Objects overview
The complete set of IdentityIQ objects, Identity, Link, Application, Bundle, Entitlement and more, and how they relate.
Almost everything in IdentityIQ is an object persisted as XML in the database: Identity (the cube), Link (an account), Application (a target), Bundle (a role), ManagedAttribute (a governed entitlement), plus Certification, Policy, TaskDefinition and Workflow. Learning these relationships is the key to the platform.
- Everything is an object stored as XML
- Identity, Link, Application, Bundle, ManagedAttribute are core
- Governance objects: Certification, Policy, WorkItem
- Process objects: TaskDefinition, Workflow, Rule
- Objects are exported and imported for deployment
The objects module documents the building blocks of the IdentityIQ data model, the objects every capability reads and writes. Understanding these, and how they relate, is what lets you reason precisely about how SailPoint behaves and how to customise it.
What this module covers
Each object has its own detailed page covering what it represents, its key attributes, how it is created and maintained, and how it is governed. This hub ties them together into a coherent model.
What you will find here
- Identity, the person-centric cube at the centre of the model.
- Role (Bundle), business-meaningful bundles of entitlements.
- Application/Source, Entitlement, Managed Attribute.
- Policy, Workflow, Approval, Certification, Task, Rule.
How to use it
Start with the Identity object (the centre of everything), then work outward to Role, Application/Source, Entitlement and the rest. Refer back whenever a lesson or a rule mentions an object you want to understand in depth.
Common pitfalls
- Learning objects in isolation without the relationships between them.
- Confusing Role and Bundle, they are the same object.
- Ignoring the Identity as the hub that ties the model together.