Sending Identity Data to SailPoint Agentic Fabric

IdentityIQ sends identity data to Agentic Fabric using the SailPoint Agentic Fabric: Identity Sync data extract task. The task sends only the user identities; workgroups are excluded.

Before you begin, for data extract tasks to run, ensure that the Enable Data Extract Tasks checkbox is selected at Gear Icon > Global Settings > Data Extract Configuration.

The plugin installation creates the following tasks by default. Do not create these tasks manually.

SailPoint Agentic Fabric: Identity Sync - (Scheduled) This task sends the identity data to Agentic Fabric as follows:
- On the first task run, it sends all identities to Agentic Fabric.
- On subsequent runs, it sends data only for identities that are new, modified, or deleted.
  
  Note that inactive identities are marked as Disabled in Agentic Fabric.
The task synchronizes the following identity attributes: id, name, firstName, lastName, active, email, managerId, and classification.

This task is scheduled by default. You can update the schedule as needed.
SailPoint Agentic Fabric: Full Identity Sync - (On demand) Run this task if identity data in Agentic Fabric becomes out of sync with IdentityIQ. The task sends all identities to Agentic Fabric each time it runs.

Important

For a multi-node architecture, schedule the SailPoint Agentic Fabric: Identity Sync data extract task on only one node. By default, it is scheduled on the node where the plugin was installed.
IdentityIQ should remain the authoritative source for identities. If you need to make identity changes, you must make them in IdentityIQ and then synchronize them to Agentic Fabric.

After the identity data is sent to Agentic Fabric, the corresponding identities can sign in to Agentic Fabric as users to monitor and govern AI agents they own. For more information, see the SailPoint Agentic Fabric documentation.

Tip

To pause sending identity data to Agentic Fabric, unschedule the SailPoint Agentic Fabric: Identity Sync task.