SailPoint Identity Governance & Administration (IGA) Training
Learn identity governance and administration end to end: the identity lifecycle, access requests, roles and RBAC, separation of duties, access certifications, provisioning and audit, then how each is delivered in SailPoint IdentityIQ and Identity Security Cloud.
SailPoint IGA training teaches identity governance and administration as a discipline and on SailPoint's platforms. You learn the identity lifecycle (joiner, mover, leaver), access requests and approvals, role-based access control, separation-of-duties policy, access certifications, provisioning, and audit and compliance reporting, then see how each is delivered in IdentityIQ and Identity Security Cloud. It aligns to SailPoint's free Identity Security Leader credential and sets up the role-based Associate and Administrator paths.
Who this course is for
Prerequisite: No IAM or coding background required. This is the entry point into SailPoint and identity governance.
What makes this different
You build, not just watch
From the first session you are on your own developer instance, configuring, scripting and breaking things safely. That is what makes it stick.
Taught on the current release
No outdated screenshots. Everything maps to the release SailPoint runs today, including current AI and platform features.
One trainer who still implements
One working consultant for the whole batch, no rotation, so the teaching is consistent and grounded in real projects.
Support continues to the offer
Resume review, mock interviews on real scenario questions, and referrals. Support does not stop when the last class ends.
Curriculum
9 modules and 3 projects, updated to the current release. Every module maps to real IGA work and expands into its full topic list, practised on a live developer instance.
SailPoint Identity Governance & Administration (IGA) Training module list: 9 modules, what each one covers, and how many topics it expands into. Full topic lists are in the accordions below.
| # | Module | What you configure | Topics |
|---|---|---|---|
| 01 | Identity governance and administration fundamentals | Set the vocabulary and the business case for IGA before you touch a product, so every later module has context. | 9 |
| 02 | The identity lifecycle (joiner, mover, leaver) | Follow a worker from hire to exit and see exactly what identity governance must automate at each step. | 9 |
| 03 | Access model: entitlements, roles and RBAC | Turn thousands of raw entitlements into a role model people can actually request and govern. | 9 |
| 04 | Policies: separation of duties and risk | Encode the controls auditors care about and decide what to block, detect and mitigate. | 9 |
| 05 | Access requests and approvals | Design the self-service experience that replaces email and ticket-driven access. | 9 |
| 06 | Access certifications and reviews | Run the periodic reviews that prove access is still appropriate, without reviewer fatigue. | 9 |
| 07 | Provisioning and fulfilment | Connect governance decisions to real accounts across connected and manual systems. | 9 |
| 08 | Audit, compliance and reporting | Produce the evidence and metrics that keep auditors and leadership satisfied. | 9 |
| 09 | Administering SailPoint and capstone | Operate the platform day to day, then pull the whole course together in a live end-to-end build. | 8 |
1Identity governance and administration fundamentals
Set the vocabulary and the business case for IGA before you touch a product, so every later module has context.
- What IGA is and the business problems it solves
- Governance versus administration versus broader IAM
- The cost of poor access governance: breaches, audit findings, failed controls
- Regulatory drivers: SOX, GDPR, HIPAA, ISO 27001
- Core objects: identities, accounts, entitlements, roles
- The identity cube and the single source of truth
- Where SailPoint fits: IdentityIQ versus Identity Security Cloud
- Build versus buy and the IGA vendor landscape
- The IGA maturity model and program goals
2The identity lifecycle (joiner, mover, leaver)
Follow a worker from hire to exit and see exactly what identity governance must automate at each step.
- Authoritative sources and HR-driven identity creation
- Joiner: onboarding and birthright access
- Mover: transfers, promotions and access recalculation
- Leaver: deprovisioning and clean offboarding
- Rehire and leave-of-absence edge cases
- Lifecycle states, events and triggers
- Correlating accounts to identities
- Time-bound, emergency and break-glass access
- Contractors, service and shared accounts
3Access model: entitlements, roles and RBAC
Turn thousands of raw entitlements into a role model people can actually request and govern.
- How entitlements are aggregated and owned
- Entitlement descriptions and business-friendly naming
- Role-based access control (RBAC) explained
- Business roles versus IT / technical roles
- Role mining and top-down versus bottom-up role design
- Birthright versus requestable access
- ABAC and policy-based access alongside RBAC
- Role ownership and governance
- Avoiding role explosion
4Policies: separation of duties and risk
Encode the controls auditors care about and decide what to block, detect and mitigate.
- Separation-of-duties (SoD) concepts
- Preventive versus detective controls
- Toxic-combination examples across finance and IT
- Building SoD policies and rulesets
- Risk scoring of identities and access
- Simulation and what-if before enforcing a policy
- Detecting and handling policy violations
- Mitigating controls and sign-off
- Continuous policy monitoring
5Access requests and approvals
Design the self-service experience that replaces email and ticket-driven access.
- The access request catalog
- The shopping-cart request experience
- Cart validation and policy checks at request time
- Approval workflows and multi-level approvals
- Automated versus manual fulfilment
- Bulk and on-behalf-of requests
- Delegation and escalation
- Request policies and pre-approval
- Notifications, reminders and SLAs
6Access certifications and reviews
Run the periodic reviews that prove access is still appropriate, without reviewer fatigue.
