Study guide
3.4 Email Server Settings and Email Redirection
SailPoint Certified IdentityIQ Engineer Exam
Track your progress as you read
Finished sections get a check mark.
1 Chapter 1: The IdentityIQ Engineer Exam
1.1 Exam Format, Official Blueprint, and Study Strategy
2 Chapter 2: Infrastructure, Installation, and Extended Attributes
2.1 IdentityIQ Infrastructure Components 2.2 Installation Steps and Procedures 2.3 Creating Extended Attributes and the Objects That Support Them
3 Chapter 3: Build, Deployment, Patching, Access, and Email
3.1 Ongoing Build and Deployment 3.2 Installing Patches and Performing Upgrades 3.3 Configuring End-User Access 3.4 Email Server Settings and Email Redirection
4 Chapter 4: Lifecycle Manager Configuration, Provisioning Policies, and Workflows
4.1 Configuring Lifecycle Manager 4.2 Identity Provisioning Policies 4.3 Configuring LCM Workflows
5 Chapter 5: Lifecycle Events, QuickLinks, Batch Requests, and Rapid Setup
5.1 Lifecycle Events and Their Workflows 5.2 QuickLinks and QuickLink Populations 5.3 Configuring and Using Batch Requests 5.4 Rapid Setup in Lifecycle Events and Identity Operations
6 Chapter 6: Certification Campaigns and Certification Rules
6.1 Configuring and Scheduling Certification Campaigns 6.2 The Purpose of Common Certification Rules
7 Chapter 7: Policies and Policy Violations
7.1 Configuring and Leveraging Policies 7.2 Responding to Policy Violations
8 Chapter 8: Reporting, Advanced Analytics, and Auditing
8.1 Executing and Leveraging Reports 8.2 Leveraging Advanced Analytics 8.3 Configuring and Using Auditing
9 Chapter 9: Rules, Rule Libraries, and the SailPoint API
9.1 The Purpose and Use of Rule Libraries 9.2 Rule Input and Output Arguments 9.3 Common SailPoint API Objects and Methods
10 Chapter 10: Workflow Development
10.1 Workflow Variables, Transitions, and Step Conditions 10.2 Workflow Steps That Generate Work Items 10.3 The Different Workflow Step Usages 10.4 Leveraging Sub-Workflows
11 Chapter 11: Email Templates, Branding, and Localization
11.1 Customizing and Using Email Templates 11.2 Branding the SailPoint User Interface 11.3 Localizing the SailPoint UI
12 Chapter 12: Application Definitions, Connector Settings, and Rapid Setup Aggregation
12.1 Configuring Application Definitions 12.2 Configuring Common Connector Settings 12.3 Configuring Rapid Setup Aggregation Settings
13 Chapter 13: Data-Loading Tasks and Application and Connector Rules
13.1 Scheduling Tasks for Data Loading and Processing 13.2 Common Application Rule Types 13.3 Common Connector Rule Types
14 Chapter 14: Debugging with log4j, Syslog, and the IdentityIQ Console
14.1 Configuring and Leveraging log4j 14.2 Configuring and Leveraging Syslog 14.3 Leveraging the IdentityIQ Console for Debugging
15 Chapter 15: Debug Pages and the Administrator Console
15.1 Leveraging the Debug Pages for Debugging 15.2 Leveraging the Administrator Console for Debugging
16 Chapter 16: Role Model and Identity Attribute Mappings
16.1 Default Role Models and Role Types 16.2 Configuring Roles and Role Options 16.3 Configuring Identity Attribute Mappings
17 Chapter 17: Data Objects, Relationships, and Group Types
17.1 Common IdentityIQ Data Objects 17.2 Relationships Between Common Data Object Models 17.3 The Difference Between Group Types
3.4 Email Server Settings and Email Redirection
Key Takeaways Explain This Topic AI
Email settings are on gear icon > Global Settings > IdentityIQ Configuration > Notification Settings.
The Email Notification Type can be HTTP/OAuth, SMTP/Basic, Redirect to Email, or Redirect to File.
HTTP/OAuth (OAuth 2.0) is recommended for Microsoft 365 because Microsoft deprecated SMTP basic authentication; Azure needs the application-level Mail.Send permission.
Redirect to Email sends every IdentityIQ email to one address, and Redirect to File writes the email text to a file without sending anything.
