Skip to main content

​
Automation setup

Connect SailPoint IdentityIQ with Basic authentication to use IdentityIQ actions in Flow automations. The connected account’s IdentityIQ permissions determine which account, user, workflow, and certification actions can succeed.

​
Prerequisites

  • A Flow admin who can manage integrations.
  • An HTTPS IdentityIQ instance URL, for example https://identity.example.com.
  • An IdentityIQ account that supports Basic authentication.
  • Permission to read System for Cross-domain Identity Management (SCIM) Accounts.
  • Extra IdentityIQ permissions for each write or approval action your automation uses.
Flow checks the connection with a bounded Accounts request during setup. A successful connection proves the account can read accounts. It doesn’t prove every action, role, application, workflow, or certification permission.

​
Provider setup

Prepare the IdentityIQ account before you connect it in Flow.
1

Confirm the instance URL.

Use the HTTPS origin for the IdentityIQ deployment. If your team normally opens https://identity.example.com/identityiq, enter https://identity.example.com in Flow.
2

Create or choose the Basic-authentication account.

Use a dedicated service account when your IdentityIQ policy allows it. Don’t use a personal administrator account for long-running automations.
3

Grant read access to SCIM Accounts.

The account must be able to call GET /identityiq/scim/v2/Accounts.
4

Grant action-specific permissions.

Add only the IdentityIQ permissions required by the automations you plan to run. Account writes, user writes, workflow launches, approvals, and certification actions can require different IdentityIQ rights.
5

Test the credential in IdentityIQ.

From a network that can reach the instance, test a read-only Accounts request with the username and password you plan to enter in Flow.

​
Connect in Flow

1

Open Integrations.

Search for SailPoint IdentityIQ. This connection is available to organizations with Preview access.
2

Select Connect.

Name the connection and choose which teams can access it.
3

Enter the IdentityIQ instance URL.

Enter the HTTPS origin for the IdentityIQ instance.
4

Enter the IdentityIQ username and password.

Use the Basic-authentication account you prepared in IdentityIQ.
5

Complete setup.

Flow checks GET /identityiq/scim/v2/Accounts?startIndex=1&count=1. If IdentityIQ rejects the credential or denies account reads, correct the account in IdentityIQ and reconnect.
6

Enable Automations for the intended team.

Open the connection and enable Automations for each team that needs it. Sharing a connection does not enable automations.

​
Capabilities

Use the connection to list and manage IdentityIQ accounts and users, launch workflows, and work with the reviewed IdentityIQ automation actions. Each action still depends on the connected account’s IdentityIQ permissions.

​
Automation connector reference

Use the generated SailPoint IdentityIQ action reference for action inputs, outputs, risk tiers, and release stage.

​
Sync and behavior

This connection runs actions when an automation requests them. It does not sync Knowledge or Assets, and it does not receive IdentityIQ webhooks. To rotate the password, update the IdentityIQ account and reconnect in Flow. Test the read-only account action before you run write actions with the replacement credential.

​
Troubleshooting