SailPoint Identity refresh workflow
How the identity refresh process recalculates identities, triggers lifecycle events and applies role and policy changes.
How the identity refresh process recalculates identities, triggers lifecycle events and applies role and policy changes.
- Refresh recalculates roles, entitlements, policies and managers
- It detects changes and fires lifecycle events
- Options control exactly what is processed
- Partition and schedule refresh for large populations
What refresh does
The Identity Refresh task recalculates each identity: it re-evaluates roles, entitlements, policies, and manager relationships, keeping the Identity Cube accurate.
Refresh and lifecycle events
Refresh detects attribute changes and fires lifecycle events, which launch the workflows that provision or deprovision access.
Refresh options
You choose what to process: correlate accounts, refresh role assignments, run policies, process events, and promote managed attributes.
Performance
On large populations, refresh is partitioned and scheduled off-hours. Only enable the options you need to keep run time reasonable.