Identity Engineering
Domain framework

D07 · Identity Governance & Administration (IGA)

Identity lifecycle management, access governance, provisioning, and compliance for human and non-human identities.

Key knowledge areas

  • Joiner-Mover-Leaver (JML)
  • Identity Lifecycle Management
  • Authoritative Identity Sources
  • Identity Provisioning and Deprovisioning
  • SCIM Provisioning
  • Access Requests
  • Approval Workflows
  • Access Certifications and Reviews
  • Role Management and Role Mining
  • Segregation of Duties (SoD)
  • Entitlement Management
  • Identity Reconciliation
  • Identity Ownership
  • Human and NHI Governance
  • Audit and Compliance

Representative technologies

  • SailPoint IdentityIQ
  • SailPoint Identity Security Cloud
  • Saviynt
  • Microsoft Entra ID Governance
  • One Identity Manager

Career alignment

  • TRACK A — Identity Platform & CIAM Engineering: Supporting domain. View track
  • TRACK B — Enterprise IAM / PAM / IGA Engineering: Core domain. View track

Suggested learning outcomes

  • Map joiner, mover and leaver events to provisioning.
  • Design reconciliation, access reviews and segregation of duties.

These prompts are editorial learning aids retained from the earlier textbook. They are not additional requirements in v0.4.

Connected questions

Build competency evidence

Explain a mechanism, analyze an implementation or failure, build a tested lab, and justify an architecture. Keep shared technical explanations in the Knowledge Base and link to them from research.

Domain name, scope, knowledge areas and representative technologies follow the authoritative Framework v0.4. Questions may span multiple domains.

On this page