SailPoint - Certification

 To help you navigate your SailPoint journey, I’ve outlined the recommended order for taking the certifications below.

1. Identity Security Leader Credential

Cost : Free (Includes 2 attempts)

Format : Non-proctored

Prerequisite : Must complete all related training modules before the final exam.

Who it’s for : This is a general credential (not role-based) designed to give anyone a foundational understanding of SailPoint.

Link : https://university.sailpoint.com/path/identity-security-leader

2. Identity Security Professional Credential

Cost : Free (Includes 2 attempts)

Format : Non-proctored

Prerequisite : Training completion required.

Who it’s for : A general credential that builds confidence before moving on to the paid, proctored exams. 

Link : https://university.sailpoint.com/path/identity-security-administrator/sailpoint-identity-security-professional-credential

3. Identity Security Administrator

Cost : Paid

Format : Proctored

Prerequisite : Training completion required.

Who it’s for : Specifically designed for those in Administrator or Support roles. 

Link: https://university.sailpoint.com/path/identity-security-administrator

4. Identity Security Expert Credential

Cost : Free (Includes 2 attempts)

Format : Non-proctored

Prerequisite : Training completion required.

Who it’s for : Another great stepping stone to help you prepare for the advanced paid certifications.

Link :https://university.sailpoint.com/path/identity-security-engineer

5. Identity Security Engineer

Cost : Paid

Format : Proctored

Prerequisite : Training completion required.

Who it’s for : This is the final certification in this track, specifically tailored for Developers. 

Link :https://university.sailpoint.com/path/identity-security-engineer

Important Note:

The Administrator and Engineer certifications require hands-on experience. I highly recommend attempting these only if you have practical project experience. That said, our internal training program is comprehensive enough to fully prepare you for the Engineer exam. You can directly take Engineer cert as well.

ISC-File Upload Utility

Reference:-

https://community.sailpoint.com/t5/Professional-Services/SailPoint-File-Upload-Utility/ta-p/76392

https://developer.sailpoint.com/discuss/t/file-upload-utility/18181

Which actions or operations cannot be performed through the ISC UI?

 # Optimization

# Lifecycle State deletion

Lifecycle State

# Lifecycle states can be managed through the UI; however, deletion of lifecycle states is not supported via the UI. Deletion can be performed using VS Code or Postman.

# Lifecycle states can be validated through Access History (up to 18 months) or via Events.

# All lifecycle states can be implemented within a single transform.

Optimization

 

Account Aggregation

 

ISC Postman Set up

 High-Level Steps:-

# Download and install the postman.

# Navigate to the home icon and click on a Workspace.

# Click on a create Workspace.

# Create an Environment

•     Configure the variables (clientId, clientSecret, tenant) in the Environment.

# Create a Collection

•     Configure the variable (domain) in the collection.
•     Configure the Authorization for child API's to connect ISC tenant
•     Select the Authentication type as OAuth 2.0

# Configure New Token

•         Select the Grant Type as Client Credentials
•         Provide the Access Token URL : https://{{tenant}}.api.identitynow-demo.com/oauth/token
•         Configure the tenant using an Environment variable
•         Reference    :    https://developer.sailpoint.com/docs/api/authentication
•         https://[tenant].api.identitynow.com/oauth/token
•         Configure the Client ID using an Environment variable
•         Configure the Client Secret using an Environment variable

# Click on Get New Access Token, then select Use Token to enable usage for child APIs.

ISC VSC Code Set up

High-Level Steps:-

# Download and install the Visual Studio Code (VSC).

# Navigate to the Extensions icon, located at the center of the left-hand panel.

# Search with "sailpoint identity sec" and look for the author Yannick.

# Open the "SailPoint Identity Security Cloud for Visual Studio Code" and click on setting icon for install specific version selection.

# Select the version to install - 1. 3. 29

#The ISC tenant will be added automatically; if it is not, restart Visual Studio Code.

# Navigate to the ISC extension icon, click on Add tenant.

# Provide the following details:

    tenant name (Ex: Tenant + domain),

    display name (Ex: Tenant + domain),

    Select the AuthN method as PAT, then provide the clientId & clientSecret.

# The tenant is configured as read-only by default; update the setting to writable for a sandbox environment.

ISC PAT Generation

 High-Level Steps:-

# Login to SailPoint ISC tenant.

# Navigate to your profile/name, it is available on leftside topmost.

# Navigate to Personal Access Tokens

# Click on New token

# Provide the name of the token, remove the expiration date,  and give the scope is sp:scopes:all

# Click on create

# PAT contains Secret and Client ID

Note: 

Any user with admin access to the tenant can create up to 10 tokens.

PAT - Personal Access Token

Sailpoint ISC URL's & Paths

ISC Tenant URL :
https://{{tenant}}.{{domain}}/login/login/?brand=default

ISC Docs:
https://documentation.sailpoint.com/saas/help/index.html

ISC Glossary URL:
https://documentation.sailpoint.com/saas/help/common/glossary.html

ISC Developer Community URL: 
https://developer.sailpoint.com/docs/

ISC Postman Setup URL:
https://developer.sailpoint.com/docs/api/postman-collections
https://www.postman.com/sailpoint/identitynow/overview
Token URL : https://[tenant].api.identitynow.com/oauth/token

ISC API's URL:
https://developer.sailpoint.com/docs/api

Fetch the pending ARs associated with the BR

SELECT

c.Name as AR,

TO_CHAR (TO_DATE ('19700101', 'YYYYMMDD') + (p.created / 1000 / 60 /60 / 24), 'DD/MM/YYYY HH24:MI') AS "P CREATED DATE",
TO_CHAR (TO_DATE ('19700101', 'YYYYMMDD') + (p.end_date / 1000 / 60 /60 / 24), 'DD/MM/YYYY HH24:MI') AS "P END DATE",
TO_CHAR (TO_DATE ('19700101', 'YYYYMMDD') + (c.created / 1000 / 60 /60 / 24), 'DD/MM/YYYY HH24:MI') AS "C CREATED DATE",
TO_CHAR (TO_DATE ('19700101', 'YYYYMMDD') + (c.end_date / 1000 / 60 /60 / 24), 'DD/MM/YYYY HH24:MI') AS "C CREATED DATE",

c.Name,
c.Value AS BR,
c.approver_name,
C.operation,
c.approval_state,
c.provisioning_state,
c.compilation_status,
c.identity_request_id 

FROM identityiq.spt_identity_request_item c
JOIN identityiq.spt_identity_request p ON p.id = c.identity_request_id

WHERE c.name = 'assignedRoles' AND
(VALUE IN ('IIQ Role', 'ISC Roles'));