SailPoint Certification

Quick answer

SailPoint certification is SailPoint's official program of seven exams that prove your skills in its identity governance products, split into three role-based certifications (Identity Security Administrator, Identity Security Engineer and IdentityIQ Engineer) and four training-based credentials (Leader, Professional, Expert and IdentityIQ Associate). The role-based exams are online, proctored, pass/fail tests of up to 66 to 74 questions in 90 to 120 minutes, and they stay valid for two years. The training-based credentials never expire and their exams are free when you complete the matching SailPoint training path (SailPoint program page, September 2026).

Key takeaways

1. SailPoint certification at a glance

Short answer: SailPoint's program page lists seven credentials in two groups: three role-based certifications that test real job skills and expire after two years, and four training-based credentials that you earn after SailPoint training and that do not expire.

Before we start, one quick clarification. In SailPoint products, "certification" also means an access certification: a review campaign where managers or application owners approve or revoke the access people hold. That is a product feature. This article is about professional certification, the exams that prove your own skills.

SailPoint runs the program through Identity University, its training portal. The list below comes from the SailPoint Professional Certification and Credentialing Program page, last updated on 23 September 2026.

A quick word on product names, because exams and job posts use them differently. IdentityIQ is SailPoint's self-managed product that a company runs on its own servers or hosting; SailPoint announced IdentityIQ 9.0 on 6 October 2026. Identity Security Cloud (ISC, formerly IdentityNow, now sold as SailPoint Human Fabric within SailPoint Identity Security) is the SaaS product. SailPoint calls Human Fabric the evolution of Identity Security Cloud, but the exam names and most Indian job posts still say "Identity Security Cloud" or "ISC", so we use ISC from here.

How big is the program? When SailPoint launched its Recertification Program on 17 February 2026, its press release said there were over 12,000 SailPoint certified professionals, and that the new Administrator exam was the seventh exam in the program (SailPoint, February 2026).

2. Role-based certifications vs training-based credentials

Short answer: Role-based certifications are harder, proctored, experience-level exams that expire after two years; training-based credentials follow SailPoint courses, launch directly in Identity University and never expire.

The two groups work very differently. This table sums up the rules from the official program page (SailPoint, September 2026).

A few terms you will see in every exam guide:

Simple rule of thumb: training-based credentials show you finished SailPoint training and understood it; role-based certifications show you can do the job.

3. The three role-based certifications in detail

Short answer: IdentityIQ Engineer has up to 66 questions in 90 minutes; Identity Security Engineer has up to 73 questions in 120 minutes; Identity Security Administrator has up to 74 questions in 120 minutes. All three are online, proctored, pass/fail and valid for two years.

Each exam has an official prep guide on SailPoint Compass, the community site. The details below come from those guides as updated in October 2026. SailPoint does not publish weights for the domains, so give every domain real study time.

SailPoint Certified IdentityIQ Engineer

This is the main certification for IdentityIQ developers, and the one Indian job descriptions name most. According to the IdentityIQ Engineer exam prep guide (SailPoint, updated 21 October 2026):

The seven domains are:

Some jargon, explained. IGA (identity governance and administration) means controlling who has access to what, and proving it to auditors. BeanShell is a Java-based scripting language used to write rules (small pieces of custom logic) in IdentityIQ. Lifecycle Manager is the IdentityIQ module for access requests, approvals and provisioning, which means creating, changing or removing accounts and access on target systems. Application onboarding means connecting a new system to IdentityIQ through a connector so its accounts can be read and managed.

SailPoint Certified Identity Security Engineer

This is the engineering certification for Identity Security Cloud. According to the Identity Security Engineer exam prep guide (SailPoint, updated 21 October 2026):

Its ten domains are Identity and Lifecycle Management; Provisioning; Access Management; Virtual Appliances; Sources; General knowledge; Platforms; Supporting Governance; Architecture; and Rules and Transforms.

In ISC, a source is any system that holds identity or account data, such as an HR app or Active Directory. A virtual appliance (VA) is a small machine you run inside your network so the cloud tenant can reach on-premises sources without opening your firewall. A transform is a JSON configuration that changes an attribute value (for example, making an email address lowercase) during aggregation or provisioning, without writing code.

