Hi,
Is there any other ways to cleanup a certifications other than manual deletion in Sailpoint IdentityIQ ?
@Manikandaprabhu_TechM Are you asking for one time deletion or systematic way to delete periodically?
if it is for systematic way then you can configure archival and deletion in global settings and enable “Archive and prune certifications” in perform maintenance task to take care for deletion automatically based on days set.
Hi @SivaprakashRNTBCI ,
we need to delete as part of one time cleaning activity.
@Manikandaprabhu_TechM You can do it via IIQ Console. You need to get the CertificationGroup ids or name, and execute command: delete CertificationGroup id, it’ll take care of deleting underlying certification objects as well.
@Manikandaprabhu_TechM then I would prefer doing it through iiq console which is the clean way since it will remove all references properly. But make sure you have enough memory for iiq console, otherwise you may encounter memory related errors.
command:
delete CertificationGroup CertificationID
if you have lot of certifications to delete, then prepare a txt file with delete command and then call the file using source command.
ex content inside file:
delete CertificationGroup ID1
delete CertificationGroup ID2
delete CertificationGroup ID3
Source command ex:
source c:\data\yourfile.txt
how we can export the IDs ? @neel193 @SivaprakashRNTBCI
@Manikandaprabhu_TechM Get it from DB.
select id, name from spt_certification_group where name in (‘certification_name1’,‘certification_name2’, etc…);
Hi @Manikandaprabhu_TechM, for your one time certification cleanup, the best and safest approach (as per SailPoint guidance) is to use the IIQ console command:
cancelCertify "Certification Name"
or for bulk cleanup (commonly in lower environments):
cancelCertify *
Why this is the recommended approach:
- Removes only Certification objects
- Does not impact other related objects
- Prevents orphaned references
Important:
Using delete CertificationGroup works, but it directly deletes objects and may require extra caution around dependencies.
cancelCertify is designed specifically for this use case and is therefore cleaner and safer.
Reference (Official SailPoint guidance):
So for your requirement, you can use cancelCertify based on certification name.
Hope this helps.
@santhirajumunganda But as per latest documentation, it has been mentioned that CancelCertify command is not recommended.
Good point you’re right.
Looks like SailPoint has updated their guidance, and cancelCertify is now not recommended, with delete being the preferred approach for removing certification objects.
Thanks for pointing that out!
@Manikandaprabhu_TechM How many certificationgroups you have in your environment? If it is handful, you can manually open them in Debug → CertificationGroup. as object type → open them one by one and copy the id.
If they are more, you can get it from DB directly using the query shared by @SivaprakashRNTBCI