If you are learning SailPoint IdentityIQ (IIQ), rules are where configuration ends and code begins. IIQ rules are small pieces of BeanShell (Java-like scripting) that run at specific points in IIQ's processing, so you can handle the cases that out-of-the-box configuration cannot.

What a rule is

A rule is a script stored as a Rule object in IIQ. IIQ calls it at a defined hook, such as while reading data from an application or before sending a change to a target system. The rule receives input variables from IIQ (for example the application, the account data or the identity) and returns a value or modifies an object.

Rule types you will meet early

Correlation rule : decides which identity an account belongs to when simple attribute matching is not enough.

Customization rule : adjusts account data as it is read during aggregation, for example cleaning up values.

Build Map rule : shapes raw rows from delimited-file or JDBC sources into account attributes.

Identity attribute rule : calculates an identity…