IAM Ideas
Ideas for apps, utilities, reports, and integrations targeting SailPoint IdentityIQ.
18 artifacts
Iiq Connector Config Change Ledger
A biweekly report that reconciles who changed an Application connector's configuration against whether a change ticket backs it up — and flags the ones that touched auth, correlation, or provisioning…
Iiq Workflow Case Xray
A browser-runnable case timeline for stalled SailPoint IdentityIQ workflows, so you can see which step a case is actually stuck on before you open the Debug pages or the console.
Iiq Cyberark Safe Access Bridge
A nightly job that resolves CyberArk's nested Safe group membership into flat, per-person target permissions in IdentityIQ, so PAM certifiers review the people behind a Safe instead of a group name.
Iiq Mover Entitlement Residue Auditor
Finds access an employee's old department left behind after a manager or department change — because IIQ's built-in Manager Transfer event prints two names to a log and stops there.
Iiq App Cert Coverage Ledger
A monthly cross-reference report that flags every IIQ application that missed its annual access-review window — giving GRC teams a ranked gap list before the auditor does.
Iiq Sod Exception Tracker
A browser-runnable dashboard that turns IIQ's flat policy-violation list into a full exception register — surfacing open violations, allowed exceptions with expiry countdowns, and delegated decisions…
Iiq Cert Grc Evidence Bridge
Automatically packages completed SailPoint IIQ certification campaigns as evidence records in ServiceNow GRC — closing the manual loop between quarterly access reviews and compliance documentation.
Iiq Role Profile Integrity Checker
Detects stale entitlement references in IIQ role profiles — before they cause provisioning failures, silent certification errors, or degraded role scoring — for IAM engineers managing 500+ connectors.
Iiq Workflow Health Report
A weekly snapshot of BPM WorkflowCase age and failure distribution, giving IAM operators a ranked remediation queue before stuck cases cascade into provisioning outages or SLA breaches.
Iiq Joiner Day1 Readiness Tracker
A single-page operator dashboard that surfaces provisioning completeness for every new hire starting in the next 7 days, so the IAM team knows who is not ready before the employee walks in the door.
Iiq Leaver Sla Pagerduty
Fires a PagerDuty incident when a terminated identity's accounts are still active past a configurable SLA window — wiring IIQ's Lifecycle Manager into IAM on-call so that every missed Leaver deadline…
Iiq Request Catalog Linter
A read-only linter that scores your IdentityIQ access-request catalog for the hygiene defects that confuse requesters and stall approvals — for the IAM engineer who owns the LCM request portal.
Iiq Privileged Entitlement Spread Report
Detect (primary, NIST CSF) + Protect (secondary, NIST CSF)
Iiq Cmdb Access Bridge
Identify (primary, NIST CSF) + Observability (secondary)
Iiq Provisioning Recovery Console
An operator console that turns SailPoint IdentityIQ's scattered failed‑provisioning state into a single triage surface — classified, age‑ranked, recoverable, and audit‑logged.
Cert Decision Velocity Report
Protect (primary, NIST CSF) + UX (secondary)
Iiq Aggregation Freshness Radar
IIQ's native Task Results UI is fine when you have a dozen connectors. With 500+ apps and tens of thousands of identities it becomes a needle-in-a-haystack search.
Iiq Orphan Account Sweeper
Automation (primary) + Respond (secondary, NIST CSF)