Platform implementation
We implement SailPoint IdentityIQ to answer the auditor's question of who has access to what, and why, with certifications, role models and segregation-of-duties checks that run on a schedule.
IdentityIQ is governance first: it aggregates accounts and entitlements from every connected system, correlates them to people, and runs reviews and policy checks on top. It is software you install and run in your own environment, on premises or in a cloud you control, which keeps identity data inside the boundary your residency policy sets. Banks working to the SAMA Cyber Security Framework, and entities under NCA ECC or the UAE Information Assurance Regulation, need evidence of periodic access review, which is where IdentityIQ is strongest.
Delivery is a build in its own right: application definitions and connectors for each source, correlation and BeanShell rules for the cases standard mapping cannot handle, and Lifecycle Manager workflows for requests and provisioning. Configuration is exported as XML and promoted from development to test to production through a build process, so nothing is changed by hand in production.
SailPoint IdentityIQ and related product names may be trademarks of their respective owners.
Design, build, integration and run-state support, with each decision recorded for your steering committee.
We agree the role model, the split between business and IT roles, the certification types and their frequency, and the first set of SoD policies. The information security office and internal audit sign these off before any rule is written.
Manager, application-owner and targeted certifications, with revocations sent back to source systems and the evidence kept for audit.
SoD policies built from your conflict matrix, in finance or treasury systems for example, checked when access is requested and in scheduled scans.
Role mining across aggregated entitlements to propose business roles, reviewed with department heads before they become the basis of birthright access.
SailPoint issues IdentityIQ versions and patches that you install yourself, so we plan each upgrade through the same build pipeline, and monitor aggregation task failures, provisioning retries and certification completion rates.
IdentityIQ suits large and regulated organisations that need deep control over rules and hosting, and that have many on-premises or bespoke systems to govern rather than a mainly SaaS estate.
Tell us what the platform needs to do and when. We will propose a first phase with scope, team and an itemised quotation.
