Identity refresh workflow
Quick answer
How the identity refresh process recalculates identities, triggers lifecycle events and applies role and policy changes.
Key takeaways
- Refresh recalculates roles, entitlements, policies and managers
- It detects changes and fires lifecycle events
- Options control exactly what is processed
- Partition and schedule refresh for large populations
What refresh does
The Identity Refresh task recalculates each identity: it re-evaluates roles, entitlements, policies, and manager relationships, keeping the Identity Cube accurate.
Refresh and lifecycle events
Refresh detects attribute changes and fires lifecycle events, which launch the workflows that provision or deprovision access.
Refresh options
You choose what to process: correlate accounts, refresh role assignments, run policies, process events, and promote managed attributes.
Performance
On large populations, refresh is partitioned and scheduled off-hours. Only enable the options you need to keep run time reasonable.
Want to learn this properly?
Our live, instructor-led SailPoint Training covers this hands-on, with real projects and a certification path.
Check your understanding
What keeps the Identity Cube accurate over time?
- A. Aggregation only
- B. Identity Refresh
- C. The connector
- D. The UI
Show answer
B. Identity Refresh
Identity Refresh recalculates identities and fires the events that drive provisioning.