Hi Team, I’m working with the Certification APIs in SailPoint IdentityNow (ISC) and facing a challenge around user context and audit attribution. Current Setup: I’m using a client credentials (service account) token to call: Certification Decision API (/certifications/{id}/decisions) Cert…

There is no supported way in SailPoint IdentityNow to have certification decisions or sign‑offs attributed to a human reviewer if you call the APIs using a client credentials (service account) token. ISC always records the actor from the OAuth token, and service tokens will always show the service …

Hey @hb10 , The sign-off will always be attributed to the identity tied to the OAuth token making the API call. There’s no supported way to pass a different reviewer identity in the request.

Thanks for the clarification. I understand that using a client credentials token will always attribute the action to the service account in ISC. I wanted to ask— is there any supported way to obtain or use a user’s OAuth token in IdentityNow, so that certification decisions or sign-offs can be attr…

No — IdentityNow (ISC) does not support user‑scoped OAuth tokens or establishing end‑user context for API‑driven actions. There is no equivalent to IdentityIQ’s “run‑as user” or user context execution model. If this clarifies your doubt, you can safely mark this as the solution.

You can’t really do what you want to by using the user identity with the certification API. In ISC the sign-off is going to be attributed to the identity behind the token making the call, so if the call is made with a service account token, the audit trail is going to show the service account. You j…

IdentityNow Certification API: Decision & Sign-off executed as service account instead of reviewer (user context)

Identity Security Cloud (ISC) ISC Discussion and Questions

utkirjonkamiljanov (Utkirjon Kamiljanov) April 22, 2026, 5:31pm 4

I think it was mentioned in the replies in your previous blog. How to specify reviewer identity in Sign-Off Certification API in SailPoint ISC? - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community

Topic		Replies	Views
How to specify reviewer identity in Sign-Off Certification API in SailPoint ISC? ISC Discussion and Questions apis , identity-security-cloud , certifications	4	106	April 9, 2026
API CALL to decide on certification item ISC Discussion and Questions apis , identity-security-cloud	4	434	June 23, 2023
Identity Security Cloud - IdentityNow Certifications – Sequential Multi-Approver Scenario (Two Reviewers in Series) ISC Discussion and Questions identity-security-cloud , certifications	2	150	July 29, 2025
SailPoint ISC workflow for Admin account Review ISC Discussion and Questions workflows , identity-security-cloud	14	223	April 13, 2026
Trigger certification for entitlement owner : AD Source ISC Discussion and Questions workflows , identity-security-cloud	14	182	March 11, 2026

IdentityNow Certification API: Decision & Sign-off executed as service account instead of reviewer (user context)

Related topics