SailPoint IdentityIQ Rules Explained: Where BeanShell Fits

If you are learning SailPoint IdentityIQ (IIQ), rules are where configuration ends and code begins. IIQ rules are small pieces of BeanShell (Java-like scripting) that run at specific points in IIQ's processing, so you can handle the cases that out-of-the-box configuration cannot.

What a rule is

A rule is a script stored as a Rule object in IIQ. IIQ calls it at a defined hook, such as while reading data from an application or before sending a change to a target system. The rule receives input variables from IIQ (for example the application, the account data or the identity) and returns a value or modifies an object.

Rule types you will meet early

• Correlation rule: decides which identity an account belongs to when simple attribute matching is not enough.
• Customization rule: adjusts account data as it is read during aggregation, for example cleaning up values.
• Build Map rule: shapes raw rows from delimited-file or JDBC sources into account attributes.
• Identity attribute rule: calculates an identity attribute from one or more sources.
• Before and After Provisioning rules: change a provisioning plan before it is sent, or act after it completes.

Why BeanShell matters for jobs

Most real IIQ projects onboard applications that do not fit the defaults. Interviewers often ask you to explain a correlation rule or debug a failed aggregation, which means reading and writing BeanShell. You do not need to be a senior Java developer, but you do need to be comfortable with variables, conditions, loops and IIQ's objects.

Tips when you start writing rules

• Keep each rule small and focused on one job.
• Log what the rule receives and returns while testing.
• Test against a small set of accounts before running a full aggregation.
• Reuse logic through rule libraries instead of copying code.

Full guide with examples: SailPoint IIQ rules and BeanShell explained. If you want structured, hands-on practice, see the SailPoint IIQ course at IAM Careers.

This training is provided by IAM Careers and is not affiliated with, authorized by, sponsored by, or endorsed by SailPoint Technologies, Inc.