1. SailPoint Course Material for Access Certification
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

2. Course Agenda And Schedule
Topic
Facilitator
Time
Certification Process
Current vs. New Process
Types of Certifications
Process Flows for –
People Manager Certifications
Business Application Owner (BAO) Certifications
Notifications & Escalations
XXX
10 Minutes
Certification in SailPoint IdentityIQ
Delegation of Certifications
Sign off of Reports by BAO
Q&A Discussions
Hands on Exercise #1
60 Minutes
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

3. Certification Process
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

4. User Access Certifications using AAM SailPoint Solution
Current Process: User Access Certifications at Company A
New Process: User Access Certifications using AAM SailPoint Solution
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

5. Types of Certifications in SailPoint IdentityIQ
These are three (3) types of Certifications configured in IdentityIQ.
People Manager and BAO Certifications are discussed in detail in next slides.
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

6. People Manager Certification in IdentityIQ & Process Flow
People Manager Certification Process Flow:
SailPoint IdentityIQ creates certifications to review access for the users
People Managers perform certifications for their direct reports
People Managers access SailPoint IdentityIQ and approve or revoke users’ access on a IdentityIQ’ s web-based interface
SailPoint IdentityIQ stores the certification results and takes further action e.g.. de-provisions users’ roles if marked as revoke in the certification
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

7. BAO Certifications in IdentityIQ & Process Flow
BAO performs a certification in IdentityIQ for users whose People Managers have a title of above 2nd level VP
Also, BAO’s reviews the completed People Manager Certification report & signs-off on the report in IdentityIQ
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

8. User Access Certifications - Notifications & Escalations
Receiver
Description
Type
Days
Certifier
Certification Notification
Notification
0 Day
Certification incomplete after 15 days of start date
First Reminder Notification
15 Days
Certification incomplete after 20 days of start date
Second Reminder Notification
20 Days
Access Certifications Escalations
Receiver
Description
Type
Days
Certifier’s Manager
Certification incomplete after 25 days of start date
1st Escalation
25 Days
Corporate AAM Office / AAM Lead
Certification incomplete after 30 days of start date
Final escalation
30 Days
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

9. Certification in SailPoint IdentityIQ
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

10. Steps to complete a Certification in IdentityIQ
Step 1: Notification
You will receive an from A.com with certification details
Follow the link to begin your certification
Click the “AAM SailPoint Help” link for more information
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

11. Steps to complete a Certification in IdentityIQ
Step 2: IdentityIQ Dashboard
Access IdentityIQ. The 1st page displayed is the IdentityIQ ‘Dashboard’
Click on the Certification in the ‘Inbox’ to begin the certification process

12. Steps to complete a Certification in IdentityIQ
Step 3: Access Review Details Page
A pop up will be displayed with Details on the Access Review. Click ‘Ok’ to continue to the access review.
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

13. Steps to complete a Certification in IdentityIQ
Step 3 Continued: Access Review Details Page
Access of each user will be displayed.
Click on each user’s access review line item to complete certification

14. Steps to complete a Certification in IdentityIQ
Step 4: Make Decisions
Choose a certification action for the users

15. Steps to complete a Certification in IdentityIQ
Step 4 Continued: Make Decisions
Choose a certification action (approve/revoke) for each user’s role
Click ‘Save Changes’ to continue to the next user
Click ‘Save Changes’ after making each decision
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

16. Steps to complete a Certification in IdentityIQ
Step 4 Continued: Make Decisions
If there is a segregation of duties (SOD) by a user, the violated SOD will be displayed for the user within the certification.
Step 2: Select ‘Allow Exception’ or ‘Revoke’
Step 1: Click on user to display SOD violation information

17. Steps to complete a Certification in IdentityIQ
Step 4 Continued: Make Decisions
The details of the violated SOD Policy description are displayed to the certifier
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

18. Steps to complete a Certification in IdentityIQ
Step 5: Sign off Certification
Once certification decision is saved for each user, click ‘Sign off’ to submit certification
Note: Sign Off is only available when the user roles have been certified and decisions have been saved i.e. Percent Complete is 100%

19. Summary: Steps to complete a Certification in IdentityIQ
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

20. Certification Delegations
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

21. Assigning a Sub-Certifier in Certifications
Certifications items may be delegated by the certifier to a sub-certifier in IdentityIQ
Sub-certifiers can be chosen inside the certification view for each of the roles for direct report(s)
Steps to assign a sub-certifier:
Open certification in IdentityIQ, select one or more users for delegation. Click on “Delegate” option for each user’s line item
Step 1: Click on ‘Delegate’ button for the user’s certification line item
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

22. Assigning a Sub-certifier in Certifications
After selecting ‘Delegate’, select the recipient of the delegated item from the drop-down list of users & click on ‘Delegate’
Step 2: Search & select sub-certifier
After selecting the sub-certifiers, select ‘Save Changes’
Step 3: Click ‘Save Changes’

23. Certifying Work Item by a Sub-certifier
The assigned Sub-certifier will receive a ‘Certification Work Item’ in SailPoint IdentityIQ. This work item can be accessed in the “Dashboard->Inbox”
Step 1: Select certification work item from Dashboard-Inbox

24. Certifying Work Item by a Sub-certifier
The sub-certifier can certify the delegated certification work item i.e. approve or reject, add comments & save.
Step 2: Add comments
Step 1: Select ‘Approve’ or ‘Revoke’
Step 3: Click ‘Save’
Step 4: Click ‘Complete’ or ‘Reject’

25. Certification / Report Sign Off
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

26. Sign-Off after Certification
After the certifier or sub-certifier has completed the certification items, the People Manager/BAO must sign off on the certification in IdentityIQ
Steps to sign off on the certification:
Open the certification containing the certification work items from Dashboard->Inbox
Click on ‘Sign off’ (only available when certification items are 100% complete)
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

27. Steps to Sign off Reports for BAO
SailPoint IdentityIQ will generate a ‘User Access Report’ for the BAO. The BAO can review and sign off on this report.
Step 1: Click on report for ‘Sign off’ under ‘Manage-Work Items’
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

28. Steps to Sign off Reports for BAO
BAO can open the user access report from the work item.
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

29. Steps to Sign off Reports for BAO
BAO can review the user’s roles in the application in the user access report.
Step 3: Review user access in report
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

30. Steps to Sign off Reports for BAO
After reviewing the user access report, the BAO can take action on the report i.e. Sign off
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

31. Questions and answers
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.

32. Thank you
Copyright © Asha24. All the contents of this material for education purpose only. Sailpoint is not the publisher of these material and is not responsible for it in any aspect.