Guides & contents

ProSyllabus Journal

SailPoint IdentityIQ Engineer Exam Guide 2026: All 50 Objectives

The SailPoint Certified IdentityIQ Engineer exam: up to 66 DOMC questions in 90 minutes, $400, seven domains and 50 objectives, with a checklist, a study plan and how it differs from the cloud exams.

SailPoint IdentityIQ Engineer Exam Guide 2026: All 50 ObjectivesOpen the full article →

Checked 23 October 2026. From the IdentityIQ Engineer prep guide (last updated 21 October 2026) and the handbook, read 23 October 2026; price from the Identity University exam page, read 18 October 2026. SailPoint revises blueprints; check the prep guide before you book.

The SailPoint Certified IdentityIQ Engineer exam is up to 66 Discrete Option Multiple Choice questions in up to 90 minutes, online and proctored, for $400 on Identity University, with one free retake. Its blueprint has seven domains and 50 objectives, from installation and Lifecycle Manager to BeanShell rules, workflows and debugging. SailPoint recommends about 1–3 years of implementation experience and the Identity Security Engineer (IdentityIQ) path in Identity University. The certification is valid for 2 years. ProSyllabus is an independent study site, not affiliated with SailPoint. Every rule here is quoted or summarised from SailPoint’s own pages, read on 23 October 2026 (the price on 18 October 2026).

66
questions at most, DOMC format
90 min
seat time at most, one sitting
$400
on Identity University (about ₹34,400 or £300, our conversion)
50
objectives across 7 domains

Prep guide (read 23 October 2026) and Identity University (read 18 October 2026). Conversions at ₹86 and £0.75 to the US dollar.

The exam at a glance

ItemDetail
NameSailPoint Certified IdentityIQ Engineer (role-based certification)
QuestionsUp to 66, Discrete Option Multiple Choice
TimeUp to 90 minutes, in one sitting
Attempts2: one free retake per enrollment, within 364 days of buying
DeliveryOnline, proctored through Proctor360
ResultPass or Fail, plus a percentage per section; no published passing score
Price$400 on Identity University
PrerequisiteNone enforced; SailPoint recommends 1–3 years of implementation experience and the Identity Security Engineer (IdentityIQ) path
Validity2 years, then recertify

SailPoint describes the candidate as someone who will “install, deploy and configure IdentityIQ in their customers’ non-production environments and local sandboxes”, with “moderate knowledge in XML, Java/BeanShell development” and of supported infrastructure. It names implementation engineers and IAM developers at partners and at SailPoint, and customer staff who build their own implementation.

IdentityIQ or Identity Security Cloud: which exam is yours

IdentityIQ EngineerIdentity Security Engineer
ProductIdentityIQ, installed and run by you or your clientIdentity Security Cloud, SailPoint’s cloud product
Questions and timeUp to 66 in up to 90 minutesUp to 73 in up to 120 minutes
Objectives50 in 7 domains70 in 10 domains
CustomisationBeanShell rules, XML objects, workflows, the console and debug pagesRules and transforms, workflows, REST APIs, virtual appliances
Price and validity$400, 2 years$400, 2 years

Pick the product you work on: the blueprints share ideas such as certifications, roles and provisioning, but the objectives are product-specific. The cloud exam is covered in our Identity Security Engineer exam guide. The cheaper IdentityIQ Associate (up to 43 DOMC questions, $300) requires the IdentityIQ Introduction and Essentials courses first and, by the handbook, does not expire.

The seven domains

DomainObjectivesWhat it covers (our short wording)
IdentityIQ Installation, build, and deployment7Infrastructure components of a deployment; Installation steps and procedures; Creating extended attributes; Ongoing build and deployment; Installing patches and upgrades; Configuring end-user access; Email server settings
IdentityIQ Lifecycle Manager7Configuring Lifecycle Manager; Identity provisioning policies; LCM workflows; Lifecycle events and their workflows; QuickLinks and QuickLink populations; Batch Requests; Rapid setup in lifecycle events and identity operations
IdentityIQ Identity Governance7Configuring and scheduling certification campaigns; Common certification rules; Configuring and using policies; Responses to policy violations; Reporting; Advanced Analytics; Auditing
IdentityIQ Development10Rule libraries; Rule input and output arguments; Workflow variables, transitions and step conditions; Workflow steps that generate work items; Workflow step usages; Sub-workflows; Common SailPoint API objects and methods; Email templates; Branding the UI; Localization of the UI
IdentityIQ Application Onboarding6Application definitions; Common connector settings; Rapid setup aggregation settings; Scheduling tasks for data loading and processing; Common application rule types; Common connector rule types
IdentityIQ Debugging and Troubleshooting6log4j; Syslog; The IdentityIQ console; The debug pages; Email redirection; The Administrator Console
IdentityIQ Data and Access Modeling7Default role models and types; Roles and role options; Identity attribute mappings; Objects that can have extended attributes; Common data objects and what they represent; Relationships between data objects; Group types

From the prep guide’s blueprint. SailPoint publishes no weights per domain; the counts are objectives, not marks.