SailPoint Certified Identity Security Administrator

This is the newest exam, launched in February 2026, for people who run and support ISC day to day. According to the Identity Security Administrator exam prep guide (SailPoint, updated 21 October 2026):

Its eight domains are Platform; Virtual Appliances; Identity and Lifecycle Management; Provisioning; Access Management; Supporting Governance; Sources; and General knowledge. Notice that it shares most domains with the Engineer exam but drops Architecture, Platforms, and Rules and Transforms. That makes it the natural first ISC exam for admins and support engineers.

Side-by-side comparison

4. The four training-based credentials

Short answer: The training-based credentials are the IdentityIQ Associate, Identity Security Leader, Identity Security Professional and Identity Security Expert; they never expire and their exams are free with the matching SailPoint training path.

SailPoint Certified IdentityIQ Associate

This is the best-documented beginner credential and the natural first step for IdentityIQ learners. According to the IdentityIQ Associate exam prep guide (SailPoint, updated 23 September 2026):

Its seven domains are Foundational Concepts; Applications; Identity Modeling; Access Modeling; Governance; User-Driven Requests; and Provisioning. These map closely to what a beginner learns first: how applications connect, how identities are built from HR data, how roles and entitlements are modelled, and how access is requested and provisioned.

Identity Security Leader, Professional and Expert

SailPoint has prep guides for these three credentials on Compass, but the question counts were not something we could verify, so we do not quote them. What the program page does confirm (SailPoint, September 2026) is:

Before you enroll, open the prep guide for each credential on Compass to see the exact training path it is tied to.

5. How to register for a SailPoint exam, step by step

Short answer: You create an Identity University account, buy the exam enrollment, and then either launch it directly (training-based) or book a Proctor360 slot at least 48 hours later (role-based).

Here is the full flow, based on the official program page rules (SailPoint, September 2026):

Need to change your slot? Rescheduling is free up to 48 hours before the exam. Inside 48 hours, Proctor360 charges a rescheduling fee of $20 (SailPoint program page, September 2026). For the full fee breakdown and how to estimate the rupee amount on payment day, read our guide to SailPoint certification cost.

6. Which SailPoint certification should you choose?

Short answer: Match the exam to the product you work on and your experience: freshers start with a training-based credential, IdentityIQ developers aim for IdentityIQ Engineer, and ISC admins or engineers take the matching ISC exam.

Use this table as a decision guide.

A few practical notes for Indian learners:

If you want the bigger picture of where certification fits among Java, SQL, Active Directory and project skills, see our SailPoint roadmap.

7. A 6 to 8 week study plan

Short answer: Spend the first two weeks on IAM basics and the product model, four weeks on hands-on labs mapped to the exam domains, and the last one or two weeks on revision and timed practice.

This plan assumes about 1.5 to 2 hours on weekdays and 4 hours at weekends, and that you have access to SailPoint training and a practice environment through your employer, a SailPoint partner or a training program. Use legal environments only.

Some terms from the plan. An entitlement is a single permission, such as membership of an AD group. A role bundles entitlements into something a business user understands, such as "Accounts Payable Clerk". SoD (separation of duties) means no single person should hold two conflicting permissions, such as creating and approving the same payment. Joiner-mover-leaver (JML) is the cycle of giving access when someone joins, changing it when they move, and removing it when they leave. Aggregation reads accounts from a system, and correlation links each account to the right identity.

If you are completely new and need a gentler start, follow the labs in our SailPoint tutorial before week 1.

A word on exam dumps. You will see "dumps" and "500 real questions" sold online. Avoid them. SailPoint's DOMC format and unscored questions make memorised answers unreliable, and using leaked questions can break the exam rules you accept at enrollment. More importantly, interviewers will test the same skills in person.

8. Recommended official training

Short answer: Each exam names its own training path on Identity University: the Identity Security Engineer (IdentityIQ) learning path for IdentityIQ exams, and the Identity Security Engineer or Identity Security Administrator training paths for the ISC exams.

