You are on page 1of 11

SailPoint Certified IdentityIQ Engineer Exam Study Guide

Document Revision History


Revision Date Written/Edited By Comments
22-May-2018 Cathy Mallet Initial draft
18-Jul-2018 Arthur Altman Updated training course titles
27-Aug-2018 Arthur Altman Added exam duration, logo
17-Oct-2018 Jennifer Mitchell Removed extraneous documents
02-Jul-2019 Arthur Altman Updated Compass URLs
30-Jul-2019 Arthur Altman Updated training course names
02-Oct-2019 Arthur Altman Corrected one Compass URL
02-Oct-2019 Carol Keith Updated recommended training courses and note
06-Jul-2020 Arthur Altman Updated Badge logo and copyright notice
09-Oct-2020 Arthur Altman Updated Compass URLs
28-Jul-2021 Cathy Mallet, Arthur Updated Subject Areas and Compass URLs
Altman
12-Nov-2021 Arthur Altman Updated references for 1.4, 4.6, 4.7
30-Nov-2021 Arthur Altman Updated references for 7.3, 7.5

© Copyright 2021 SailPoint Technologies, Inc., All Rights Reserved.

SailPoint Technologies, Inc. makes no warranty of any kind with regard to this manual, including, but not limited to, the implied
warranties of merchantability and fitness for a particular purpose. SailPoint Technologies shall not be liable for errors contained herein or
direct, indirect, special, incidental or consequential damages in connection with the furnishing, performance, or use of this material.

Restricted Rights Legend. All rights are reserved. No part of this document may be photocopied, reproduced, or translated to another
language without the prior written consent of SailPoint Technologies. The information contained in this document is subject to change
without notice.

Use, duplication or disclosure by the U.S. Government is subject to restrictions as set forth in subparagraph (c) (1) (ii) of the Rights in
Technical Data and Computer Software clause at DFARS 252.227-7013 for DOD agencies, and subparagraphs (c) (1) and (c) (2) of the
Commercial Computer Software Restricted Rights clause at FAR 52.227-19 for other agencies.

Regulatory/Export Compliance. The export and reexport of this software is controlled for export purposes by the U.S. Government. By
accepting this software and/or documentation, licensee agrees to comply with all U.S. and foreign export laws and regulations as they
relate to software and related documentation. Licensee will not export or reexport outside the United States software or documentation,
whether directly or indirectly, to any Prohibited Party and will not cause, approve or otherwise intentionally facilitate others in so doing.
A Prohibited Party includes: a party in a U.S. embargoed country or country the United States has named as a supporter of international
terrorism; a party involved in proliferation; a party identified by the U.S. Government as a Denied Party; a party named on the U.S.
Government's Entities List; a party prohibited from participation in export or reexport transactions by a U.S. Government General Order;
a party listed by the U.S. Government's Office of Foreign Assets Control as ineligible to participate in transactions subject to U.S.
jurisdiction; or any party that licensee knows or has reason to know has violated or plans to violate U.S. or foreign export laws or
regulations. Licensee shall ensure that each of its software users complies with U.S. and foreign export laws and regulations as they relate
to software and related documentation.

Trademark Notices. Copyright © 2020 SailPoint Technologies, Inc. All rights reserved. SailPoint, the SailPoint logo, SailPoint IdentityIQ,
and SailPoint Identity Analyzer are trademarks of SailPoint Technologies, Inc. and may not be used without the prior express written
permission of SailPoint Technologies, Inc. All other trademarks shown herein are owned by the respective companies or persons
indicated.

SailPoint Certified IdentityIQ Engineer Exam Study Guide Page 2 of 11


SailPoint Certified IdentityIQ Engineer Exam Study Guide
This guide will help you prepare for SailPoint’s IdentityIQ Engineer certification exam.

Candidate Profile
Candidates for this exam will install, deploy and configure IdentityIQ in their customers’ non-production
environments and local sandboxes. Candidates should have a general understanding of identity governance
and administration, have a moderate knowledge in XML, Java/BeanShell development, and supported
IdentityIQ infrastructure (operating systems, databases, and Java application servers). Candidates should also
demonstrate a good understanding of the various components of IdentityIQ which will enable them to
implement/develop the individual modules of a solution design.

This audience typically includes IdentityIQ partner staff and SailPoint employees, such as implementation
engineers and IAM developers. This exam is also appropriate for customer employees who develop their own
implementation. Candidates are expected to have taken SailPoint IdentityIQ technical training and have at
least one year of implementation experience.