Where to spend your time

Development (10 objectives) is the largest domain and the one most tied to code: rule libraries, rule arguments, workflow variables, transitions and step conditions, steps that create work items, sub-workflows, the common API objects and methods, email templates, branding and localization. If you have configured IdentityIQ only through the UI, this is where to spend time in a sandbox.

Debugging and Troubleshooting is six tools: log4j, Syslog, the IdentityIQ console, the debug pages, email redirection and the Administrator Console. Know what each is for and when you would reach for it; in our reading of the blueprint, a question may describe a symptom and ask which tool shows the cause.

Data and Access Modeling asks about the default role types, role options, identity attribute mappings, which objects take extended attributes, the common data objects and how they relate, and group types. Installation, build and deployment covers infrastructure components, installing, extended attributes, build and deployment, patches and upgrades, end-user access and email settings.

Lifecycle Manager covers configuration, provisioning policies, LCM workflows, lifecycle events, QuickLinks and their populations, batch requests and rapid setup. Identity Governance covers certification campaigns and their rules, policies and violation responses, reporting, Advanced Analytics and auditing. Application Onboarding covers application definitions, connector settings, rapid-setup aggregation, scheduling tasks, and the application and connector rule types.

Checklist: all 50 objectives

IdentityIQ Engineer: 50 objectives works on the full page only.Open it →

A five-week plan

WeekFocusCheck
1Installation, build and deployment; Data and Access Modeling (14 objectives)Install IdentityIQ in a sandbox, add an extended attribute, explain the main data objects and how they relate
2Application Onboarding (6)Define an application, aggregate it, schedule the tasks that load and refresh data, name the rule types you used
3Development (10)Write a rule from a rule library, build a workflow with a work-item step and a sub-workflow, edit an email template
4Lifecycle Manager; Identity Governance (14)Set up a QuickLink and a lifecycle event, schedule a certification, configure a policy and its violation response
5Debugging and Troubleshooting (6), then timed DOMC practiceTrace a failing aggregation through log4j and the debug pages; sit a timed DOMC set

Our suggested order. It assumes hands-on access to a sandbox; SailPoint calls professional experience “crucial” for this exam. Our IdentityIQ Engineer study guide suggests SailPoint documentation pages to start from for each of the 50 objectives, flags the gaps in the online help, and gives a sandbox lab per section.

Practise in the DOMC format

The format is the same on every SailPoint certification: options come one at a time, each judged Yes or No, with no back, no review and no flagging. Read our DOMC format guide and try SailPoint’s two Caveon samples. Our IdentityIQ Engineer practice questions page has three free questions with the reasoning.

For full-length practice, our IdentityIQ Engineer practice exam has two 66-question DOMC mocks on a 90-minute clock, Beanshell and workflow XML to read, a score for each of the seven sections and an explanation with the SailPoint documentation page for every answer. Our mocks give each section a share in line with its objective count, because SailPoint publishes no weights; that split is ours. Its questions are original, not SailPoint’s.

After the exam

The prep guide says you receive a Pass/Fail decision when you submit the exam, and that a pass earns a digital badge from Credly, by email within 24–48 hours (it asks you not to block admin@credly.com); you can share the badge on LinkedIn. The handbook adds that the result is emailed 72 business hours after the exam and shown in your Identity University enrollment. The score report gives the percentage you answered correctly in each section, and SailPoint tells retakers to use it to choose what to study. If you fail, the enrollment includes one free retake within 364 days of purchase; after two attempts you buy the exam again. The certification lasts 2 years; renew by passing again or through the Recertification Program.

Frequently asked questions

How many questions are on the IdentityIQ Engineer exam?

Up to 66 Discrete Option Multiple Choice questions. The exam ends early once your result is decided, so you may see fewer.

How long is the exam?

Up to 90 minutes, in one sitting.

How much does the IdentityIQ Engineer exam cost?

$400 on Identity University, including one free retake within 364 days of buying.

Do I need the IdentityIQ Associate first?

No. The handbook lists no mandatory prerequisite for the IdentityIQ Engineer exam. SailPoint recommends 1 to 3 years of implementation experience and the Identity Security Engineer (IdentityIQ) path.

What is the passing score?

SailPoint does not publish one. You get Pass or Fail and a percentage per section.

Which domain has the most objectives?

IdentityIQ Development, with 10 of the 50. Every other domain has 6 or 7.

Does the exam test BeanShell?

The prep guide expects moderate knowledge of XML and Java or BeanShell development, and its Development domain covers rule libraries, rule arguments and workflows.

How long is the certification valid?

2 years. Renew by passing the exam again or through the SailPoint Recertification Program.

Is the exam available in other languages?

No. SailPoint says all its exams are offered only in English, with no plans to translate them.

Exam alertsGet alerts for SailPoint CertificationDates, results and cutoffs, by email when they are announced. Free.Sign in to get alerts
Exam pagePreparing for SailPoint Certification?Syllabus, exam pattern, dates and every guide we have on SailPoint Certification, in one place.Open the SailPoint Certification page →