Connectors overview
Connectors are the adapters that let SailPoint read from and write to the systems it governs, and they are where a great deal of real implementation effort lives. This module covers how connectors work in general and documents the major ones individually.
A connector is the integration module that lets IdentityIQ talk to a specific target system. It handles authentication, reading accounts and groups (aggregation) and making changes (provisioning). SailPoint ships dozens of out-of-the-box connectors, plus generic ones (JDBC, web services, delimited file) and a framework for custom connectors.
- A connector integrates one type of target system
- Handles authentication, aggregation and provisioning
- Direct connectors talk live; file connectors read exports
- IQService reaches Windows and Active Directory
- Generic and custom connectors cover the long tail
What this module covers
The module explains the connector flow (authenticate, read, write, map, return), then provides per-system pages for Active Directory, Azure AD, Okta, SAP, Oracle, Salesforce, ServiceNow, Google, Workday, LDAP, REST, JDBC, SCIM and custom connectors.
What you will find here
- How connectors work, the shared flow and connector types.
- Directory connectors, Active Directory, LDAP, Azure AD.
- Application connectors, SAP, Oracle, Salesforce, ServiceNow, Google, Workday.
- Generic connectors, REST/Web Services, JDBC, SCIM, and custom.
How to use it
Start with the connector concepts, then go to the page for the system you are integrating. Active Directory is usually the first target; authoritative sources like Workday drive the whole lifecycle. Get correlation and schema mapping right early.
Common pitfalls
- Weak correlation leaving orphaned accounts.
- Schema mapping errors breaking aggregation or provisioning.
- Under-privileged service accounts that cannot perform required operations.
Practice challenge
3 questionsQ1A connector lets IdentityIQ?
Read from and write to a target system. Connectors handle authentication, aggregation and provisioning for a target.
Read from and write to a target system. Connectors handle authentication, aggregation and provisioning for a target.
Q2Managing Active Directory usually requires?
IQService. IQService is the Windows agent used to reach AD and Exchange.
IQService. IQService is the Windows agent used to reach AD and Exchange.
Q3A read-only authoritative HR feed is typically a?
Delimited file connector. HR feeds are often delimited-file, read-only authoritative sources.
Delimited file connector. HR feeds are often delimited-file, read-only authoritative sources.
Frequently asked questions
What does the term connectors refer to in SailPoint?
What is another point to note about connectors?
What else is worth knowing about connectors?
What tends to go wrong with connectors?
Want this taught live, with job support?
SailPoint Training is delivered live by working practitioners, with certification prep and placement support.
See SailPoint Training →