Identity outlier detection
Quick answer
How SailPoint AI flags identity outliers whose access differs sharply from their peers, surfacing risk.
Key takeaways
- Outliers hold unusually different access from peers
- AI scores deviation and names the odd entitlements
- Prioritise certifications and investigations on outliers
- Tune peer groups to reduce false positives
What an outlier is
An identity outlier holds access that is unusual compared with peers in the same role, department or location, a strong signal of risk or misconfiguration.
How detection works
AI scores each identity against its peer group; large deviations are flagged with the specific entitlements that make the identity unusual.
Acting on outliers
Outliers feed certifications and investigations, prioritising review where it matters most instead of certifying everyone equally.
Reducing noise
Tuning peer groups and thresholds keeps outliers meaningful, so teams act on genuine risk rather than false positives.
Want to learn this properly?
Our live, instructor-led SailPoint Training covers this hands-on, with real projects and a certification path.
Check your understanding
What is an identity outlier?
- A. A disabled account
- B. An identity whose access differs sharply from peers
- C. A new connector
- D. A failed task
Show answer
B. An identity whose access differs sharply from peers
Outliers hold access unusual for their peer group, signalling risk.