New Capability: SailPoint next generation certification

Description

:timer_clock: This post has been edited as of 5/14 for clarity and to reflect the planned state of this planned release.

We’re happy to announce an upcoming replatforming of our Certifications Engine! You may have seen (or heard your SailPoint contacts) this release referred to as “Certifications 2.0” or “Next Generation Certifications”.

This release primarily includes two components:

  • Modernized platform which will allow customers at very large enterprise scale to generate and start campaigns of very large scale. No more breaking up very large campaigns!
  • Key highly requested feature and groundwork for additional usability including:
    • Access Owner Certifications: A new option when generating a campaign that assigns the review directly to the primary owner of the access item (Role, Access Profile, Entitlement).
    • Streamlined Creation: A more centralized, guided campaign certification creation process updated for ease of use
    • Refreshed Admin UI: The cert admin and campaign filters have been updated to modern responsive and accessible standards.
    • Reviewer UI Improvements: Includes new search, filtering, and bulk decision capabilities.
    • GxP Reauthentication: Users can now be required to perform a final re-auth to sign off on a cert (Note: Configuring SSO and reauthentication is a prerequisite for this feature).
    • Additional smaller usability enhancements: Some smaller, less commonly requested concepts like expanded reviewer options on certain campaign types, the ability to start a campaign as soon as it’s generated, and many other smaller quality of life improvements

Below are some of features in more detail. Additionally, we have entered a brief window for customers who would like to get early access to this feature via a Limited Availability. More details about that can be found here.

Admin Experience Changes

The below changes are improvements for administrators workflows.

Access Owner Cert

You can now select the primary access owner (Role, Access Profile, Entitlement) as the reviewer for Certification.

Updated Admin

Our user experience has been updated to meet accessibility and usability standards. Administrators will also now have a single have the ability to easily navigate between Certification Campaigns, Campaign Filters, as well as access campaigns generated before the new engine rollout via Legacy Campaigns from the left menu navigation.

Centralized, Guided Campaign Configuration

Administrators no longer need to be aware of the multiple ways to start Certification Campaigns based on campaign type. All creation flows have been centralized into a guided, consistent user experience regardless of campaign type:

Simplified Saved & Scheduled Campaigns

With other Certification Campaign administration improvements, there is now a single UI for managing Saved/Scheduled Campaigns. This lays groundwork for future improvements to templating and scheduling campaigns in the future!

Generate & Start

Another common request to enable smaller, targeted certifications and administrative workflows is the ability to generate and start a campaign - no more manual kick off required after generation!

Reviewer Experience Changes

Below are the improvements to the reviewer UX that come with this new engine.

Improved Filtering and Sorting:

Reviewers can now filter and sort on key columns in the cert reviewer experience. This enables a more streamlined experience for our end-users. Additionally, filters will enable users to take smarter bulk actions (see below). For example, bulk revoking all access for Identities that are are in an inactive state.

Improved Search Capabilities: Improvements made to search in reviewer experience, with the ability to search names with contains searches.

Platform and Performance Updates

In addition to the new functionality above, there are now massive speed and scale improvements to Campaign Generation, Campaign Start, and Campaign Reporting.

As an added bonus, our public endpoints will not be changing in any meaningful way.

Why?

We wanted to upgrade our engine to provide improvements to scalability and performance as well as improve customer experience by enhancing filtering and sorting capabilities on columns. The new engine will also help us build out highly requested feature enhancements in Certifications.

Who is affected?

This will impact all customers, and they will be migrated over to the new certification engine. Campaigns generated before this cutover will still operate as normal and be available as normal. Campaigns in flight when cutover will have the improved UI for reviewers, but reviewers will not otherwise be impacted or aware of this change.

Important Dates

We anticipate bringing this release to General Availaiblity (GA) in the latter half of 2026. However we have a limited time opt-in available for customers to try out this release available through a Limited Availability. Details here!

19 Likes

Great news! When can we request this feature to be activated?

What is the difference between non-legacy and legacy campaigns?
What is the benefit of having two different lists of campaigns?

I find that too little is visible for an important column (“name”), in comparison with other columns. It would be nice if some logic would be implemented to make the information easier to read, without having to manually readjust column widths every time.

5 Likes

Will these functionalities be available also for the Role Composition Campaign?
Thanks

Wow, great improvements!
Love that Object owner certification will finally be supported out-of-the-box.

Looking forward to the releases.

2 Likes

This is a good functionality. Any plans to add Manager certification feature also to this?

3 Likes

No plans just yet, but we are aware of the importance of manager certs.

non-legacy campaigns are campaigns completed on the current Certification engine. And new campaigns are the one’s created in the new Certification engine.

Hi @SarahKhan ,

Would it be possible have this feature enabled in our tenant earlier? Tried to reach your inbox as well regarding the same.

Thanks,
Amar

Ok, thankyou! It would be really helpful to add Manager Certification and ability to add New Email templates to our tenants as soon as possible as this is a basic requirement in Certification campaigns.

@anon17153770, Thanks for the update. It’s a great enhancement! Are there any plans to add application/source-specific fields in the access certifications? We have received several requests to include application-specific fields on the access review screen, which would help reviewers make more informed decisions.

1 Like

Hey Amar!

We are working on a sandbox release timeline, will have an update for you soon.

Thank you!
Sarah

1 Like

Hey Amit! Not yet, but will keep you posted on any updates.

Hi Sarah, thanks your efforts :slight_smile:

1 Like

of course! looking forward to your feedback once it’s released!

2 Likes

Really keen to see this released soon in sandbox (LA) so that we can test it earlier and provide feedback !

What certification type is this going to be applied to if it isn’t the Manager certification?

We need to be able to create Access Owner certification campaigns. When will this functionality be available in Sandbox and Production?

Hey Renee! What specific feature are referring to? Is this in regards to object owner certs?

Yes, I wanted to know which certifications will have the object owner listed. Another question, will this be rolled out to all ISC users including those not on the standard, business or business plus subscriptions?

Hi @anon17153770

Just wanted to give a feedback one functionlity in certification. We are facing an issue with Reminder email similar to the one mentioned below. Please check this. This is a basic functionality which is not working as expected. So it would be great if we can get this fixed on priority.