Share all details related to your problem, including any error messages you may have received.
Can a company successfully manage and administrate Sailpoint IIQ without a developer on staff? Our company hired an integrator to help us implement IIQ, which was great. However, the company wants to use internal staff who have very little experience with the tool and no coding expertise to manage and administrate – custom reports, day to day needs, upgrades, connected apps, etc. Can I get an answer from the community what to expect and what qualified resourcing would look like for a company that is 10,000+ (contractors and full-time employees). Thank You.
Hi Sean,
Short answer would be Yes. But actually the answer is far more complex. Everything depends on your company, processes which you have implemented in your IIQ, criticality of this processes and in the end risk assessment. Let me give you few examples:
You are company with no strict regulations, IIQ supports mostly JML processes and in worst case this processes can be easly done manualy. In other words IIQ is not fornyou mission critical. You can for sure have one person responsible for IIQ with very basic knowledge and eg. Agreement with integrator that you can have call with them charged per hour if you have problem with no SLAs
You are company with strict regulations eg. You are managing nuclear powerplants, IIQ is integrated with most critical processes like HPA management, emergency access requesting etc… in other words if you have problem with IIQ you need solution within minutes, not days - in this case I would hire at least few highly skilled Sailpoint Engineers and maybe even architect, additionaly i would sign 24/7 contract with integrator so my team could call them in the middle of the night if needed.
As you see a lot depends on the profile of your company. Usually before this kind of projects it’s recommended tondo proper business impact analysis with risk assessment as not only modus operandi depends on that but also architecture of the solution.
It might be manageable without developers in IdentityNow but not in IdentityIQ.
IdentityIQ needs extensive development, I don’t think any business use case gets completed without any development. You definitely need a developer.
Below is the skillset required for a SailPoint developer.
SailPoint IdentityIQ product knowledge
SailPoint IIQ object model
Bean Shell Scripting (Same as Core Java)* - You need very basic java knowledge including OOPS, data types, if, for, while, date, exceptions, array list, hash map and file handling.
XML*
SQL (you don’t use much other than in Reports or interacting with DB directly)
PowerShell (to automate Microsoft stuff including AD/Azure AD/Exchange)
HTML for forms and email templates
Apache Velocity Script for customizing email notifications
CSS, Java script (very less used in customizing email notifications)
Considerations for choosing between internal or external implementation and/or operations teams involve various factors. The following mix-and-match options can be applied to internal teams to ensure robust support for implementation and address additional requirements effectively.
Internal Team Expertise:
Knowledge of databases
Expertise in application servers (e.g., Tomcat)
Proficiency in JVM (Java Virtual Machine) and operating systems
Sailpoint IdentityIQ Knowledge:
at least one dedicated team member with in-depth knowledge of Sailpoint IdentityIQ
Java Background Resources:
1-2 team members with a strong Java background
Willingness and capacity to undergo training for Sailpoint IdentityIQ skills
Professional Engagement with Sailpoint:
Establish and maintain a professional relationship with Sailpoint
Access to professional support in case of urgent issues or challenges
Decision Factors:
Evaluate the overall decision based on:
Complexity of the implementation
Availability of IdentityIQ
Significance of IdentityIQ in the context of LCE (Life Cycle Events)
Compliance requirements
Decide whether to go with an expert team, an internal team without expertise, or an internal team with some level of expertise based on the above considerations.