Certification for Entra ID "Enterprise Applications" in SailPoint ISC

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi Experts,

I’m working on integrating Entra ID, and I’m exploring how certifications can be performed on Enterprise Applications within Entra ID. Specifically, I’d like to understand how these objects are read into SailPoint and whether they are classified as entitlements.

Currently, we have Enterprise Apps in Entra to which both direct cloud users and on-premises AD groups (synced with Azure) are assigned.

To certify the Enterprise App:

  1. I can initiate a certification for the on-prem AD group, which is synced with Azure and is a member of the Enterprise App.
  2. However, for cloud users who are directly assigned, how can their access be recertified? Is this supported by the Entra ID connector or does it require CIEM as well? Additionally, how are Enterprise Apps read into IdentityNow (ISC), and what entitlement type are they categorized under?
2

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.