Certifications Overview

Certifications allow designated people, such as managers or system owners, to review users’ access to your enterprise systems and data. Certifiers determine whether the access is appropriate for those users or should be revoked.

Certifications improve your data security by reducing inappropriate access and helping you satisfy audit and regulatory requirements.

Each set of reviews is called a certification campaign. Each assigned review is called a certification.

Certifying Access

The certification process includes these actions.

A Cert Admin or Org Admin defines the certification campaign requirements through a Search query or a Campaign Filter. They then generate and start the campaign.

Note

Not all access data is certifiable access. Some access is controlled automatically by your defined access model.
Certifiers review their assigned certifications, approve or revoke access, and sign off on their decisions. Refer to Working with certifications in the user help for more details.
Identity Security Cloud remediates the revoked access.
An administrator completes the campaign.

Next Generation and Legacy Certification Campaigns

Identity Security Cloud’s certification campaign feature is migrating to a new certification engine that provides an improved experience for campaign generation and performance.

SailPoint recommends using legacy campaigns for the following cases:

Manage and get reports for campaigns that began prior to the new platform migration.
Manage role composition campaigns.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.