Exam Format & Duration


You will have up to 90 minutes to take this exam, not counting any needed technical setup.

This exam uses the Discrete Option Multiple Choice (DOMC) question format, a unique system for multiple
choice testing. DOMC is designed to protect the integrity of multiple-choice tests, and by extension the test
takers, from some of the pitfalls of traditional multiple-choice tests. Instead of showing all the answer options at
once, a series of options are randomly presented one at a time. For each option, the test taker chooses YES or
NO, indicating whether he or she thinks the option is correct. To get the full question right, the candidate must
correctly identify which options in the series are correct and which are incorrect.

DOMC deters test fraud, provides a more accurate assessment of test-takers' knowledge, and helps reduce "test
bias" that can arise from test takers having inherent advantages such as native English proficiency or good test-
taking skills.

DOMC questions provide a very different test experience. There is no “undo” or “back” or "skip question"
capability, nor is there the ability to review questions at the end or to change answers. Therefore, it is important
to carefully consider the question in front of you before clicking.
We strongly recommend that you try examples of a DOMC test to familiarize yourself with the format in advance.
A couple of good examples are https://domc.caveon.com/tests/21 and https://domc.caveon.com/tests/20 . (Click
"Show Inner Workings" within each question to see how these tests operate.)

Here is a whitepaper on DOMC if you want to learn more: https://domc.caveon.com/pdf/DOMC_whitepaper.pdf

SailPoint Certified IdentityIQ Engineer Exam Study Guide Page 3 of 11


Preparing for the Exam
This section outlines the areas of expertise covered by the exam and some resources you can use to prepare for
it. There are three main areas of content that will help you learn the IdentityIQ product and prepare for the
exam:
• IdentityIQ Training (both instructor-led and self-paced)
• IdentityIQ Product Documentation
• IdentityIQ Whitepapers posted on Compass, SailPoint’s online community

Training and General Resources


• IdentityIQ Training Courses on Identity University:
o Recommended: IdentityIQ Essentials v8.2
o Recommended: IdentityIQ Implementation: Rules, Scripts, and API
o Recommended: IdentityIQ Implementation: Advanced Provisioning and Workflows
o Note: Previous course versions such as IdentityIQ Implementation and Administration:
Essentials v8.1, IdentityIQ Implementation: Essentials v7.2 or Fundamentals of IdentityIQ
Implementation v7.1 (or earlier), can be substituted for IdentityIQ Essentials and IdentityIQ
Implementation: Rules, Scripts, and API
• IdentityIQ Product Documentation
• IdentityIQ Technical Whitepapers
• BeanShell Developer's Guide for IdentityIQ

Exam Subject Areas with Study References


The top-level subject areas correspond to the score report you’ll receive immediately after completing the exam.

1 IdentityIQ Installation, build, and deployment


1.1 Understand the different infrastructure components of IdentityIQ
deployments
• https://community.sailpoint.com/t5/Other-Documents/Functional-Requirements-Definition-Template/ta-
p/72096

1.2 Demonstrate knowledge of the IdentityIQ installation steps and procedures


• https://community.sailpoint.com/message/61908#61908

• IdentityIQ Install Guides, various versions, Lifecycle Manager Activation Guide:


https://community.sailpoint.com/t5/IdentityIQ-Product-Guides/IdentityIQ-Product-Guides/ta-p/168678
• https://community.sailpoint.com/t5/Working-With-Services-Knowledge/Upgrade-Best-Practices/ta-
p/75139

SailPoint Certified IdentityIQ Engineer Exam Study Guide Page 4 of 11


1.3 Demonstrate knowledge of creating extended attributes
• IdentityIQ Install Guides, various versions: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678
• Whitepaper: Managing Extended Attributes: https://community.sailpoint.com/t5/Technical-White-
Papers/Managing-Extended-Attributes/ta-p/77088

1.4 Understand ongoing build and deployment of IdentityIQ


• IdentityIQ Install Guides, various versions: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678
• Services Standard Build User Guide:
https://community.sailpoint.com/servlet/JiveServlet/previewBody/4125-102-8-39153/Services-Standard-
Build-User-Guide.pdf
• Services Standard Build Home Page "Get Started - Standard Services Deployment":
https://community.sailpoint.com/t5/Services-Standard-Deployment/ct-p/IIQ_SSD
• Best Practices - Deployment, Migration, and Artifact Management:
https://community.sailpoint.com/t5/Technical-White-Papers/Best-Practices-Deployment-Migration-and-
Artifact-Management/ta-p/75804

