Checked 23 October 2026. From the IdentityIQ Engineer prep guide (last updated 21 October 2026) and the handbook, read 23 October 2026; price from the Identity University exam page, read 18 October 2026. SailPoint revises blueprints; check the prep guide before you book.
The SailPoint Certified IdentityIQ Engineer exam is up to 66 Discrete Option Multiple Choice questions in up to 90 minutes, online and proctored, for $400 on Identity University, with one free retake. Its blueprint has seven domains and 50 objectives, from installation and Lifecycle Manager to BeanShell rules, workflows and debugging. SailPoint recommends about 1–3 years of implementation experience and the Identity Security Engineer (IdentityIQ) path in Identity University. The certification is valid for 2 years. ProSyllabus is an independent study site, not affiliated with SailPoint. Every rule here is quoted or summarised from SailPoint’s own pages, read on 23 October 2026 (the price on 18 October 2026).
Prep guide (read 23 October 2026) and Identity University (read 18 October 2026). Conversions at ₹86 and £0.75 to the US dollar.
The exam at a glance
| Item | Detail |
|---|---|
| Name | SailPoint Certified IdentityIQ Engineer (role-based certification) |
| Questions | Up to 66, Discrete Option Multiple Choice |
| Time | Up to 90 minutes, in one sitting |
| Attempts | 2: one free retake per enrollment, within 364 days of buying |
| Delivery | Online, proctored through Proctor360 |
| Result | Pass or Fail, plus a percentage per section; no published passing score |
| Price | $400 on Identity University |
| Prerequisite | None enforced; SailPoint recommends 1–3 years of implementation experience and the Identity Security Engineer (IdentityIQ) path |
| Validity | 2 years, then recertify |
SailPoint describes the candidate as someone who will “install, deploy and configure IdentityIQ in their customers’ non-production environments and local sandboxes”, with “moderate knowledge in XML, Java/BeanShell development” and of supported infrastructure. It names implementation engineers and IAM developers at partners and at SailPoint, and customer staff who build their own implementation.
IdentityIQ or Identity Security Cloud: which exam is yours
| IdentityIQ Engineer | Identity Security Engineer | |
|---|---|---|
| Product | IdentityIQ, installed and run by you or your client | Identity Security Cloud, SailPoint’s cloud product |
| Questions and time | Up to 66 in up to 90 minutes | Up to 73 in up to 120 minutes |
| Objectives | 50 in 7 domains | 70 in 10 domains |
| Customisation | BeanShell rules, XML objects, workflows, the console and debug pages | Rules and transforms, workflows, REST APIs, virtual appliances |
| Price and validity | $400, 2 years | $400, 2 years |
Pick the product you work on: the blueprints share ideas such as certifications, roles and provisioning, but the objectives are product-specific. The cloud exam is covered in our Identity Security Engineer exam guide. The cheaper IdentityIQ Associate (up to 43 DOMC questions, $300) requires the IdentityIQ Introduction and Essentials courses first and, by the handbook, does not expire.
The seven domains
| Domain | Objectives | What it covers (our short wording) |
|---|---|---|
| IdentityIQ Installation, build, and deployment | 7 | Infrastructure components of a deployment; Installation steps and procedures; Creating extended attributes; Ongoing build and deployment; Installing patches and upgrades; Configuring end-user access; Email server settings |
| IdentityIQ Lifecycle Manager | 7 | Configuring Lifecycle Manager; Identity provisioning policies; LCM workflows; Lifecycle events and their workflows; QuickLinks and QuickLink populations; Batch Requests; Rapid setup in lifecycle events and identity operations |
| IdentityIQ Identity Governance | 7 | Configuring and scheduling certification campaigns; Common certification rules; Configuring and using policies; Responses to policy violations; Reporting; Advanced Analytics; Auditing |
| IdentityIQ Development | 10 | Rule libraries; Rule input and output arguments; Workflow variables, transitions and step conditions; Workflow steps that generate work items; Workflow step usages; Sub-workflows; Common SailPoint API objects and methods; Email templates; Branding the UI; Localization of the UI |
| IdentityIQ Application Onboarding | 6 | Application definitions; Common connector settings; Rapid setup aggregation settings; Scheduling tasks for data loading and processing; Common application rule types; Common connector rule types |
| IdentityIQ Debugging and Troubleshooting | 6 | log4j; Syslog; The IdentityIQ console; The debug pages; Email redirection; The Administrator Console |
| IdentityIQ Data and Access Modeling | 7 | Default role models and types; Roles and role options; Identity attribute mappings; Objects that can have extended attributes; Common data objects and what they represent; Relationships between data objects; Group types |
From the prep guide’s blueprint. SailPoint publishes no weights per domain; the counts are objectives, not marks.
Where to spend your time
Development (10 objectives) is the largest domain and the one most tied to code: rule libraries, rule arguments, workflow variables, transitions and step conditions, steps that create work items, sub-workflows, the common API objects and methods, email templates, branding and localization. If you have configured IdentityIQ only through the UI, this is where to spend time in a sandbox.
Debugging and Troubleshooting is six tools: log4j, Syslog, the IdentityIQ console, the debug pages, email redirection and the Administrator Console. Know what each is for and when you would reach for it; in our reading of the blueprint, a question may describe a symptom and ask which tool shows the cause.
