SailPoint IdentityIQ

Identity data has become central to corporate cybersecurity, and its value depends on both access and freshness. Nightly directory updates are increasingly inadequate; organizations now expect real-time connectors and an “identity fabric” that serves not only enterprise applications but also authorization servers, network analyzers, AI bots, and sometimes IoT platforms. As IT environments grow more complex, identity management must span hybrid architectures where cloud resources need identity access while carrying higher risk due to exposure outside the corporate network. Regulations further complicate designs through data sovereignty constraints that restrict where identity data may be stored.

Modern identity fabrics must align with contemporary enterprise architectures, extending beyond populating an on-premises directory. Required capabilities include IDaaS support, hybrid cloud integration, RESTful APIs, DevOps enablement, and IoT readiness so identity data can be delivered in real time wherever needed. Core IAM capabilities—provisioning, entitlement assignment (often approval-driven), deprovisioning, and governance processes for validation and audit—fall under identity governance and administration (IGA). Access control expectations have also evolved from LDAP queries toward SAML for cloud apps, SCIM for external authorization services, HTTP/token-based authentication integration, and credential storage for MFA.

Automation and identity analytics are increasingly mandatory to reduce manual effort in provisioning and recertifying entitlements. Analytics should monitor entitlements continuously, flag exceptions, and automate routine attestation, reducing certification workload. SailPoint, long focused on IGA through IdentityIQ, has expanded toward repeatable, modern identity-fabric needs, leveraging AI (from Orkus) and cross-environment monitoring (OverWatchID). IdentityIQ provides connectors for authoritative sources, supports diverse onboarding populations, and uses AI to recommend least-privilege access. SailPoint delivers features via both deployable modules and a cloud-native, multi-tenant SaaS platform, adding predictive identity services, file access governance for sensitive data repositories, and cloud governance that increases visibility and control over DevOps entitlements across Azure, AWS, and Google Cloud.

• Nightly directory updates are described as no longer satisfactory for modern identity needs.
• Identity fabrics are expected to support authorization servers, network analyzers, AI bots, and sometimes IoT platforms.
• Hybrid environments increase identity management difficulty because cloud-based resources have a higher risk profile than on-premises resources.
• Many jurisdictions impose sovereignty restrictions on where identity data can be stored.
• Core IAM functionality includes onboarding employees and contractors, setting entitlements via approvals, deprovisioning, and entitlement governance for audit.
• Contemporary access control requirements include SAML support, SCIM interfaces, HTTP support for token-based authentication servers, and credential storage to support MFA.
• SailPoint acquired Orkus and OverWatchID in 2019.
• SailPoint’s SaaS-based functionality is supported on AWS in US, Germany, and London availability zones.
• File Access Manager supports cloud storage environments including Dropbox, Box, and SharePoint.
• Cloud governance “access discovery” is deployed across Azure, AWS, and Google Cloud.

• “Directory updates on a nightly basis are no longer satisfactory, connectors that maintain data in real time are now expected.”
• “Increasingly a simple interface to enterprise applications is not enough, the ‘identity fabric’ within an organization must support authorization servers, network analyzers, AI bots and, in some cases, IoT platforms.”
• “Regulation adds another layer of complexity with many jurisdictions placing sovereignty restrictions on where identity data can be stored.”
• “The umbrella term for this functionality is identity and governance administration (IGA).”
• “But contemporary identity fabrics must go further; increasingly identity analytics must be provided.”
• “To the degree possible, automation should be used to reduce the level of manual intervention typically needed in provisioning user accounts and in recertifying entitlements.”
• “No longer will certification campaigns absorb much of a manager’s time, the IAM environment will automate the core attestation tasks.”
• “This reduces the deployment effort and improves scalability.”
• “The SailPoint Access Insights service digs into identity data to provide deeper visibility and intelligence across users (human and non-human) and their access.”
• “The IAM team can now ensure developers can only access the Dev domain and not the Test domain and that neither developers nor testers can access the Prod domain.”