IIQ Engineer
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The SailPoint IdentityIQ Engineer credential is aimed at implementation professionals who build and maintain IdentityIQ deployments rather than simply administer them day to day. Candidates typically come from identity and access management consulting, security engineering, or IT operations backgrounds and already understand core IAM concepts such as authoritative sources, joiner-mover-leaver flows, entitlements, and access certification. The exam tests practical configuration judgement across the platform lifecycle: installing and upgrading components and tuning system settings; onboarding target systems through connectors and reconciling accounts and entitlements; wiring lifecycle events into provisioning and approval paths; defining roles and business roles and running role modelling; running certification campaigns and enforcing policy and compliance controls; extending behaviour with beanshell rules, workflows, and custom objects; and diagnosing reconciliation, provisioning, and performance problems in a live deployment. Preparation should be hands-on. Work through a full build in a lab environment: connect at least a directory and a database or web application, define an authoritative application, run aggregations and correlations, build a role model, launch a certification, and write a rule and a workflow. Supplement lab time with the vendor's official product documentation and training catalogue, which is the authoritative source for version-specific behaviour. The vendor publishes current exam logistics, including length, delivery format, pricing, and scoring, on its certification pages; confirm those details there before scheduling.
What you'll study
About IIQ Engineer preparation
What is the exam format?
It is a multiple-choice certification exam delivered through the vendor's testing provider. The vendor publishes the current question count, time limit, and delivery options on its official certification page, so check there rather than relying on secondhand figures, which change between exam revisions.
How hard is it, and do I need real project experience?
Most candidates find it demanding because questions test configuration decisions, not definitions. You are expected to know what happens when you change a correlation rule, why an aggregation misses accounts, or how a provisioner behaves on failure. Six to twelve months of hands-on IdentityIQ work makes the scenarios far easier to reason through.
What if I fail - can I retake it?
Retake rules, waiting periods, and any fees are set by the vendor and can change. The official certification page states the current retake policy and any limits on attempts. Plan your first sitting when your lab work feels solid, and confirm the policy before you book.
How long should I study before scheduling?
Candidates with working project experience often need four to eight weeks of focused review; those learning the platform from scratch need considerably longer. Build a lab, work every domain, and revisit weak areas. The vendor's official training courses shorten the curve but do not replace building something end to end yourself.
What order should I study the domains in?
Start with installation and system configuration so you understand the object model and server layout. Move to application onboarding and connectors, then lifecycle and provisioning. Roles, certifications, and policy follow naturally once data is flowing. Finish with rules and workflows and performance troubleshooting, which draw on everything before them.
Where do the most candidates lose marks?
Common weak spots are connector and correlation detail, the difference between task-level and object-level configuration, and rule execution context - knowing what variables and APIs are available inside a given rule type. Troubleshooting questions also punish candidates who memorise steps without understanding where logs and task results live.
Do I need to memorise API method names and class names?
You should be comfortable with the main objects and services you use in rules, such as the context, identity, and provisioner objects, and know roughly what each exposes. Exact signatures are less important than understanding execution context and side effects, but familiarity with the common calls saves time.
Is the exam tied to one product version?
Certification exams track the current major release, and behaviours differ between versions. Confirm which version the exam targets on the vendor's certification page, and study the documentation matching that release rather than older material you may find in forums or archived guides.