- Why periodic access reviews matter
- Manager, application-owner and role certifications
- Targeted and event-based micro-certifications
- The reviewer experience and bulk decisions
- Reducing rubber-stamping with recommendations
- Revocation and remediation flow
- Closed-loop verification of revocations
- Certification scheduling and reminders
- Producing evidence for auditors
7Provisioning and fulfilment
Connect governance decisions to real accounts across connected and manual systems.
- The provisioning model and provisioning plans
- Connected versus disconnected applications
- Provisioning policies and forms
- Approval-gated provisioning
- Manual work items and fulfilment
- Retry, error and partial-failure handling
- Fulfilment SLAs and escalation
- Password management and self-service reset
- Troubleshooting provisioning failures
8Audit, compliance and reporting
Produce the evidence and metrics that keep auditors and leadership satisfied.
- The audit trail and what is captured
- Standard governance reports
- Separation-of-duties attestation reporting
- Custom reports and dashboards
- Compliance evidence and attestation
- Continuous compliance monitoring
- Dashboards for identity risk posture
- Metrics and KPIs for an IGA program
- Preparing for an external audit
9Administering SailPoint and capstone
Operate the platform day to day, then pull the whole course together in a live end-to-end build.
- Administering IdentityIQ versus Identity Security Cloud
- Day-two operations and housekeeping
- Backup, upgrade and patch awareness
- Delegated administration and least privilege
- An end-to-end JML build on a live environment
- Running a certification campaign end to end
- Identity Security Leader credential domains
- Choosing your next path: Associate, Engineer or Administrator
What you'll be able to do
Real projects you'll build
Interview-ready scenarios on a live instance, not toy demos.
Joiner, mover, leaver blueprint
Design and build the full JML lifecycle with birthright access, transfer recalculation and clean offboarding on a live environment.
Access certification campaign
Configure and run a manager certification, make decisions and drive revocations through to remediation.
SoD policy and risk model
Build a separation-of-duties policy with mitigating controls and a simple identity risk model, then handle violations.
Certification and hands-on
Every session runs on a real SailPoint developer instance, so you configure and build rather than watch. The course maps to the Identity Security Leader + IGA foundations exam and finishes with an IT Canvass certificate plus a certification roadmap. IT Canvass does not issue the official SailPoint credential.
The SailPoint program has two tracks. Knowledge Credentials are training-based and unlock an exam: Identity Security Leader (free, product-agnostic foundation), Identity Security Professional, and Identity Security Expert. Role-based Professional Certifications are proctored and recommend real hands-on experience: for on-premise IdentityIQ, Certified IdentityIQ Associate then Certified IdentityIQ Engineer; for cloud Identity Security Cloud, Certified Identity Security Administrator then Certified Identity Security Engineer. Exams run about US$300 to US$400.
Certification facts. Vendor figures change, so confirm against the official SailPoint catalogue before booking.
| Exam code | SailPoint University does not publish short exam codes; the credential name below is the identifier |
|---|---|
| Credential | SailPoint Identity Security Leader + IGA foundations |
| Issued by | SailPoint Technologies (not by IT Canvass) |
| Exam duration | 120 minutes |
| Exam cost | Bundled with SailPoint University training; priced per learning path |
| Prerequisite | Product training through SailPoint University, plus implementation experience. |
| What IT Canvass issues | An IT Canvass course completion certificate and a certification roadmap |
Your IGA career roadmap
Five stages from your first governance role to program lead, with indicative 2026 bands.
Salary snapshot: IGA Analyst / Administrator
Indicative ranges aggregated from public salary data. Actual pay varies by location, employer and experience.
How IT Canvass compares
Against a typical training provider, this IGA course is taught on the current SailPoint release, gives you your own developer instance from day one, and keeps one working consultant for the whole batch instead of rotating trainers. Every module is mapped to the Identity Security Leader + IGA foundations exam, sessions are recorded with lifetime access, and job support (resume review, mock interviews and referrals) is included in one transparent fee. Most providers still teach older release material, run slide-first sessions with limited lab time, and bill support and recordings as add-ons.
Fees and training modes
Choose how you want to learn IGA. No-cost EMI available on all modes.
Interactive live batches, weekday or weekend, with the full cohort and lifetime recordings.
Private one-on-one coaching at your pace, whether you need interview-ready fast or hands-on help with your current project.
Learn on your own time with recorded sessions, labs and Q&A doubt support.
Train your team on IGA
Tailored curriculum, flexible scheduling, a dedicated SailPoint architect, and progress reporting for your managers. Delivered live online or on-site for cohorts of any size.
Your trainer
Neelima, SailPoint Architect, 12+ years
I still deliver SailPoint IdentityIQ and Identity Security Cloud implementations for enterprise clients, so I teach from what is breaking in production this quarter, not from a slide deck. In class I show the connector, rule, workflow and certification patterns that scale and the mistakes that cost teams days.
Learner reviews
I came in with zero IAM background and left able to talk lifecycle, roles, SoD and certifications with confidence. The perfect on-ramp.
The JML and certification projects are exactly what my first SailPoint interview covered. I got the role.
Finally understood governance versus administration and how it maps to IIQ and ISC. The best foundations course I have taken.
Fees, batches and policies
The questions people actually ask before enrolling, answered plainly.