1.5 Understand the process of installing patches and upgrades


• IdentityIQ Upgrade Best Practices: https://community.sailpoint.com/t5/Working-With-Services-
Knowledge/Upgrade-Best-Practices/ta-p/75139

1.6 Understand the configuration of end user access


• SailPoint IdentityIQ Administration Guide: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

1.7 Understand the configuration of email server settings


• SailPoint IdentityIQ Administration Guide: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

2 IdentityIQ Lifecycle Manager


2.1 Know how to configure Lifecycle Manager
• SailPoint IdentityIQ User Guide, various versions: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

SailPoint Certified IdentityIQ Engineer Exam Study Guide Page 5 of 11


2.2 Understand Identity provisioning policies
• SailPoint IdentityIQ Administration Guide: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

2.3 Configure LCM workflows


• Whitepaper: Lifecycle Manager Workflows: https://community.sailpoint.com/t5/Technical-White-
Papers/Lifecycle-Manager-Workflows/ta-p/71301

2.4 Configure lifecycle events and their associated workflows


• SailPoint IdentityIQ User Guide, various versions: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

2.5 Create and manage QuickLinks and QuickLink populations


• Whitepaper: Quicklinks: https://community.sailpoint.com/t5/Technical-White-Papers/QuickLinks/ta-
p/74261

2.6 Know how to configure and use Batch Requests


• SailPoint IdentityIQ User Guide, various versions: https://community.sailpoint.com/t5/IdentityIQ-
Product-Guides/IdentityIQ-Product-Guides/ta-p/168678

2.7 Leverage rapid setup in lifecycle events and Identity operations


• SailPoint IdentityIQ Rapid Setup Guide: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

3 IdentityIQ Identity Governance


3.1 Configure and schedule Certification campaigns
• Whitepaper: Lifecycle of a Certification: https://community.sailpoint.com/t5/Technical-White-
Papers/Lifecycle-of-a-Certification/ta-p/76216
• SailPoint IdentityIQ User Guide, various versions, IdentityIQ 8.1 and later: SailPoint IdentityIQ
Certification and Access Review Guide: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

3.2 Understand the purpose of common certification rules


SailPoint Certified IdentityIQ Engineer Exam Study Guide Page 6 of 11
• Whitepaper: Rules in IdentityIQ 7.0 - 7.2: https://community.sailpoint.com/t5/Technical-White-
Papers/Rules-in-IdentityIQ-7-0-7-2/ta-p/78176

3.3 Configure and leverage policies


• Whitepaper: Policies: https://community.sailpoint.com/t5/IdentityIQ-Wiki/Policies/ta-p/79011
• SailPoint IdentityIQ User Guide, various versions: https://community.sailpoint.com/t5/IdentityIQ-
Product-Guides/IdentityIQ-Product-Guides/ta-p/168678

3.4 Understand different responses to policy violations


• Whitepaper: Policies: https://community.sailpoint.com/t5/IdentityIQ-Wiki/Policies/ta-p/79011
• Separation of Duties for Effective Entitlements: https://community.sailpoint.com/t5/IdentityIQ-
Wiki/IdentityIQ-7-3-Separation-of-Duties-for-Effective-Entitlements/ta-p/73691

3.5 Execute and leverage reporting


• SailPoint IdentityIQ Administration Guide; Chapter 17: Report Use and Customization:
https://community.sailpoint.com/t5/IdentityIQ-Product-Guides/IdentityIQ-Product-Guides/ta-p/168678

3.6 Leverage Advanced Analytics


• SailPoint IdentityIQ User Guide, various versions: https://community.sailpoint.com/t5/IdentityIQ-
Product-Guides/IdentityIQ-Product-Guides/ta-p/168678

3.7 Configure and utilize auditing


• Whitepaper: Audit Configuration in IdentityIQ: https://community.sailpoint.com/t5/Technical-White-
Papers/Audit-Configuration-in-IdentityIQ/ta-p/74075

4 IdentityIQ Development
4.1 Understand the purpose and use of rule libraries
• Whitepaper: Writing Rules and Scripts: https://community.sailpoint.com/t5/Technical-White-
Papers/Rules-in-IdentityIQ-7-0-7-2/ta-p/78176

