Certifications & access reviews
Quick answer
Running access certifications in SailPoint IdentityIQ: campaign types, reviewers, decisions and remediation.
Key takeaways
- Certifications confirm access is still appropriate
- Campaign types target managers, owners, roles
- Reviewers approve/revoke, aided by AI recommendations
- Revocations drive automated remediation
What certifications do
Certifications (access reviews) ask reviewers to confirm that access is still appropriate. They are central to compliance and detecting accumulated or orphaned access.
Campaign types
Manager, application owner, role membership, role composition and entitlement owner campaigns target different reviewers and scopes.
The review experience
Reviewers approve or revoke each item, with AI recommendations and prior decisions to speed the process and improve consistency.
Remediation
Revoke decisions generate remediation requests that provisioning fulfils, closing the loop from review to actual access removal.
Want to learn this properly?
Our live, instructor-led SailPoint Training covers this hands-on, with real projects and a certification path.
Check your understanding
What does a revoke decision in a certification trigger?
- A. A new role
- B. A remediation request
- C. An aggregation
- D. A login
Show answer
B. A remediation request
Revocations generate remediation requests that provisioning fulfils.