Task-level email alert settings override the global Email Task Alerts defaults.
Last updated: September 2026
Email Server Settings and Email Redirection
Email is how IdentityIQ reaches people. Approvers learn about work items, reviewers about certifications, managers about lifecycle events, and administrators about failed tasks. Objective 1.7 asks you to understand the configuration of email server settings . Objective 6.5 asks you to leverage email redirection for debugging . Both are on the same page, so this section covers them together.
Where the Settings Live
Go to gear icon > Global Settings > IdentityIQ Configuration > Notification Settings . The settings are stored in the SystemConfiguration object, and the email templates they reference are EmailTemplate objects (section 11.1).
The Four Email Notification Types
Type Sends real email? Typical use
HTTP / OAuth Yes, through an HTTPS email service endpoint Microsoft 365 and other providers that require OAuth 2.0
- SMTP / Basic Yes, through an SMTP host Traditional on-premises mail relays
- Redirect to Email Yes, but only to one address Test environments, template review, UAT
- Redirect to File No, the text is written to a file Debugging templates and workflows without any mail server
- HTTP / OAuth
This type uses the OAuth 2.0 protocol to send mail over HTTP or HTTPS. SailPoint recommends it for Microsoft Office 365 , because Microsoft has deprecated the SMTP basic method. You register IdentityIQ with the OAuth provider and supply:
- Email Service Endpoint , Token Endpoint , and Refresh Token Endpoint
- Scope (the default /.default scope is the least restrictive)
- Client ID and Client Secret
For Azure, the Microsoft Graph Mail.Send permission must be granted as an Application permission. A Delegated permission is not enough.
- SMTP / Basic
- Encryption : NONE, SSL, or TLS
- Default SMTP Host and Default SMTP Port
- Default From Address for all automatically generated notices
- Username and Password for the SMTP host
Connection Timeout and Read Timeout in milliseconds. Session properties defined on a notification template take precedence over these values.
Settings Shared by Every Type
Maximum Email Retries – how many times to retry after a temporary error. Set it to 0 to disable retries.
Suppress Duplicate Emails – sends only one email of the same type to the same recipient at one time, for example one reminder instead of five. It is used only for certification-related email and is on by default .
Notification Templates – which template to use for each notification type.
Email Task Alerts
On the same tab, you can email a status report after tasks finish. Choose a frequency ( Disabled , Warning , Failure , or Always ), a template (the out-of-the-box Task Status template is the default), and recipients. The global setting is a default, and task-level notification settings take priority . For example, if the global default sends to the Administrator but Task1 is set to notify the IT Helpdesk, Task1 notifies the Helpdesk, and tasks without their own settings notify the Administrator. A task restarted by the Reanimator service after hanging may not send its email alert.
Email Redirection for Debugging (Objective 6.5)
Redirection is the safe way to test anything that sends mail.
Redirect to Email uses the same fields as SMTP/Basic plus a Redirection Email Address . Every IdentityIQ email goes to that single mailbox instead of its real recipients. Use it in development and UAT so that a test certification campaign does not email thousands of real managers.
Redirect to File needs only a Redirection File Name and a Default From Address . IdentityIQ writes the complete email text, including recipient, subject, and body, to that file and sends nothing. The documentation specifically recommends it for testing email templates independently of the email server .
A Debugging Routine
Switch the notification type to Redirect to File in a non-production environment.
Import or edit the email template you are testing.
Trigger the email: run the workflow, launch the certification, or use SailPoint's example "Test Email Sending" rule from the console with rule "Test Email Sending" , after editing it for your template, recipient, and arguments.
Open the redirect file and check the rendered subject, body, Velocity variables, and intended recipient.
If the file looks right but real mail fails, the problem is the server settings : host, port, encryption, credentials, or OAuth permissions. If the file is wrong, the problem is the template or the workflow data passed to it.
Loading diagram... Choosing the email notification type
Exam Traps
Redirection is global . It affects every email from that installation, so never leave a production system on Redirect to File.
"Suppress Duplicate Emails" does not remove duplicate work items . It only limits certification-related emails sent at the same moment.
For Microsoft 365, the recommended method is HTTP/OAuth , not SMTP basic authentication.
Template session properties can override the global connection and read timeouts.