SailPoint (IGA)

While IAM ensures that the right people have access to the right resources, Identity Governance and Administration (IGA) provides visibility, control, and auditing to ensure that access is granted appropriately and in accordance with policies and regulations.

SailPoint is the IGA tool that has been chosen as a key component of IAM. The main benefits will be modernized security, workloads, and workflows, enhanced security and compliance, reduced security risks and compliance violations, as well as establishing critical IAM Governance.

The goal of SailPoint is to ensure alignment and consistency, as well as building a unified approach across the System and all universities by transforming our current, sometimes conflicting, IAM solutions.

Stakeholder Engagement and Governance

IAM Steering and Identity professionals have begun collaborating across institutions to support the SailPoint Implementation and IGA Modernization efforts. The primary goal is to raise awareness of these initiatives while focusing on understanding and streamlining identity and authentication processes for both students and employees across the entire system.

Student Identity Focus

• Engaging with Registrars and Admissions to explore student identity challenges.
• Reviewing the full student experience:
  • Applying - Admission - Enrollment/Deferment
  • Course and degree interactions
  • Graduation - Separation
  • Alumni/former student - Returning as student/employee/other

Employee Identity Focus

• Working with HR to understand employee identity challenges.
• Reviewing the full employee experience while at the university
  • Applying/Hiring/Onboarding
  • Moving between departments/units
  • Separation/Retirement
  • Returning as rehire or other role

SailPoint Education and Connectivity

To prepare the project team for working with SailPoint, both education and connectivity activities are underway:

Training and Education

Key IAM experts from each institution have been identified and are actively engaging in SailPoint Identity University to build foundational knowledge of the product and its components.

Connectivity and Integration Practice

• A Hyper-V Virtual Appliance (VA) image was configured and deployed in the data center to assess the work involved in future VA deployments.
• Initial practice on SailPoint Source of Record integration has begun, with focus on
  • Instance naming conventions
  • Scheduled aggregation setup
  • MFA token compatibility
  • Integration with Microsoft Entra
  • SailPoint identity profile configurations