From the official prep guides (SailPoint, September and October 2026):

Individual course prices change and are shown on Identity University, so check them there. Two free resources help alongside paid training:

9. Is SailPoint certification worth it?

Short answer: Yes, if you already have, or are building, hands-on SailPoint project skills; it strengthens your profile and validates your knowledge. No, if you hope it will replace experience, because Indian job descriptions treat it as "good to have", not as a requirement.

Here is what the job market actually showed when we checked on 24 October 2026.

What job descriptions say about certification. EY's "TC-CS-IAM-SailPoint IIQ-Senior" listing in Hyderabad on LinkedIn lists "SailPoint Certified IdentityIQ Engineer" as desirable, while its essential requirements are 3 or more years of IdentityIQ development, Java, BeanShell and REST APIs (EY, October 2026). A PwC "Sailpoint Developer" listing on Naukri asks for 4 to 8 years and says SailPoint certifications are "good to have" (PwC, October 2026). It still names older titles such as IdentityNow Engineer, which shows how slowly job posts catch up with the program. In the 11 job descriptions we read, certification was never mandatory.

What experience they want. Almost every SailPoint listing we read asked for 3 years or more. We found no SailPoint developer listing that genuinely accepted 0 years' experience; junior entry points were IAM operations, access management and support roles. A certification helps you stand out for those roles, but your project skills get you through the interview.

Demand signal. On 24 October 2026, Naukri showed about 5,550 results for "sailpoint" across India. That is a keyword-match count with duplicates and loosely related roles, not a count of open SailPoint jobs, but it shows a steady market.

Pay context. AmbitionBox showed a typical range of ₹7.6 to 8.4 lakh a year for SailPoint developers in India with 1 to 6 years' experience (562 salaries, updated 18 October 2026). Its 1 to 3 year band was about ₹5 to 5.6 lakh and its 3 to 6 year band about ₹8.4 to 9.2 lakh. These figures do not separate certified from non-certified people, so read them as market context, not as a "certification bonus".

When it is worth it

When to wait

For more on where certification leads, from IAM analyst to architect, read our guide to a SailPoint career.

10. Exam-day tips

Short answer: Test your setup early, join on time, read every DOMC option carefully because you cannot go back, and manage your time across all questions.

11. Validity, renewal and recertification

Short answer: Role-based certifications last two years and are renewed by retaking the exam, with the new expiry counted from the exam date; training-based credentials never expire.

The program page (SailPoint, September 2026) sets the rules:

On 17 February 2026, SailPoint announced a Recertification Program that extends certifications by two more years for holders of the Identity Security Engineer, IdentityIQ Engineer or Identity Security Administrator certifications. At the same time, SailPoint moved to Credly badges (SailPoint press release, February 2026). In practice, set a reminder about three months before your expiry date, check the current recertification option on Identity University, and update your badge on LinkedIn once you renew.

Why renewal matters: SailPoint's products move fast. In 2026 alone, SailPoint renamed its SaaS offering as Human Fabric and announced IdentityIQ 9.0. Renewing every two years keeps your knowledge in line with what clients run.

12. How Brolly Academy helps

Short answer: Brolly Academy's 2-month SailPoint program builds the IdentityIQ hands-on skills the Associate and IdentityIQ Engineer exams assume, with projects, mock interviews and placement assistance.

The SailPoint Certification Training in Hyderabad course is IdentityIQ-focused, with an introduction to IdentityNow. Its 10 modules cover IdentityIQ architecture, installation and deployment; the Identity Cube; delimited and JDBC connector onboarding; account correlation; Active Directory provisioning and deprovisioning; policies and violations; certifications; roles and rules; workflows; and debugging. Those topics line up with exam domains such as Application Onboarding, Identity Governance, Lifecycle Manager, Development, and Debugging and Troubleshooting.

What you get, as listed on the course page (Brolly Academy, October 2026):

Two honest notes. First, SailPoint's certification exams are issued and examined by SailPoint, not by Brolly Academy, and exam fees are separate and paid to SailPoint. Second, placement assistance is support with your job search, not a job guarantee. You can book a free demo class before you enroll. To practise for interviews, use our SailPoint interview questions page.

Frequently asked questions