4.2 Understand and leverage rule input/output arguments


• Whitepaper: Rules in IdentityIQ 7.0 - 7.2: https://community.sailpoint.com/t5/Technical-White-
Papers/Rules-in-IdentityIQ-7-0-7-2/ta-p/78176
• Whitepaper: Forms: https://community.sailpoint.com/t5/Technical-White-Papers/Forms/ta-p/73531

4.3 Use workflow variables, transitions, and step conditions


SailPoint Certified IdentityIQ Engineer Exam Study Guide Page 7 of 11
• Whitepaper: IdentityIQ Workflows: https://community.sailpoint.com/t5/Technical-White-
Papers/Workflows/ta-p/72077

4.4 Understand workflow steps that generate work items


• IdentityIQ Object Model and Usage: https://community.sailpoint.com/t5/Technical-White-
Papers/IdentityIQ-Object-Model-and-Usage/ta-p/75090

4.5 Know the different workflow step usages


• System Administration Guide: https://community.sailpoint.com/t5/IdentityIQ-Product-Guides/IdentityIQ-
Product-Guides/ta-p/168678

4.6 Understand how sub-workflows can be leveraged


• In versions 7.x through 8.1 of IdentityIQ, this information is in the System Administration Guide. In versions
8.2 and later, it is in the Business Processes Guide: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

4.7 Know the common SailPoint API objects and methods, and how to leverage
them
• IdentityIQ SCIM API: https://developer.sailpoint.com/apis/iiq/
• IdentityIQ Object Model and Usage: https://community.sailpoint.com/t5/Technical-White-
Papers/IdentityIQ-Object-Model-and-Usage/ta-p/75090
• Beanshell Developer’s Guide: https://community.sailpoint.com/t5/Technical-White-Papers/BeanShell-
Developer-s-Guide-for-IdentityIQ/ta-p/74365
• IdentityIQ Wiki: Locking a SailPoint Object: https://community.sailpoint.com/t5/IdentityIQ-Wiki/Locking-a-
SailPoint-Object/ta-p/79680

4.8 Know how to customize and use email templates


• Whitepaper: Email Template Usage and Customization: https://community.sailpoint.com/t5/Technical-
White-Papers/Email-Template-Usage-and-Customization/ta-p/78164
• Whitepaper: Email Template Arguments: https://community.sailpoint.com/t5/Technical-White-
Papers/Email-Template-Arguments/ta-p/73115
• Whitepaper: Best Practices: Email Configuration: https://community.sailpoint.com/t5/Technical-White-
Papers/Best-Practices-Email-Configuration/ta-p/75930

4.9 Know which elements of the SailPoint UI can be branded and how to change
them
• Whitepaper: Branding IdentityIQ: https://community.sailpoint.com/t5/Technical-White-Papers/Branding-
IdentityIQ-7-1-7-2/ta-p/80231
SailPoint Certified IdentityIQ Engineer Exam Study Guide Page 8 of 11
• Whitepaper: UI Customization with UIConfig in IdentityIQ: https://community.sailpoint.com/t5/Technical-
White-Papers/UI-Customization-with-UIConfig-in-IdentityIQ-7-2-7-3-and-8-0/ta-p/76860

4.10 Perform localization in the SailPoint UI for common customer use cases
• Whitepaper: Enterprise Localization of IdentityIQ: https://community.sailpoint.com/t5/Technical-White-
Papers/Enterprise-Localization-of-IdentityIQ/ta-p/77659

5 IdentityIQ Application Onboarding


5.1 Configure application definitions
• SailPoint IdentityIQ Application Configuration Guide, SailPoint IdentityIQ Administration Guide:
https://community.sailpoint.com/t5/IdentityIQ-Product-Guides/IdentityIQ-Product-Guides/ta-p/168678

5.2 Configure common connector settings


• SailPoint Direct Connectors: Administration and Configuration Guide:
https://community.sailpoint.com/t5/IdentityIQ-Product-Guides/IdentityIQ-Product-Guides/ta-p/168678

5.3 Configure rapid set up aggregation settings


• SailPoint IdentityIQ Rapid Setup Guide: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

5.4 Know how to schedule various tasks to achieve desired data loading and
processing outcomes
• Whitepaper: Account Aggregation Data Flow: https://community.sailpoint.com/t5/Technical-White-
Papers/Account-Aggregation-Data-Flow/ta-p/79914
• SailPoint IdentityIQ Administration Guide; Chapter 18: Tasks:
https://community.sailpoint.com/t5/IdentityIQ-Product-Guides/IdentityIQ-Product-Guides/ta-p/168678

