SailPoint IdentityIQ (IIQ) Training
Learn SailPoint IdentityIQ the way it is implemented on real IGA projects: applications and aggregation, roles and policies, certifications, lifecycle events, rules and workflows, built live on a real instance.
SailPoint IdentityIQ training teaches you to implement and administer IdentityIQ, SailPoint's on-premise identity governance platform. You work with applications and aggregation, correlation, roles and policies, certifications, lifecycle events, and the rules and workflows that automate joiner, mover and leaver, aligned to the Certified IdentityIQ Associate and Certified IdentityIQ Engineer credentials.
Who this course is for
Prerequisite: No IAM background required. Basic Java or scripting awareness helps for the rules modules but is taught from the ground up.
What makes this different
You build, not just watch
From the first session you are on your own developer instance, configuring, scripting and breaking things safely. That is what makes it stick.
Taught on the current release
No outdated screenshots. Everything maps to the release SailPoint runs today, including current AI and platform features.
One trainer who still implements
One working consultant for the whole batch, no rotation, so the teaching is consistent and grounded in real projects.
Support continues to the offer
Resume review, mock interviews on real scenario questions, and referrals. Support does not stop when the last class ends.
Curriculum
9 modules and 3 projects, updated to the current release. Every module maps to real IdentityIQ work and expands into its full topic list, practised on a live developer instance.
SailPoint IdentityIQ (IIQ) Training module list: 9 modules, what each one covers, and how many topics it expands into. Full topic lists are in the accordions below.
| # | Module | What you configure | Topics |
|---|---|---|---|
| 01 | IGA and IdentityIQ foundations | Understand what IdentityIQ is made of and how its pieces fit before you configure anything. | 8 |
| 02 | Applications, aggregation & correlation | Onboard source systems and pull their accounts and entitlements into IdentityIQ cleanly. | 8 |
| 03 | Identity attributes & lifecycle | Shape the Identity Cube from authoritative data and control exactly what recalculates and when. | 7 |
| 04 | Roles & policies | Model access into roles and enforce separation-of-duties and risk policy the way audit expects. | 8 |
| 05 | Certifications & compliance | Design and run the access reviews and audit evidence that satisfy compliance. | 8 |
| 06 | Lifecycle & provisioning | Automate joiner, mover and leaver and fulfil access across connected and manual systems. | 8 |
| 07 | Rules & workflows | Extend IdentityIQ with BeanShell rules and orchestrated workflows without breaking upgrades. | 7 |
| 08 | Reporting, tasks & administration | Report on governance and keep the platform healthy in day-two operations. | 6 |
| 09 | Capstone & CIQ Engineer prep | Assemble everything into an end-to-end build and get ready for the Associate and Engineer exams. | 6 |
1IGA and IdentityIQ foundations
Understand what IdentityIQ is made of and how its pieces fit before you configure anything.
- What identity governance (IGA) solves and why enterprises buy it
- IdentityIQ architecture: application server, database, connectors
- The Identity Cube and how it is assembled
- Where IIQ fits versus Identity Security Cloud
- Core objects: Identity, Link, Application, Bundle, Entitlement
- Installation and environment overview
- IdentityIQ editions, modules and licensing
- Navigating the admin and user interfaces
2Applications, aggregation & correlation
Onboard source systems and pull their accounts and entitlements into IdentityIQ cleanly.
- Onboarding an application (source) and choosing a connector
- Account and group schemas and attribute mapping
- Account aggregation tasks and options
- Group and entitlement aggregation
- Correlation configuration versus correlation rules
- Handling uncorrelated and orphan accounts
- Delta versus full aggregation and scheduling
- Connector troubleshooting and logs
3Identity attributes & lifecycle
Shape the Identity Cube from authoritative data and control exactly what recalculates and when.
- Authoritative sources and identity mappings
- Attribute promotion and transformations
- Identity refresh and what it recalculates
- Manager and relationship correlation
- Identity attribute search and populations
- Provisioning impact of attribute changes
- Multi-source identity precedence
4Roles & policies
Model access into roles and enforce separation-of-duties and risk policy the way audit expects.
- Business roles versus IT roles
- Role modelling and assignment rules
- Role mining from existing entitlements
- Separation-of-duties (SoD) policy design
- Account, activity and risk policies
- Policy violation detection and handling
- Role and policy governance and ownership
- Role change management and impact analysis
5Certifications & compliance
Design and run the access reviews and audit evidence that satisfy compliance.
- Manager, application owner and role certifications
- Entitlement owner and targeted campaigns
- The reviewer experience and bulk decisions
- Revocation and remediation flow
- Certification scheduling and reminders
- Audit configuration and evidence
- Compliance reporting
- Recertification and continuous certification
6Lifecycle & provisioning
Automate joiner, mover and leaver and fulfil access across connected and manual systems.