Data and Access Modeling asks about the default role types, role options, identity attribute mappings, which objects take extended attributes, the common data objects and how they relate, and group types. Installation, build and deployment covers infrastructure components, installing, extended attributes, build and deployment, patches and upgrades, end-user access and email settings.
Lifecycle Manager covers configuration, provisioning policies, LCM workflows, lifecycle events, QuickLinks and their populations, batch requests and rapid setup. Identity Governance covers certification campaigns and their rules, policies and violation responses, reporting, Advanced Analytics and auditing. Application Onboarding covers application definitions, connector settings, rapid-setup aggregation, scheduling tasks, and the application and connector rule types.
Checklist: all 50 objectives
A five-week plan
| Week | Focus | Check |
|---|---|---|
| 1 | Installation, build and deployment; Data and Access Modeling (14 objectives) | Install IdentityIQ in a sandbox, add an extended attribute, explain the main data objects and how they relate |
| 2 | Application Onboarding (6) | Define an application, aggregate it, schedule the tasks that load and refresh data, name the rule types you used |
| 3 | Development (10) | Write a rule from a rule library, build a workflow with a work-item step and a sub-workflow, edit an email template |
| 4 | Lifecycle Manager; Identity Governance (14) | Set up a QuickLink and a lifecycle event, schedule a certification, configure a policy and its violation response |
| 5 | Debugging and Troubleshooting (6), then timed DOMC practice | Trace a failing aggregation through log4j and the debug pages; sit a timed DOMC set |
Our suggested order. It assumes hands-on access to a sandbox; SailPoint calls professional experience “crucial” for this exam. Our IdentityIQ Engineer study guide suggests SailPoint documentation pages to start from for each of the 50 objectives, flags the gaps in the online help, and gives a sandbox lab per section.
Practise in the DOMC format
The format is the same on every SailPoint certification: options come one at a time, each judged Yes or No, with no back, no review and no flagging. Read our DOMC format guide and try SailPoint’s two Caveon samples. Our IdentityIQ Engineer practice questions page has three free questions with the reasoning.
For full-length practice, our IdentityIQ Engineer practice exam has two 66-question DOMC mocks on a 90-minute clock, Beanshell and workflow XML to read, a score for each of the seven sections and an explanation with the SailPoint documentation page for every answer. Our mocks give each section a share in line with its objective count, because SailPoint publishes no weights; that split is ours. Its questions are original, not SailPoint’s.
After the exam
The prep guide says you receive a Pass/Fail decision when you submit the exam, and that a pass earns a digital badge from Credly, by email within 24–48 hours (it asks you not to block admin@credly.com); you can share the badge on LinkedIn. The handbook adds that the result is emailed 72 business hours after the exam and shown in your Identity University enrollment. The score report gives the percentage you answered correctly in each section, and SailPoint tells retakers to use it to choose what to study. If you fail, the enrollment includes one free retake within 364 days of purchase; after two attempts you buy the exam again. The certification lasts 2 years; renew by passing again or through the Recertification Program.
Frequently asked questions
How many questions are on the IdentityIQ Engineer exam?
Up to 66 Discrete Option Multiple Choice questions. The exam ends early once your result is decided, so you may see fewer.
How long is the exam?
Up to 90 minutes, in one sitting.
How much does the IdentityIQ Engineer exam cost?
$400 on Identity University, including one free retake within 364 days of buying.
Do I need the IdentityIQ Associate first?
No. The handbook lists no mandatory prerequisite for the IdentityIQ Engineer exam. SailPoint recommends 1 to 3 years of implementation experience and the Identity Security Engineer (IdentityIQ) path.
What is the passing score?
SailPoint does not publish one. You get Pass or Fail and a percentage per section.
Which domain has the most objectives?
IdentityIQ Development, with 10 of the 50. Every other domain has 6 or 7.
Does the exam test BeanShell?
The prep guide expects moderate knowledge of XML and Java or BeanShell development, and its Development domain covers rule libraries, rule arguments and workflows.
How long is the certification valid?
2 years. Renew by passing the exam again or through the SailPoint Recertification Program.
Is the exam available in other languages?
No. SailPoint says all its exams are offered only in English, with no plans to translate them.
Sources
- official — SailPoint: Certified IdentityIQ Engineer exam prep guide (last updated 21 Oct 2026, read 23 Oct 2026)
- official — SailPoint Identity University: SailPoint Certified IdentityIQ Engineer (Purchase | $400, read 18 Oct 2026)
- official — SailPoint: Certified IdentityIQ Associate exam prep guide
- official — SailPoint Identity University: SailPoint Certified IdentityIQ Associate (Purchase | $300, read 18 Oct 2026)
- official — SailPoint: Professional Certification and Credentialing Program, Policy Handbook (last updated 23 Sep 2026, read 23 Oct 2026)
- official — SailPoint: Certification proctored exam format (DOMC)
- official — SailPoint: Identity Security Engineer exam prep guide
- official — SailPoint: SailPoint Recertification Program
official = a document published by the conducting body. reported = a news or coaching site we could not check against an original. Where sources disagree this page says so rather than picking one.
