IIQ Engineer study guide
IIQ Engineer · Work through your exam, one topic at a time.
The SailPoint IdentityIQ Engineer credential is aimed at implementation professionals who build and maintain IdentityIQ deployments rather than simply administer them day to day. Candidates typically come from identity and access management consulting, security engineering, or IT operations backgrounds and already understand core IAM concepts such as authoritative sources, joiner-mover-leaver flows, entitlements, and access certification. The IIQ Engineer study guide has 7 sections and about 2,221 words.
01Installation, Upgrade, and System Configuration
IdentityIQ is a Java web application deployed to a servlet container (commonly Tomcat) and backed by a relational database. The datasource, dialect and connection pool live in iiq.properties ; logging is configured in log4j2.properties ; console and batch scripts resolve paths from IIQ HOME .
324 words, about 2 min02Application Onboarding and Connector Configuration
An application object is the anchor for every connector. The sequence is: pick the connector type (JDBC, LDAP, Active Directory, Delimited File, Web Services, SCIM, and so on), enter connection parameters, test the connection, then review the detected schema - account and group object types, their attributes, and the flags that matter: identity attribute, managed/entitlement attribute, multi-valued.
311 words, about 2 min03Identity Lifecycle Management and Provisioning
The identity cube is the assembled record of one person: attributes from the authoritative source, links to accounts, assigned and detected roles, entitlements and work items. Lifecycle behaviour comes from repeated refresh cycles, so know which refresh options do what - refresh attributes, correlate, provision assignments, promote managed attributes.
298 words, about 1 min04Roles, Entitlements, and Role Modeling
Entitlements are values on applications marked as managed/entitlement attributes; they are the raw material of role modeling. A role aggregates one or more role profiles, and each profile ties an application to specific entitlements or to constraints (a filter that matches entitlements dynamically).
346 words, about 2 min05Certifications, Policies, and Compliance Governance
A certification definition describes what to review: a population (identities, accounts, entitlements, roles) and an owner type (manager, application owner, entitlement owner, role owner, or a targeted reviewer). Launching the definition creates a campaign composed of certification items.
300 words, about 2 min06Rules, Workflows, and Platform Customization
Rules are BeanShell snippets stored as first-class objects and referenced from configuration. Each rule type has a defined input context and an expected return value: an identity attribute rule returns a value, a correlation rule returns an identity, a build-map rule returns a map for connector arguments, a provisioning rule returns a result, a policy violation rule returns violation objects.
306 words, about 2 min07Troubleshooting, Maintenance, and Performance
Start with the task result, not the log: it shows the plan, the operations attempted and the connector exception. Then raise logging for the relevant package in log4j2.properties and reproduce.
336 words, about 2 min