AI Usage Policy

tyler_mairose
January 14

Purpose

The SailPoint Community welcomes the responsible use of AI tools as part of the learning and problem-solving process. This policy establishes clear guidelines to ensure AI-generated content maintains the quality, accuracy, and educational value our community is known for.

Scope

This policy applies to all members of the SailPoint Community, including:

Table of Contents

Core Principles
Required Practices
Prohibited Practices
Quality Standards
Using AI Effectively
Enforcement
Questions and Updates


Core Principles

AI as a Tool, Not a Replacement

Artificial Intelligence tools (including but not limited to ChatGPT, Claude, Copilot, Gemini, and other generative AI platforms) may be used to:

AI tools should enhance your contribution, not replace your critical thinking, validation, and personal expertise.


Required Practices

1. Disclosure Requirement

All AI-assisted content MUST be clearly disclosed.

When posting content that was generated or significantly assisted by AI tools, you must:

Include a disclosure statement such as:

Place the disclosure at the beginning or end of your post in a clear, visible manner.

Do not:

2. Validation Requirement

You must validate AI-generated information before posting.

Every AI-assisted contribution must be verified and tested:

Verify against at least one of the following:

Test before providing code solutions:

Do not:

3. Value-Add Requirement

Your contribution must add value beyond the raw AI output.

Acceptable AI-assisted posts include:

Unacceptable posts:

4. Source Citation Requirement

AI-generated content must cite sources when making specific claims.

When AI provides information, you must:

Do not:


Prohibited Practices

The following uses of AI are strictly prohibited and will result in enforcement action.

Plagiarism

Low-Effort Content Farming

Misinformation

Manipulation

Harmful Content


AI Quality Standards

Good Examples of AI-Assisted Contributions

Example 1: Code Solution with Context

*AI-assisted response - validated in my ISC sandbox*

Based on the requirement to transform account data, here's an approach 
using a transform. I used AI to help structure the JSON, then tested 
it in my environment:


Note: This worked in my tenant but you may need to adjust the 
attribute mappings based on your source schema. The key is ensuring 
the input attribute exists before the transform runs.

Reference: ISC Transform Documentation - [link]

Example 2: Research Assistance

I asked Claude to help me research OAuth 2.0 flows for this scenario. 
After reviewing the SailPoint documentation on custom authorizers 
(https://...), I can confirm the authorization_code flow is the 
recommended approach here.

The specific configuration would be: [explanation]

I tested this with Postman and it successfully retrieved tokens.

Bad Examples That Violate This Policy

Example 1: Raw Copy-Paste

[Generic AI response about identity governance with no SailPoint 
context, no testing, no sources, no disclosure]

Example 2: Unverified Information

You can use the batchCreateAccounts API endpoint with the parameter 
force_sync=true to bulk create users.

[This endpoint doesn't exist - AI hallucination, not verified]

Example 3: Point Farming

[User posts 15 AI-generated responses in one hour, none tested, 
all generic, just to accumulate points]

Using AI Effectively

Best practices when using external AI tools:

  1. Be specific in your prompts
  1. Request sources
  1. Iterate and refine
  1. Check for hallucinations

Enforcement

Progressive Enforcement Approach

We believe in education first, but repeat violations will result in escalating consequences.

First Violation - Reminder

Second Violation - Warning

Third Violation - Ban

Aggravating Factors

Certain behaviors will result in immediate escalation:

Appeals Process

If you believe enforcement action was taken in error:

  1. Send an email within 14 days
  2. Provide evidence of your case
  3. Appeals reviewed within 5 business days
  4. Decision is final after appeal review

Questions & Updates

Questions about this policy:

Policy updates: This policy will be reviewed annually and updated as needed.


Thank you for helping maintain the quality and integrity of the SailPoint Community!