No. In SailPoint IdentityIQ, the application name is a configurable label assigned to the application object and does not have to match the connector selected. The application definition represents an external system or source, while the connector defines the technical integration method used to communicate with that system. These are related configuration elements, but they are not the same field and one does not automatically name the other.
For example, an application could be named "Corporate Directory," "North America Active Directory," or "HR Source," while using an LDAP, Active Directory, JDBC, Delimited File, Web Services, or another connector type. The connector selection determines available configuration settings, supported schema behavior, aggregation options, and provisioning capabilities. The application name is used for identification within IdentityIQ, reporting, certifications, requests, policies, and administrative configuration.
Therefore, the statement is incorrect because IdentityIQ applications are not named by the selected connector. They are named by the administrator or implementer according to the business or system context. Reference topics: Applications, application definition, connector selection, connector-dependent settings, schemas, aggregation, and provisioning support.

Yes. In SailPoint IdentityIQ, an entitlement represents an access right, permission, privilege, group membership, role membership, or similar access-granting value on an application. Entitlements are discovered from application account data during aggregation and are commonly modeled in IdentityIQ through schema attributes marked as entitlement attributes. Once aggregated, these values may appear in the entitlement catalog as managed attributes, where they can be reviewed, requested, certified, governed by policies, and associated with roles.
The definition "an access right on an application" is accurate because entitlements describe what an identity's account is allowed to do or access within a connected system. Examples include Active Directory group membership, database roles, application permissions, cloud groups, or other system-specific access values.
IdentityIQ uses entitlements as core governance objects for certifications, access requests, policy checks, role modeling, and provisioning.
This definition is intentionally broad because different target systems represent access differently. IdentityIQ normalizes those application-specific access values into entitlement concepts for identity governance.
Reference topics: Access Modeling, entitlement catalog, managed attributes, application schema, entitlement aggregation, certifications, access requests, and provisioning.
'

The statement is true in the context of IdentityIQ manager correlation. IdentityIQ does not infer an identity's manager relationship without source data that identifies the manager. The authoritative application, typically an HR or personnel source, provides the trusted identity records and should include a manager reference attribute, such as manager ID, employee number, username, distinguished name, or another value that can be correlated to an existing IdentityIQ identity.
During aggregation and identity refresh, IdentityIQ uses configured manager correlation logic to resolve that manager reference to an IdentityCube representing the manager. Once resolved, the manager relationship can support governance functions such as manager certifications, access request approvals, lifecycle approvals, escalations, and reporting hierarchy-based controls. Without a manager reference from the authoritative source, IdentityIQ may still contain identities, accounts, and access, but it cannot reliably establish reporting relationships for those identities through standard manager correlation.
This is distinct from manually assigning relationships or using custom logic; the standard governance model expects manager data to originate from the authoritative identity source. Reference topics: Identity Modeling
- manager correlation, IdentityCube attributes, authoritative identity data; Governance - manager-based certifications and approvals; User-Driven Requests - manager approval routing.

The statement is false. In IdentityIQ, an account attribute is defined within a specific application account schema and represents data stored on an account link for that application. Its value is obtained from the account data aggregated from that particular application connector. For example, an account attribute such asmemberOf,department,title, oraccountStatusbelongs to the account schema of a defined application and is populated from that application's aggregation results.
The concept of sourcing values from several applications applies more directly to identity attributes, not account attributes. Identity attributes reside on the IdentityCube and may be derived from authoritative sources, account links, rules, mappings, or precedence logic across multiple applications. IdentityIQ uses identity attribute configuration to normalize data such as department, location, manager, email, or lifecycle state at the identity level.
Therefore, while multiple applications may contain similarly named account attributes, each account attribute value is tied to its own application account schema and account link. It is not a single shared account attribute sourced from several applications.
Reference topics: Applications - account schema attributes; Identity Modeling - identity attributes versus account attributes; Identity Refresh - updating IdentityCube attributes.

No. Reviewing an identity's access during a certification campaign is not provisioning. In SailPoint IdentityIQ, certification campaigns are part of governance and access review functionality. Their purpose is to allow designated reviewers, such as managers, application owners, role owners, or other certifiers, to examine existing access and decide whether it should be approved, revoked, delegated, or otherwise acted upon.
Provisioning is different. Provisioning refers to the fulfillment of access changes, such as creating accounts, modifying account attributes, adding or removing entitlements, disabling accounts, deleting accounts, or executing manual fulfillment work items when direct connector-based provisioning is unavailable. A certification decision may later trigger provisioning if a reviewer revokes access and IdentityIQ generates a remediation or deprovisioning action. However, the review activity itself is governance, not provisioning.
Therefore, "reviewing an identity's access during a certification campaign" is an access review action, not a provisioning action. Reference topics: Governance, certifications, access reviews, remediation, revocation decisions, Provisioning, provisioning plans, and deprovisioning fulfillment.