5.5 Understand common application rule types


• Whitepaper: Rules in IdentityIQ: https://community.sailpoint.com/t5/Technical-White-Papers/Rules-in-
IdentityIQ-7-0-7-2/ta-p/78176

5.6 Understand common connector rule types


• Whitepaper: Rules in IdentityIQ 7.0 - 7.2: https://community.sailpoint.com/t5/Technical-White-
Papers/Rules-in-IdentityIQ-7-0-7-2/ta-p/78176
SailPoint Certified IdentityIQ Engineer Exam Study Guide Page 9 of 11
6 IdentityIQ Debugging and Troubleshooting

6.1 Configure and leverage log4j


• Log4j Support Guide: https://community.sailpoint.com/t5/Working-With-Support-Knowledge/Log4j-
Support-Guide/ta-p/137421

6.2 Configure and leverage Syslog


• Whitepaper: Logging and Auditing: https://community.sailpoint.com/t5/IdentityIQ-Wiki/Logging-and-
Auditing/ta-p/73782#toc-hId-1015949011

6.3 Leverage IdentityIQ console for debugging


• SailPoint IdentityIQ Administration Guide; Chapter 23: IdentityIQ Console:
https://community.sailpoint.com/t5/IdentityIQ-Product-Guides/IdentityIQ-Product-Guides/ta-p/168678

6.4 Leverage the debug pages for debugging


• Debug Pages content on Compass: https://community.sailpoint.com/t5/IdentityIQ-Wiki/Debug-Pages/ta-
p/78660
• IdentityIQ Wiki: Writing Rules and Scripts: https://community.sailpoint.com/docs/DOC-
1929#jive_content_id_Testing_Rules

6.5 Leverage email redirection for debugging


• SailPoint IdentityIQ User Guide, various versions: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

6.6 Leverage the Administrator Console for debugging


• SailPoint IdentityIQ Administration Guide; Chapter 10: Using the Administrator Console:
https://community.sailpoint.com/t5/IdentityIQ-Product-Guides/IdentityIQ-Product-Guides/ta-p/168678

7 IdentityIQ Data and Access Modeling


7.1 Understand default role models/types
• Whitepaper: Role Management in IdentityIQ: https://community.sailpoint.com/t5/Technical-White-
Papers/Role-Management-in-IdentityIQ/ta-p/77726
SailPoint Certified IdentityIQ Engineer Exam Study Guide Page 10 of 11
7.2 Configure roles and role options
• Whitepaper: Role Management in IdentityIQ: https://community.sailpoint.com/t5/Technical-White-
Papers/Role-Management-in-IdentityIQ/ta-p/77726
• IdentityIQ 8.0 and earlier: SailPoint IdentityIQ Administration Guide, IdentityIQ 8.1 and later: SailPoint
IdentityIQ Role and Group Management Guide: https://community.sailpoint.com/t5/IdentityIQ-Product-
Guides/IdentityIQ-Product-Guides/ta-p/168678

7.3 Configure Identity attribute mappings


• SailPoint IdentityIQ Administration Guide; Chapter 1: System Setup:
https://community.sailpoint.com/t5/IdentityIQ-Product-Guides/IdentityIQ-Product-Guides/ta-p/168678

7.4 Know which common IdentityIQ objects can have extended attributes
• Whitepaper: Managing Extended Attributes: https://community.sailpoint.com/t5/Technical-White-
Papers/Managing-Extended-Attributes/ta-p/77088

7.5 Know the common IdentityIQ data objects and what they represent
• IdentityIQ Object Model and Usage: https://community.sailpoint.com/t5/Technical-White-
Papers/IdentityIQ-Object-Model-and-Usage/ta-p/75090

7.6 Understand the relationship between common data object models


• Whitepaper: Object Model: https://community.sailpoint.com/t5/Technical-White-Papers/IdentityIQ-
Object-Model-and-Usage/ta-p/75090

7.7 Understand the difference between different group types


• Whitepaper: Grouping Constructs: https://community.sailpoint.com/t5/Technical-White-Papers/Grouping-
Constructs-pdf/ta-p/71628

SailPoint Certified IdentityIQ Engineer Exam Study Guide Page 11 of 11

You might also like