SailPoint IdentityIQ-Engineer Exam With Confidence Using Practice Dumps

The scenario describes triggering a workflow when a " Division " attribute changes from a specific value to " Senior IT, " but only when the user is a manager. The proposed solution suggests creating a trigger with an event type of " rule " that checks the previous and new values of the " Division " attribute.

However, this approach has a couple of issues:

Trigger Configuration: In SailPoint IdentityIQ, a lifecycle event trigger typically operates on changes in identity attributes, but it’s not standard to define this trigger using a rule that directly inspects the previous and new values. Instead, the lifecycle event would usually be configured in the context of the application or identity to directly listen to specific changes without needing to define the logic in a custom rule.

Condition Validation: The condition of checking if the user is a manager should ideally be integrated within the workflow itself or the lifecycle event configuration, not just as part of a rule in the trigger.

While a rule can be used to define complex conditions, the correct way to implement this in IdentityIQ would involve setting up the lifecycle event trigger specifically for the attribute change and managing any additional conditions (like checking if the user is a manager) within the workflow or using an appropriate script/rule in that context.

Therefore, while partially correct in approach, the described solution is not the best practice or a valid process in IdentityIQ, so the correct answer is B. No.

Create Policy is not required for every IdentityIQ application. In IdentityIQ, provisioning policies are used when the system needs structured forms and field definitions for operations such as account creation, update, delete, enable, disable, or password actions. A Create Policy is specifically relevant when IdentityIQ is expected to create accounts on that target application and needs to collect or calculate the required values for account creation. Many applications may be onboarded initially for aggregation, correlation, governance, certifications, or visibility only, without immediate provisioning. In those cases, a Create Policy is unnecessary. Even in provisioning-enabled environments, not all applications support account creation, and some may support only entitlement changes or account disables. Therefore, Create Policy is an optional provisioning configuration, not a required field for setting up any application. References/topics: IdentityIQ Engineer — application onboarding, provisioning policies, Create Account policy, aggregation-only applications, account provisioning configuration.

Not all Application objects in SailPoint IdentityIQ must have an Identity object as the owner. While it is common practice to assign an owner to an Application object for governance and administration purposes, it is not a strict requirement. Applications can exist without a direct association to an Identity object. The ownership concept in IdentityIQ is more of a best practice for accountability rather than a mandatory attribute. Refer to the SailPoint IdentityIQ Application Definition Guide for more information on the configuration and management of Application objects.