Can this action be performed as part of configuring an application definition in IdentitylQ? Solution: Specify which users should be provisioned with…

The application definition in IdentityIQ is responsible for configuring the technical details of how IdentityIQ connects to and interacts with a target system. This includes connection parameters, schema mapping, and provisioning policies that define how an account is created (e.g., attribute mappings). However, the business logic that determines which specific users should receive an account during a joiner event is configured through Lifecycle Events and the role model (i.e., birthright roles), not within the application definition itself.

A. Yes: This is incorrect. The application definition defines the mechanics of provisioning for a specific application, but the decision-making logic for who gets provisioned is managed by business processes like Lifecycle Events and role assignment rules.

1. SailPoint IdentityIQ 8.1 Administration Guide, "Chapter 4: Application Configuration," Page 65: This chapter details the components of an application definition. It describes tabs for Configuration, Schema, Correlation, and Policies. The Provisioning Policy section details how to map IdentityIQ attributes to application attributes, but it does not include functionality for defining user populations who should receive an account.

2. SailPoint IdentityIQ 8.1 Administration Guide, "Chapter 11: Lifecycle Manager," Page 317: This chapter explains how to configure business processes for identity lifecycle events like "Joiner." It states, "Lifecycle Manager events can trigger workflows that perform a variety of actions, such as assigning roles or resources to new users..." This confirms that the triggering and logic for provisioning are part of the Lifecycle Event configuration, not the application definition.

3. SailPoint IdentityIQ 8.1 Role Management Guide, "Role-Based Provisioning," Page 11: This document describes how roles are used to grant access. It explains, "Birthright provisioning is the process of granting users access based on their initial role assignments when they are first created in IdentityIQ." The assignment of these roles is based on rules or population filters, which are separate from the application object.