IIQ Engineer case studies
IIQ Engineer · Put your knowledge to work in context.
The SailPoint IdentityIQ Engineer credential is aimed at implementation professionals who build and maintain IdentityIQ deployments rather than simply administer them day to day. Candidates typically come from identity and access management consulting, security engineering, or IT operations backgrounds and already understand core IAM concepts such as authoritative sources, joiner-mover-leaver flows, entitlements, and access certification. The IIQ Engineer case studies are 5 cases and about 3,477 words.
1Four-Node Upgrade in a Four-Hour Window
A four-node IdentityIQ deployment sits behind a load balancer: two task-scheduler-enabled nodes and two that only serve UI traffic. All nodes read the same iiq.properties from a local path and share one database.
708 words, about 4 min2Onboarding a Read-Only HR System with 38,000 Accounts
A 38,000-account JDBC source backs a homegrown HR system of record. The connector is read-only SQL, has no native disable, and has no last-modified column; every nightly aggregation is a full table scan taking eight to nine hours, finishing after the 6 a.m.
723 words, about 4 min3Mover Strips Access Mid-Close, Rehire Creates a Duplicate
Every mover event from the HR source recalculates roles, and the resulting provisioning plan removes entitlements from the prior department. Last month a finance analyst moved to treasury; the plan stripped her ERP AP-approval entitlement, but month-end close still needed her to approve three legacy invoices, so a colleague approved them under her name.
705 words, about 4 min4Making a 14,000-Item SOX Certification Defensible
Quarterly SOX certification covers 14,000 certifiable items across 380 reviewers. Last cycle, 41% of items closed with no action taken because the deadline passed and default remediation removed the access; 12 reviewers delegated to the same shared manager; and one director had 260 direct reports to certify in a two-week window.
648 words, about 3 min5Role Nesting Triples the Nightly Refresh
After enabling a new role model with three levels of nesting and 1,150 business roles, the nightly identity refresh that used to finish in 70 minutes now takes six and a half hours and sometimes overlaps the 7 a.m. provisioning window.
693 words, about 3 min