SailPoint • IdentityIQ Associate • On-premise IdentityIQ C E R T I F I C A T I O N G U I D E SailPoint IdentityIQ Associate Certification Guide Syllabus, sample questions and a study plan for the first IdentityIQ certification Inside: all forty-one published objectives under the seven blueprint sections, with a count chart standing in for the percentages SailPoint does not publish; the learning-path prerequisite, the Proctor360 booking rules and a badge that never expires; how the Associate differs from the IdentityIQ Engineer; a five-step route to exam day; and ten DOMC-style sample questions with an answer key. UP TO 43 QUESTIONS 90 MIN SEAT TIME PASS / FAIL SCORING $300 EXAM FEE NEVER EXPIRES Prepared by CertFun • www.certfun.com www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 1 CERTIFICATION GUIDE Contents Click any line to jump straight to that section. The same seven entries appear in your PDF reader’s bookmark pane. SECTION 01 Exam Overview 2 SECTION 02 Associate, Engineer, or a Cloud Exam? 3 SECTION 03 The Seven Sections, Objective by Objective 4 SECTION 04 What the Credential Is Worth 6 SECTION 05 A Five-Step Route to Exam Day 7 SECTION 06 IdentityIQ Associate Sample Questions 8 SECTION 07 Where to Go Next 10 www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 2 SECTION 01 Exam Overview The SailPoint Certified IdentityIQ Associate is the first of the two certifications for IdentityIQ , SailPoint’s on-premise identity governance product. SailPoint’s exam page calls it the "final exam" for two courses, IdentityIQ Introduction and IdentityIQ Essentials, and the prep guide describes its candidates as people who "may be new to IdentityIQ and the identity security space": junior implementers, IdentityIQ system administrators, project managers, business analysts and first-level support. The facts below come from the official Identity University exam page, SailPoint’s IdentityIQ Associate Exam Prep Guide, its certification policy handbook and CertFun’s IdentityIQ Associate exam syllabus. Certification SailPoint Certified IdentityIQ Associate Exam code None numeric. SailPoint and CertFun both identify the exam by its name, IdentityIQ Associate Awarding body SailPoint Technologies, through Identity University Product in scope IdentityIQ - SailPoint’s on-premise product, not Identity Security Cloud Level Entry certification for IdentityIQ. The policy handbook classes it as training-based; the exam page recommends one year of hands-on experience Number of questions Up to 43. The exam ends as soon as you have answered enough questions correctly or incorrectly, so not every question is necessarily shown Seat time Up to 90 minutes, completed in one sitting Passing score Pass / Fail. SailPoint does not publish scores or passing thresholds; the score report shows the percentage you answered correctly per section Question format Discrete Option Multiple Choice (DOMC): options appear one at a time, each judged Yes or No. No going back, no flagging for review Exam fee $300 (USD) Delivery Online and proctored by Proctor360, in English only. Bought in Identity University; book at least 48 hours ahead, and you have 364 days from purchase to schedule and sit it Attempts Two: each enrolment includes one free retake, valid within the same 364 days Prerequisite The prep guide says the exam unlocks once you have completed all courses in the learning path - IdentityIQ Introduction and IdentityIQ Essentials. No prerequisite certification Objectives Forty-one published objectives under seven blueprint sections. No percentage weightings are published www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 3 Validity Unlimited - the badge never expires. Awarded through Credly within 24 to 48 hours of passing Where those numbers come from, and where the sources differ. The question count and the seat time are SailPoint’s own figures from the prep guide, and CertFun’s syllabus page carries the same 43 questions and 90 minutes. The $300 fee, the 364-day window and the two attempts are on the exam page itself; the booking rules, the English-only policy and the validity are from the policy handbook. Two small differences are worth knowing. The exam page recommends one year of hands-on experience, while the prep guide pitches the exam at people who may be new to the product; read the year as a recommendation, not a gate. And the prep guide says you get a Pass/Fail decision when you submit, while the handbook says the result is emailed within 72 business hours and shown in your Identity University enrolment. Expect the decision on screen and the official record a few days later. Three lines in that table change how you should prepare. The first is "up to 43" . The prep guide says the exam "will automatically end once you have answered enough questions correctly or incorrectly", so a strong candidate may finish well inside the 90 minutes and a weak one may be stopped early. The handbook adds that an exam may contain unscored questions and that you will not know which they are. Every item has to be treated as one that counts. The second is the prerequisite . SailPoint’s handbook lists no prerequisite certification for the Associate, but the prep guide is explicit about training: "The prerequisite to access the exam is the completion of all courses in the learning path." It also says the courses "are the study guide for this exam". So for this exam the training is the way in, not an optional extra. The third is the question format. The prep guide describes Discrete Option Multiple Choice (DOMC) in SailPoint’s own words: you read a prompt, click "Show me an option", and a single option appears; you click Yes if it is correct and No if it is not, and you cannot change that answer. More options may follow one at a time, and how many you see varies from question to question. As Caveon, the company that created DOMC, explains, you