SailPoint Course for Beginners

Identity Governance and Administration (IGA)

Identity Governance and Administration is the discipline of managing digital identities and the access rights attached to them across an enterprise IT environment. IGA platforms like SailPoint define who users are, what roles they hold, what access they are entitled to, and how that access is reviewed, certified, and revoked. According to NIST’s identity and access management frameworks, effective IGA is a foundational control for preventing unauthorized access and privilege abuse.

SailPoint IdentityIQ (IIQ)

IdentityIQ is SailPoint’s on-premises identity governance platform, deployed within an organization’s own data center or private cloud. It provides deep customization through Java-based rules, workflows, and custom connectors, and remains widely used in banking and healthcare where data residency and legacy integration are critical. Official product documentation is available at documentation.sailpoint.com.

SailPoint Identity Security Cloud (ISC)

Identity Security Cloud is SailPoint’s cloud-native SaaS IGA platform, replacing the earlier IdentityNow product. ISC uses a low-code configuration model, connects to thousands of enterprise applications via pre-built connectors from the SailPoint Developer Community, and delivers AI-assisted access recommendations and scalability without on-premises infrastructure overhead.

Not sure whether to start with IIQ or ISC? Our guide on SailPoint IIQ and IdentityNow — which module to learn first walks through the decision based on your background and career goal.

Identity Lifecycle Management

Identity Lifecycle Management covers managing a user’s digital identity from creation to deletion: joiner (onboarding), mover (role changes), and leaver (offboarding) processes. SailPoint automates each stage, reducing manual errors and ensuring users never retain access beyond their need.

Access Certification

Access Certification is the process by which managers or data owners periodically review and certify whether existing user entitlements are still appropriate. SailPoint automates the scheduling, delivery, and tracking of certification campaigns, producing audit-ready governance evidence.

Role Management

Role Management involves defining, maintaining, and enforcing business and IT roles that bundle entitlements logically. SailPoint supports role mining, role modeling, and role assignment automation. Well-designed roles form the backbone of Separation of Duties (SoD) policy enforcement. For a practical deep-dive into how roles work in IIQ, see our article on Role Based Access Control in SailPoint IdentityIQ.

Provisioning

Provisioning is the automated granting of access based on role, department, or business approval. In SailPoint, provisioning is triggered by lifecycle events or access requests and communicates with target systems — Active Directory, Salesforce, SAP, cloud platforms — to create, modify, or remove accounts.

Access Requests

The Access Request module allows users to request access beyond their baseline role. SailPoint routes requests through configurable approval workflows, enforces SoD policies to detect conflicts, and delivers approved access through provisioning engines — reducing service desk workload while maintaining governance control.

Active Directory Integration

Active Directory is the most common identity source in enterprise environments. SailPoint connects to AD to aggregate user account data, group memberships, and OU hierarchies, then governs AD access through automated provisioning, certification campaigns, and policy enforcement. Beginners with prior AD experience will find this integration concept immediately familiar.

LDAP Basics

LDAP is the protocol underlying Active Directory and many enterprise directory services. SailPoint uses LDAP connectors to read and write to directory services. Understanding LDAP object structures and attribute schemas helps beginners configure SailPoint connectors accurately.

Java Fundamentals for SailPoint IIQ

SailPoint IdentityIQ uses BeanShell (Java-syntax scripting) for custom rule authoring. Beginners targeting IIQ developer roles need basic Java skills: data types, control flow, classes, and exception handling. More advanced work involves writing SailPoint rules for correlation, provisioning policies, and workflow logic.

SQL Basics

SailPoint IIQ uses a relational database to store identity data, role definitions, certification records, and audit logs. Basic SQL knowledge — SELECT, JOIN, WHERE, and aggregate functions — helps administrators query identity data, troubleshoot aggregation issues, and validate provisioning results.

Web Services and REST APIs

Modern SailPoint integrations rely on REST API calls to provision access, trigger workflows, and exchange data with HR systems. Beginners should understand HTTP methods, JSON format, authentication headers, and basic API testing using tools like Postman.