Yes, loading entitlement descriptions is considered a best practice before generating the campaign preview for a manager certification campaign. Providing clear and concise entitlement descriptions ensures that managers reviewing access during the certification process have a full understanding of what each entitlement or role entails. This helps in making informed decisions regarding whether an individual's access should be approved or revoked.
Without proper descriptions, the campaign participants might have difficulty evaluating access, which can lead to inefficiencies or errors in the certification process.
References:
* SailPoint IdentityNow Certification Campaign Best Practices.
* SailPoint IdentityNow Campaign Preparation Guidelines.

Yes, downloading the accounts data CSV from the Accounts tab on the authoritative source is a reasonable action for troubleshooting incomplete identities. This CSV file contains detailed account information pulled from the authoritative source, allowing the engineer to manually inspect the raw data and identify any discrepancies or missing attributes that could lead to incomplete identities. This is a useful step in verifying the accuracy and completeness of the data being aggregated from the authoritative source.
References:
* SailPoint IdentityNow Source Account Data Inspection and CSV Export Documentation.
* SailPoint IdentityNow Identity Data Troubleshooting Guide.

Passthrough authentication in SailPoint IdentityNow refers to a method where the authentication process happens through a trusted identity provider (IdP), rather than using credentials stored directly in SailPoint IdentityNow. The key feature of passthrough authentication is that the user's login attempt is authenticated via external authentication mechanisms such as Active Directory, SAML-based Identity Providers (IdPs), or other federated identity providers.
In the given use case, the user is logging into IdentityNow using a password set directly in IdentityNow during registration. This process describes local authentication (where IdentityNow manages the credentials), not passthrough authentication. Since passthrough authentication relies on external IdPs or federated systems, this case does not accurately describe passthrough authentication.
References:
* SailPoint IdentityNow Documentation on Authentication Methods.
* SailPoint IdentityNow Federation and SSO Configuration Guides.