cannot solve an item by laying the options side by side and discarding the weakest: each statement is judged on its own. The CertFun sample questions in Section 06 are written in exactly this one-statement, Yes-or-No style. SECTION 02 Associate, Engineer, or a Cloud Exam? SailPoint sells four professional certifications, split by product first and by depth second. The fees are from SailPoint’s certification programme page and the validity column from the policy handbook: Certification Product Fee Validity Identity Security Administrator Identity Security Cloud $400 Two years from issue Identity Security Engineer Identity Security Cloud $400 Two years from issue IdentityIQ Associate IdentityIQ (on-premise) $300 Does not expire IdentityIQ Engineer IdentityIQ (on-premise) $400 Two years from issue www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 4 This guide is about the third row. If you work in a tenant you reach through a browser, you want an Identity Security Cloud exam instead, and CertFun’s SailPoint certification index has the syllabus for each. If you work with an IdentityIQ installation, whether you run it, support it, analyse requirements for it or manage its rollout, this is the place to start. Associate or Engineer? They are not two levels of the same test. The Associate checks that you understand what IdentityIQ does and how its parts fit together: applications and correlation, the identity cube, roles and the entitlement catalogue, certifications and policies, requests and provisioning. The Engineer, whose syllabus CertFun also publishes, assumes all of that and asks about what only an implementer touches: installation and patching, rule libraries, workflow steps, log4j and the debug pages. The handbook lists no prerequisite certification for the Engineer, so the Associate is not a required step; it is the natural one if you have not yet built anything in the product. Training-based, and permanent. The handbook files the Associate as a training-based exam, alongside SailPoint’s knowledge credentials, and gives it an "Unlimited / Doesn’t Expire" validity. The three role-based certifications run for two years from issue. The prep guide says the same in plainer words: once earned, the badge "is valid forever and never expires". That is unusual among vendor certifications and worth factoring in. You pass the Associate once, while the Engineer is a credential you renew. SECTION 03 The Seven Sections, Objective by Objective SailPoint’s exam page names seven topic areas; the prep guide expands them into a numbered blueprint of 41 objectives , and CertFun’s syllabus page reproduces it word for word. All forty-one are below in SailPoint’s own wording. There are no percentage weightings. SailPoint publishes no section percentages and no per-section question counts for this exam. The chart below shows how many of the 41 published objectives sit under each section: a proxy for emphasis, not a weighting. A section with nine objectives is not guaranteed nine questions. It is, however, the only ranking anyone can derive from what SailPoint has published, and since the score report breaks your result down by these same sections, they are the units you will be judged in. Foundational Concepts 7 of 41 Applications 9 of 41 Identity Modeling 6 of 41 Access Modeling 5 of 41 Governance 4 of 41 User-Driven Requests 4 of 41 Provisioning 6 of 41 Published objectives per section, in blueprint order. A proxy for weighting, not a weighting. www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 5 Applications is the largest block, with nine objectives, and the one most worth time: schema types and attribute properties, correlation, aggregation task options, connector-dependent settings, application and connector rules, uncorrelated accounts and Rapid Setup. It is how account data gets into IdentityIQ, and almost every later section depends on it. Three of the ten sample questions in Section 06 come straight from it. Foundational Concepts (seven) is vocabulary and architecture: terms, objects, components, and the difference between a task and a workflow. Identity Modeling (six) and Access Modeling (five) cover what an identity is made of - the IdentityCube, identity versus account attributes, populations, manager correlation, Identity Refresh - and how access is modelled on top of it, through the entitlement catalogue and business and IT roles. Governance (four) and User-Driven Requests (four) are small but precise: certification phases, policies and their detection, QuickLink Populations and the request types. Provisioning (six) closes the list: what triggers it, provisioning policies, Lifecycle Events and attribute synchronisation. Foundational Concepts (7 objectives) • Explain the purpose of identity security • Define common IdentityIQ terms • Match common objects to their usage • Describe components • Compare and contrast tasks and workflows • Know how an identity security platform is used for business modeling • Identify uses of rules in IdentityIQ processes Applications (9 objectives) • Describe the usage and attributes of group and account schema types • Explain correlation options and how they are applied • Identify and describe the purpose of an application • Identify attribute properties within a schema and their function • Identify key task options and optimization strategies for aggregation • Identify settings that are dependent on connector selection • Define the purpose of common application and connector rules • Describe the process for resolving uncorrelated accounts • Describe the purpose and benefits of Rapid Setup Identity Modeling (6 objectives) • List the types of information contained in IdentityCubes • Contrast identity attribute with account attribute • Describe creation and use of groups and populations • Understand how IdentityIQ access is granted to users • Explain manager