- Joiner, mover, leaver lifecycle events
- Lifecycle Manager and access requests
- Provisioning plans and the provisioning engine
- Connectors and provisioning policies
- Approval schemes and work items
- Manual work items and fulfilment
- Provisioning troubleshooting
- Retry and error handling
7Rules & workflows
Extend IdentityIQ with BeanShell rules and orchestrated workflows without breaking upgrades.
- BeanShell and the SailPoint API basics
- Rule types: BuildMap, correlation, provisioning, field value
- Business rules and reusable logic
- The workflow engine, steps and transitions
- Approval and LCM workflows
- Debugging with trace, logs and the console
- Upgrade-safe customisation patterns
8Reporting, tasks & administration
Report on governance and keep the platform healthy in day-two operations.
- Standard and custom reports
- The task framework, scheduling and partitioning
- Groups and workgroups
- Capabilities, scope and delegated administration
- Housekeeping and performance basics
- Backup, export and environment promotion
9Capstone & CIQ Engineer prep
Assemble everything into an end-to-end build and get ready for the Associate and Engineer exams.
- End-to-end joiner/mover/leaver build on a live instance
- Application onboarding with cleanup rules
- A certification campaign end to end
- Update-safe deployment and export/import
- Certified IdentityIQ Associate and Engineer exam domains
- Practice questions and mock review
What you'll be able to do
Real projects you'll build
Interview-ready scenarios on a live instance, not toy demos.
Joiner, mover, leaver automation
Build the full JML flow: lifecycle events that provision on hire, adjust on transfer and revoke on exit, with approvals and notifications.
Access certification campaign
Design and run a manager certification, make decisions and drive revocations to remediation on a live instance.
Application onboarding + rules
Onboard an application, correlate accounts, and write a BuildMap and correlation rule to clean and match the data.
Certification and hands-on
Every session runs on a real SailPoint developer instance, so you configure and build rather than watch. The course maps to the Certified IdentityIQ Associate & Engineer exam and finishes with an IT Canvass certificate plus a certification roadmap. IT Canvass does not issue the official SailPoint credential.
The SailPoint program has two tracks. Knowledge Credentials are training-based and unlock an exam: Identity Security Leader (free, product-agnostic foundation), Identity Security Professional, and Identity Security Expert. Role-based Professional Certifications are proctored and recommend real hands-on experience: for on-premise IdentityIQ, Certified IdentityIQ Associate then Certified IdentityIQ Engineer; for cloud Identity Security Cloud, Certified Identity Security Administrator then Certified Identity Security Engineer. Exams run about US$300 to US$400.
Certification facts. Vendor figures change, so confirm against the official SailPoint catalogue before booking.
| Exam code | SailPoint University does not publish short exam codes; the credential name below is the identifier |
|---|---|
| Credential | SailPoint Certified IdentityIQ Associate & Engineer |
| Issued by | SailPoint Technologies (not by IT Canvass) |
| Exam duration | 120 minutes |
| Exam cost | Bundled with SailPoint University training; priced per learning path |
| Prerequisite | Product training through SailPoint University, plus implementation experience. |
| What IT Canvass issues | An IT Canvass course completion certificate and a certification roadmap |
Your IdentityIQ career roadmap
Five stages from first IdentityIQ project to architect, with indicative 2026 bands.
Salary snapshot: SailPoint IdentityIQ Engineer
Indicative ranges aggregated from public salary data. Actual pay varies by location, employer and experience.
How IT Canvass compares
Against a typical training provider, this IdentityIQ course is taught on the current SailPoint release, gives you your own developer instance from day one, and keeps one working consultant for the whole batch instead of rotating trainers. Every module is mapped to the Certified IdentityIQ Associate & Engineer exam, sessions are recorded with lifetime access, and job support (resume review, mock interviews and referrals) is included in one transparent fee. Most providers still teach older release material, run slide-first sessions with limited lab time, and bill support and recordings as add-ons.
Fees and training modes
Choose how you want to learn IdentityIQ. No-cost EMI available on all modes.
Interactive live batches, weekday or weekend, with the full cohort and lifetime recordings.
Private one-on-one coaching at your pace, whether you need interview-ready fast or hands-on help with your current project.
Learn on your own time with recorded sessions, labs and Q&A doubt support.
Train your team on IdentityIQ
Tailored curriculum, flexible scheduling, a dedicated SailPoint architect, and progress reporting for your managers. Delivered live online or on-site for cohorts of any size.
Your trainer
Neelima, SailPoint Architect, 12+ years
I still deliver SailPoint IdentityIQ and Identity Security Cloud implementations for enterprise clients, so I teach from what is breaking in production this quarter, not from a slide deck. In class I show the connector, rule, workflow and certification patterns that scale and the mistakes that cost teams days.
Learner reviews
The JML capstone is exactly what my interviewer asked me to walk through. Cleared the IdentityIQ Engineer exam a month later.
Aggregation, correlation and rules finally made sense because we broke and fixed a real instance every session.
Came from AD administration and this was the cleanest path into SailPoint. Job-ready projects, not slideware.
Fees, batches and policies
The questions people actually ask before enrolling, answered plainly.