What are some important terms used in SailPoint Identity IQ?
SailPoint is a leading provider of Identity and Access Management (IAM) solutions. SailPoint's flagship product, SailPoint IdentityIQ, provides organizations with a centralized platform for managing and governing access to critical systems, applications, and data. The platform offers a range of features, including identity governance, role-based access control, compliance reporting, and analytics, to help organizations meet security, privacy, and compliance requirements while improving operational efficiency and user productivity.
In SailPoint IIQ, so many terms are used. Here we will see the various terms used in SailPoint IIQ.
1.???IdentityIQ: The main product offered by SailPoint, an identity and access management (IAM) solution.
?2.???Connector: A component that integrates with external systems and services to import and manage identity data.
?3.???Identity: A unique representation of a person, system, or device within the SailPoint IIQ platform. Identity?is the object in SailPoint on which SailPoint does all the activities like Provisioning, de-provisioning, LCM, Joiner, etc. Identity is key data in SailPoint.
?4.???Identity Store: A database that stores identity data from internal sources or external systems integrated with SailPoint IIQ.
?5.???Role: A collection of permissions and entitlements that can be assigned to an identity within the SailPoint IIQ platform. A role is a group of entitlements. The role is made up of various entitlements clubs together.
6.???Workflow: A series of tasks and actions that are automated within SailPoint IIQ to manage the provisioning and certification of access.
?7.???Policy: A set of rules and conditions that determine access to systems and services within the SailPoint IIQ platform.
?8.???Certification: The process of reviewing and verifying the entitlements and permissions assigned to identities within the SailPoint IIQ platform.
?9.???Entitlement:?Entitlement?is created to give permission to access any application or resource in a limited way like read-access, or read-write entitlement.?
?10. ?Group Factory: Group factory applies on the attribute. if we assign a group factory to any attribute, then later that attribute can be used to group the search result. e.g., if we make?the location?attribute a group factory, then we can make a filter to see identities from different locations.
?11. ?Joiner: Joiner is a SailPoint event, that triggers when a new identity is created in SailPoint.
?12. ?Mover: Mover is a SailPoint event triggered when an identity change/move from one department to another.
?13. ?Leaver: A leaver is an event that triggers when an identity leaves the organization.
领英推荐
?14. ?WorkItem: WorkItem is manual actions created and send to appropriate owners to take any action on the request raised by the identities.
?15. ?Workflow/ Business Process: SailPoint Workflow or business process is the step-by-step execution to perform any task. There are so many Workflows out of the box provided by SailPoint like LCM, password, etc.
?16. ?Certification: Certification or Access review is the way to check whether the right identities have the right access at a given point in time. Certifications are generally scheduled periodically to check or validate the right access for identities. e.g., Application certification, Owner certification, manager certification, etc.
?17. ?Identity Creation: Identity creation is the process of creating identities in SailPoint. Generally, identities are created during the aggregation process or user onboarding.
?18. ?Correlation: Correlation is the concept or logic to correlate the accounts with already created identities in SailPoint. Usually, Correlation is done during the aggregation process.
?19. ?Customization: Customization is the process to customize the data before persisting in SailPoint. Customization is done during the aggregation process.
?20. ?Entitlement?Catalog: An entitlement Catalog is a place where entitlements of all the applications are saved. You can see Entitlement Catalog under Applications -> Entitlement Catalog.
?21. ?Tasks: Tasks are like separate modules to perform some operation. Tasks can be scheduled at different intervals of time to perform some action like Aggregation task, Identity Refresh Task, etc.
?22. ?Forms: Forms are used to take input from the user. forms are used at various points like provisioning forms etc.
?23. ?BeanShell: BeanShell is a language that is understood by SailPoint. BeanShell is used to write Rule, workflow, etc. BeanShell is a combination of java and XML.
?24. ?Aggregation: Aggregation is the process to fetch the data from the Application into SailPoint. Aggregate generally fetches the account data and entitlement data.
?25. ?Connected?Applications: Connected Applications are those applications where SailPoint directly connects with the application to do all operations like provisioning, de-provisioning, etc.?It does not wait to run any task or Scheduler to do these operations. SailPoint directly connects with the Application 24* example like Active directory.
?26. ?Disconnected?Application: Disconnected Applications are reversed to connected ones. they are not connected directly, and these types of applications need some extra Tasks or a Scheduler to perform the various operations example application is a delimited file connector.
?27. ?RBAC: RBAC is Role-Based Access Control is the way or method used to automatically provide access according to the Roles.
?28. ?Provisioning: Provisioning means providing access to identity on some application.