correlation • Describe the function of common Identity Refresh options www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 6 Access Modeling (5 objectives) • Understand how entitlements are added to the entitlement catalog • Describe the purpose of the entitlement catalog • Compare and contrast business and IT roles • Describe how roles are used within IdentityIQ • Describe how identities obtain roles Governance (4 objectives) • Identify the certification phases and what occurs in each phase • Describe the purpose of certifications and the many ways they can be initiated • Identify examples of common policies • Describe processes for policy detection User-Driven Requests (4 objectives) • Understand how QuickLink Populations control request functions (i.e., who can request what for whom) • Understand different account request types and operations • Describe the access request process • Understand create, edit, and self-service identity requests Provisioning (6 objectives) • List the IdentityIQ actions that trigger provisioning • Describe the purpose of provisioning policies • Summarize process for provisioning • Explain the purpose and configuration of Lifecycle Events • Explain the purpose and process of attribute synchronization • Define provisioning Read the forty-one statements once with a pen and mark every one you could not explain to a colleague without opening the product. That marked list is your study plan. SECTION 04 What the Credential Is Worth The prep guide sets a modest, practical bar: successful candidates "should be able to contribute effectively to the product implementation and support efforts". That is the value of the Associate. It shows an employer or a partner firm that you can work on an IdentityIQ project from the first week - read an aggregation result, explain why an account is uncorrelated, follow a request through approval to provisioning - without first being taught the vocabulary. For analysts, administrators, project managers and support staff it may be the only SailPoint certification they need; for future engineers it is the foundation the Engineer exam takes for granted. On pay, here is what can be sourced and what cannot. No published salary figure exists for holders of this specific certification, from SailPoint or from any survey this guide could open, and none is invented www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 7 here. The nearest defensible proxy is the role most Associate candidates hold or are moving into. Payscale’s Identity and Access Management (IAM) Analyst page reports an average base salary of $82,927 in the United States, with base pay running from about $57,000 to $131,000 between the tenth and ninetieth percentiles, based on 184 salary profiles and last updated on 28 September 2026. Read that as the market rate for the role, not as a number the certificate confers. The stronger argument is longevity. A credential that never expires costs $300 once, with no renewal cycle, and the knowledge it certifies - how IdentityIQ models identities, accounts, roles and requests - is the base of every IdentityIQ role above it. What you are actually signing up for A proctored, English-only exam taken online through Proctor360 The IdentityIQ Introduction and Essentials courses first - they unlock the exam Seven sections, forty-one objectives, no percentage weightings published Pass / Fail, and the exam can end early once a hidden threshold is reached SECTION 05 A Five-Step Route to Exam Day 1 Confirm it is the IdentityIQ exam you want On-premise IdentityIQ, not Identity Security Cloud. Associate before Engineer. 2 Complete IdentityIQ Introduction and Essentials The prep guide makes the learning path the prerequisite and the study guide. 3 Work the forty-one objectives against the product Mark every statement you cannot explain. Start with Applications, the largest. 4 Rehearse one statement at a time About two minutes a question if all 43 appear. Judge each option alone - DOMC. 5 Book through Proctor360, at least 48 hours ahead Two attempts inside 364 days. Book the first when the marked list is empty. Step two is not optional for this exam, because the prep guide makes completing the learning path the condition for reaching the exam at all. It also recommends "re-taking courses and lessons until you have mastered the knowledge and skills taught". The candidates in the SailPoint Developer Community thread on the IdentityIQ Associate study guide, opened in January 2026, say much the same: one suggests "IIQ Essentials Course from SailPoint University", then reviewing the syllabus "and study the topics from the IIQ Guide". The same thread also warns that many links in the old version of the prep guide had been "permanently deleted". The guide has since moved to SailPoint’s new knowledge base and was last updated on 23 September 2026, so use the current prep guide rather than older copies circulating online. Step three is best done in the product , not in a notebook. Take Applications first: aggregate an application, look at the account and group schemas, change a correlation setting and see which accounts www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 8 end up uncorrelated, then resolve one. Then follow one identity end to end: its cube, its attributes, its manager, the roles it gets and why, a certification that reviews it, a request raised through a QuickLink and the provisioning that follows. Most of the blueprint’s verbs - describe, compare, explain - become easy once you have watched each thing happen once. Step four matters because of the question style, not the clock. Ninety minutes for 43 questions is about two minutes each, which is comfortable; the difficulty is that each statement must be judged true or false on its own, and many are written to be almost right. One candidate in the community thread put it simply: read the questions "2 or 3 times". CertFun’s IdentityIQ Associate practice exam offers a full 43-question, 90-minute set and a 22-question, 45-minute mini set in the same timed format. With Pass / Fail scoring and no published threshold, use practice results to find your weak sections rather than as a score to clear. SECTION 06 IdentityIQ Associate Sample Questions These ten come from CertFun’s IdentityIQ Associate sample questions page, shown here in shuffled order with each question’s options exactly as published. Every one is in DOMC style: a prompt, a single statement, and a Yes or No. Answer each before you look at the key, and notice how many statements are true except for one word - "only", "never", "already". Q1. Is this statement true about marking an account schema attribute as managed? Marking an account schema attribute as managed allows its values to be governed as entitlements, so they can be catalogued, requested and reviewed in a certification. a) Yes b) No Q2. Does the following statement describe the right way to resolve an uncorrelated account? Option Presented: “An uncorrelated account can be resolved by running the identity refresh task, which links it to the identity it belongs to.” a) Yes b) No Q3. Is this statement true for the Edit Identity QuickLink? It is where a user can look up an identity and read its attributes, accounts and entitlements without changing anything. a) No b) Yes www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 9 Q4. Is this a purpose of identity governance and administration (IGA)? Recording every file a user downloads from an application that IdentityIQ governs. a) Yes b) No Q5. Does the following statement identify a sound way to improve correlation accuracy? Option Presented: “Removing attributes from an application’s account schema improves correlation accuracy by leaving the matching process less data to consider.” a) Yes b) No Q6. Does the following statement correctly describe a work item? Option Presented: “A work item can be created to record a provisioning change that IdentityIQ has already completed on a target system.” a) Yes b) No Q7. Is this an accurate statement about IdentityIQ's access model? An IT role is built by grouping together the business roles that share a job function. a) No b) Yes Q8. Is this an accurate statement about how an identity acquires a business role? An identity acquires a business role only when IdentityIQ detects the entitlements it already holds, rather than through assignment by rule or by request. a) No b) Yes Q9. Is this an accurate statement about manager correlation in IdentityIQ? Manager correlation in IdentityIQ commonly uses manager information from an authoritative application to link an identity to the correct manager identity. a) Yes b) No www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 10 Q10. A governance administrator wants employees to raise standard access requests themselves while managers approve the sensitive ones. Does the following statement represent an appropriate IdentityIQ configuration approach? Option Presented: “QuickLink Populations control which identities a requester may act on through a request QuickLink, and being offered that QuickLink never by itself grants the access a user asks for through it.” a) No b) Yes Answer key Q1 Q2 Q3 Q4 Q5 Q6 Q7 Q8 Q9 Q10 a b a b b b a a a b Yes No No No No No No No Yes Yes Read the pattern rather than the answers. The false statements mostly fail in one of three ways. They swap two things the blueprint asks you to contrast - a business role for an IT role, viewing an identity for editing one. They name the wrong mechanism for a real task: identity refresh does not resolve an uncorrelated account, and removing schema attributes does not improve correlation. Or they add an absolute such as "only" that the product does not support. The true statements describe what IdentityIQ actually does, and they are often the more cautious-sounding ones. SECTION 07 Where to Go Next Start on the official Identity University exam page, where you buy the exam and where SailPoint states the fee, the 364-day window and the two attempts. Read the IdentityIQ Associate Exam Prep Guide end to end: it is short, it is SailPoint’s own, and it holds the blueprint, the DOMC rules and the learning-path prerequisite. Skim the policy handbook for the booking, rescheduling and retake rules before you pay, since enrolments are non-refundable. Keep CertFun’s IdentityIQ Associate syllabus page open while you study, and use the sample questions to get used to the format before you book. When a behaviour will not settle from reading, ask in the SailPoint Developer Community. Quick reference Buy the exam and read the enrolment terms - university.sailpoint.com The official prep guide and blueprint - community.sailpoint.com/knowledge All forty-one objectives on one screen - certfun.com/sailpoint Candidates and practitioners - developer.sailpoint.com/discuss www.certfun.com SailPoint IdentityIQ Associate SailPoint Certified IdentityIQ Associate 11 Before you book — the guide in one card Questions Up to 43; the exam can end early Seat time Up to 90 min, one sitting Scoring Pass / Fail, no score published Pace needed About two minutes each Exam fee $300 (USD) Unlocks after IdentityIQ Introduction + Essentials Product IdentityIQ (on-premise), not ISC Delivery Online, Proctor360, English Objectives 41 published, under 7 sections Weightings None published Question format DOMC - options shown one at a time Largest section Applications, 9 of 41 After buying 364 days to schedule and sit it Attempts Two included Validity Never expires Badge Credly, 24-48 hours after passing Good luck. As you revise, ask one question of every statement you meet: is this what IdentityIQ actually does, or what it sounds as if it ought to do? The IdentityIQ Associate exam is built from statements that sit on exactly that line.