Beyond out-of-the-box: Supercharging the SailPoint IdentityIQ UI with a production-grade plugin
Source: YouTube · SailPoint · published Jul 1, 2026 · 45:56
This presentation demonstrates how to build production-ready SailPoint Identity IQ (IIQ) plugins to solve cumbersome UI workflows, specifically replacing the manual multi-step user refresh process with a single-click solution 0:17-0:24.
Key Takeaways:
• Out-of-the-box IIQ workflows for simple tasks like refreshing a user require navigating multiple slow pages, making them inefficient for help desk workers 1:20-2:08.
• Unlike direct UI modifications (which break on upgrades), IIQ plugins have been supported since version 7.3 (2018), install safely as versioned packages, and make no edits to core UI files 4:50-5:06.
• Plugins offer extensive capabilities including custom REST APIs (standard JAXRS), background services, custom tasks, and "snippets" that inject JavaScript into any IIQ page 5:10-6:04.
• A production-ready plugin requires mandatory security annotations (e.g., @RequiredRight), proper auditing for security tracking, and separation of business logic into service classes for testability 25:40-27:03.
• Using timestamps (dates) instead of semantic versioning for plugin builds prevents installation collisions when multiple developers are working on the same plugin 43:57-44:37.
The session includes a live coding walkthrough of an open-source "Simple UI Plugin" that adds configurable refresh buttons directly to the Identity Warehouse page, showcasing best practices for both backend Java services and frontend TypeScript injection 17:05-17:22.
Sources:
- 0:17-0:24 Introduction to the problem and plugin solution
- 1:20-2:08 The multi-step problem with out-of-the-box user refreshes
- 4:50-5:06 Plugin upgrade safety and versioning history
- 5:10-6:04 Plugin capabilities: REST APIs, tasks, and UI snippets
- 25:40-27:03 Security annotations, auditing, and service class testing
- 43:57-44:37 Using date-based versioning to avoid developer collisions
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Hello everybody. I am Devin Rosenbower. I'm the CTO of Instrumental Identity or IID. We are a Salepoint partner company and today I'll be presenting a talk called beyond out of the box creating a productionready IQ plug-in. uh instrumental identity my company is a independent consulting company and salepoint partner and we offer a range of services in the AM space uh we are officially vendor neutral um we do a lot of work with salepoint identity IQ and identity security cloud and we work in all verticals so that's a little bit about the company so here's the agenda for my talk today first of all what's the problem that we're trying to solve how can identity IQ plugins help us solve this problem What have I done with identity IQ plugins? I will give a demonstration of my UI plugin which is …