IAM Ideas
Ideas for apps, utilities, reports, and integrations targeting SailPoint IdentityIQ.
19 artifacts
Iiq Zombie Task Guard
Finds IdentityIQ TaskResults stuck in "running" long enough to silently cancel the next scheduled aggregation, cert generation, or maintenance run, for the engineer who finds out a connector went…
Iiq Connector Config Change Ledger
A biweekly report that reconciles who changed an Application connector's configuration against whether a change ticket backs it up — and flags the ones that touched auth, correlation, or provisioning…
Iiq Workflow Case Xray
A browser-runnable case timeline for stalled SailPoint IdentityIQ workflows, so you can see which step a case is actually stuck on before you open the Debug pages or the console.
Iiq Cyberark Safe Access Bridge
A nightly job that resolves CyberArk's nested Safe group membership into flat, per-person target permissions in IdentityIQ, so PAM certifiers review the people behind a Safe instead of a group name.
Iiq Mover Entitlement Residue Auditor
Finds access an employee's old department left behind after a manager or department change — because IIQ's built-in Manager Transfer event prints two names to a log and stops there.
Iiq App Cert Coverage Ledger
A monthly cross-reference report that flags every IIQ application that missed its annual access-review window — giving GRC teams a ranked gap list before the auditor does.
Iiq Sod Exception Tracker
A browser-runnable dashboard that turns IIQ's flat policy-violation list into a full exception register — surfacing open violations, allowed exceptions with expiry countdowns, and delegated decisions…
Iiq Cert Grc Evidence Bridge
Automatically packages completed SailPoint IIQ certification campaigns as evidence records in ServiceNow GRC — closing the manual loop between quarterly access reviews and compliance documentation.
Iiq Role Profile Integrity Checker
Detects stale entitlement references in IIQ role profiles — before they cause provisioning failures, silent certification errors, or degraded role scoring — for IAM engineers managing 500+ connectors.
Iiq Workflow Health Report
A weekly snapshot of BPM WorkflowCase age and failure distribution, giving IAM operators a ranked remediation queue before stuck cases cascade into provisioning outages or SLA breaches.
Iiq Joiner Day1 Readiness Tracker
A single-page operator dashboard that surfaces provisioning completeness for every new hire starting in the next 7 days, so the IAM team knows who is not ready before the employee walks in the door.
Iiq Leaver Sla Pagerduty
Fires a PagerDuty incident when a terminated identity's accounts are still active past a configurable SLA window — wiring IIQ's Lifecycle Manager into IAM on-call so that every missed Leaver deadline…
Iiq Request Catalog Linter
A read-only linter that scores your IdentityIQ access-request catalog for the hygiene defects that confuse requesters and stall approvals — for the IAM engineer who owns the LCM request portal.
Iiq Privileged Entitlement Spread Report
Detect (primary, NIST CSF) + Protect (secondary, NIST CSF)
Iiq Cmdb Access Bridge
Identify (primary, NIST CSF) + Observability (secondary)
Iiq Provisioning Recovery Console
An operator console that turns SailPoint IdentityIQ's scattered failed‑provisioning state into a single triage surface — classified, age‑ranked, recoverable, and audit‑logged.
Cert Decision Velocity Report
Protect (primary, NIST CSF) + UX (secondary)
Iiq Aggregation Freshness Radar
IIQ's native Task Results UI is fine when you have a dozen connectors. With 500+ apps and tens of thousands of identities it becomes a needle-in-a-haystack search.
Iiq Orphan Account Sweeper
Automation (primary) + Respond (secondary, NIST CSF)