Is this statement accurate about the BeanShell rules used in the aggregation process? The application's creation rule, if specified, will run when…

The statement is accurate. The aggregation process in IdentityIQ first attempts to correlate each account from the target application with an existing identity in the system. If this correlation process fails to find a match for a specific account, and a Creation rule has been defined and associated with that application, IdentityIQ will then execute that rule. The purpose of the Creation rule is to contain the logic that determines if a new IdentityIQ identity should be created for this previously uncorrelated account.

B: This is incorrect because the described scenario is the precise trigger for a Creation rule as defined in the IdentityIQ aggregation lifecycle.

1. SailPoint IdentityIQ 8.3 Rules and Scripts, "Rule Type: Creation." The documentation states, "A Creation rule is run when an account is found on a native application that cannot be correlated to an existing Identity."

2. SailPoint IdentityIQ 8.3 Connectors Administration Guide, "Connector Features and Best Practices," Section: "Account Aggregation." This guide explains the sequence of events during aggregation, including the invocation of creation logic after a failed correlation attempt.