, provisioning, and role mining.

Discover RBAC, the most widely used identity and access management model, where roles bundle permissions and provisioning grants access to target systems through a source, with access profiles.

Examine RBAC by modeling a senior data analyst with Splunk admin and Click user profiles, plus VPN and Notepad Plus Plus access, and discuss the model's advantages and trade-offs.

Examine how access rights are modeled within an identity and access governance solution, linking a digital identity to rights that create Windows accounts and grant access to services.

Explain attribute based access control (abac), where login-time rules use identity, environment, and resource attributes to grant rights in applications like Splunk and Workday, highlighting scalability and centralization challenges.

Compare RBAC, ABAC, and RBAC-A in IAG solutions, showing how dynamic rules and centralized management assign roles and access profiles to users based on job titles and attributes.

Define and manage roles through their life cycle with unique names and descriptions, owner oversight, mandatory and optional access profiles, criticality levels, approval workflows, authorized populations, and separation of duties.

Explore top-down and data-driven role composition in identity and access management, and the life cycle from creation to decommissioning.

Explore how to raise access requests for resources, specify permissions, navigate validation workflows with managers, assistants, or colleagues, and manage approvals, start and end dates, and temporary or permanent rights.

Explore SailPoint IIQ lab on application configuration and request workflows in identity and access management, adding a new entertainment, 'reporting', to the time tracking app and processing manager approvals.

Create an automatic role assignment using identity attributes to grant the time tracking reporting capability to executive management, and automatically revoke it when they move to a different department.

Explore role mining within identity and access governance to identify permission patterns, group users into roles, and simplify onboarding through automated provisioning.

Explore SailPoint IIQ role mining to build and activate roles from grouped entitlements, using role mining campaigns across selected applications, and validate ownership through identity cube refresh.

Learn to manage access certification by reviewing permissions and privileges, with managers or application owners certifying access, prioritizing critical rights and scheduling campaigns aligned with role changes.

Learn to configure and run a SailPoint IIQ access certification campaign, including identity selection, scope filtering, certifier roles, scheduling, and manager-based approvals.