Yes, the search syntax @accounts( source.name:"AD" AND state:"disabled" ) is correct for finding identities with disabled AD accounts. In this case, the query filters accounts based on the state being
"disabled," which is valid and effective for identifying disabled accounts.
Key Reference from SailPoint Documentation:
* Search by Account State: Using state:"disabled" is an accurate way to search for disabled accounts in SailPoint IdentityNow.

Yes, one of the key advantages of microservice architecture is the ability to resolve issues or failures quickly. Microservices are designed to be independent, loosely coupled services. If an issue arises in one service, it can be isolated and addressed without affecting the entire system. This compartmentalization enables faster resolution since each service can be debugged, redeployed, or scaled independently, resulting in quicker recovery from failures. This is a core benefit of microservice-based systems, including those used in SailPoint IdentityNow.
References:
* SailPoint IdentityNow Microservices Architecture Overview.
* Benefits of Microservices in SaaS Platforms.

Yes, an SoD policy can define mitigating controls. Mitigating controls are measures put in place to reduce the risk of having conflicting duties. For example, if it's not possible to completely segregate duties due to resource constraints or other business factors, mitigating controls such as enhanced auditing, periodic reviews, or dual approvals can be defined to manage the risk. SailPoint IdentityNow allows for the creation of SoD policies that include such mitigating controls to ensure compliance with security and governance requirements.
Key Reference from SailPoint Documentation:
* Mitigating Controls in SoD Policies: SailPoint supports the definition of mitigating controls within SoD policies to manage and reduce risks when full separation of duties cannot be achieved.

Yes, when using the AWS deployment option, SailPoint shares an Amazon Machine Image (AMI) with the customer's AWS account in the selected region. This AMI contains the pre-configured Virtual Appliance (VA) image that the customer can use to deploy within their own AWS environment, simplifying the deployment process and ensuring compatibility with AWS services.
Key Reference from SailPoint Documentation:
* AWS AMI for VA Deployment: SailPoint provides a dedicated AMI that is shared with customers in their chosen AWS region to facilitate the deployment of the Virtual Appliance.

Yes, password interception is available for the Active Directory (AD) source in SailPoint IdentityNow.
Password interception allows IdentityNow to capture password changes made on the AD source so that it can synchronize the new passwords across other connected systems and applications. This feature ensures password consistency and compliance across the organization's identity infrastructure.
Key Reference from SailPoint Documentation:
* Password Interceptor for AD: SailPoint supports password interception for Active Directory, enabling the platform to capture and synchronize password changes from AD to other systems in real time.