SailPoint IdentityIQ (IIQ) is on-premise identity governance software your employer installs and customises with Java and BeanShell code; SailPoint Identity Security Cloud (ISC) is the same vendor's multi-tenant SaaS platform, configured with JSON transforms and REST APIs instead of code. For a learner in 2026, the honest answer is that IIQ teaches you the governance engine and ISC teaches you the delivery model — and the best-paid roles now ask for both. Naukri listed 904 SailPoint ISC openings against 685 IdentityIQ openings in India on 9 July 2026, but the majority of large BFSI and GCC estates still run IIQ in production, which is why most Indian professionals still start there.
If you have landed here, you are probably not choosing a platform for a company. You are choosing what to study — and every article you have found so far was written for enterprise buyers. They compare licensing models and "time to value" and organisation size. None of them tell you what you will actually type on a Monday morning, whether you can practise it at home, or whether the thing you spend two months learning will still be hireable in five years.
This guide answers the learner's version of the question. It uses live job data with dates attached, the real technical difference between a BeanShell rule and a JSON transform, and an honest account of a problem nobody selling training likes to mention: neither platform gives you a free sandbox.
What Is the Difference Between SailPoint IIQ and ISC?
SailPoint IdentityIQ (IIQ) is on-premise software an organisation installs, hosts and upgrades on its own infrastructure, extended through Java and BeanShell code against an XML object model. SailPoint Identity Security Cloud (ISC) is SailPoint's multi-tenant SaaS platform, hosted and continuously updated by SailPoint, and extended through JSON-based transforms and REST APIs rather than custom code.
Both products come from SailPoint Technologies and solve the same problem — governing who has access to what, and proving it to an auditor. The divergence is architectural, and every other difference falls out of that one decision.
| Dimension | SailPoint IdentityIQ (IIQ) | SailPoint Identity Security Cloud (ISC) |
|---|---|---|
| Deployment | On-premise or private cloud, installed by the customer | Multi-tenant SaaS, hosted by SailPoint |
| Extension model | BeanShell rules, Java, XML object model | JSON transforms, REST APIs, cloud rules |
| Who upgrades it | Your team, as a scheduled project | SailPoint, continuously |
| Reaching on-prem apps | Direct connectors from inside the network | Virtual Appliance (VA) bridges cloud to on-prem |
| Typical skill emphasis | Depth of configuration and coding | Configuration, integration and API fluency |
| Where you find it | Large regulated estates: BFSI, GCCs, government | New and cloud-first deployments; migration projects |
| Learning barrier | Steeper — more concepts, more code | Gentler concepts, but no local install possible |
What Do You Actually Build in Each Platform?
In SailPoint IdentityIQ you build governance logic by writing it — aggregation rules, provisioning rules and custom workflows in BeanShell against an XML object model. In SailPoint Identity Security Cloud you assemble the same outcomes by configuring them — Identity Profiles, JSON transforms and cloud workflows applied through the interface or REST API. The governance concepts are identical; the craft is different.
This is the part that decides whether you will enjoy the work, and it is the part enterprise comparison articles skip entirely. Here is the same task in both platforms.
| The task | In SailPoint IIQ | In SailPoint ISC |
|---|---|---|
| Normalise a username on import | Write an aggregation rule in BeanShell | Configure a JSON transform (lower, concat, split) |
| Bring in an authoritative HR source | Application onboarding + identity mapping | Create a Source, then an Identity Profile with attribute mappings |
| Automate joiner, mover, leaver | Lifecycle Events + custom workflow | Lifecycle States + provisioning policies |
| Approve an access request in three steps | Build the approval chain in a custom workflow | Configure an access request workflow |
| Run a manager access review | Certification campaign + certification rule | Certification campaign with AI recommendations |
| Stop toxic access combinations | SoD policy in Policy Management | SoD policy in the access model |
| Connect a legacy on-prem app | Direct connector or custom connector rule | Virtual Appliance plus a source connector |
Read that table twice, because it contains the single most useful insight on this page: the left column and the right column are the same seven jobs. Aggregation, identity mapping, joiner-mover-leaver, approvals, certifications, segregation of duties, connectivity. Those concepts are the actual profession. The platform is how you express them.
That is also why SailPoint Academy's 14-module IIQ curriculum maps so cleanly onto ISC work. Modules like Application Onboarding, Role Management, Policy Management, Access Certification and Lifecycle Events are teaching governance, not syntax — and governance is what transfers.
Which Should You Learn First — IIQ or ISC?
Most Indian IT professionals should learn SailPoint IdentityIQ (IIQ) first and add Identity Security Cloud (ISC) afterwards. IIQ teaches the governance engine in depth and still runs in most large Indian BFSI and GCC estates. ISC concepts sit comfortably on an IIQ foundation; the reverse route is harder, because ISC abstracts away the mechanics IIQ makes you learn.
That is the general answer. It is not the answer for everyone, so here is the honest split.
Start with SailPoint IIQ if…
- You are targeting BFSI GCCs, Big 4 consulting or Indian IT services — the estates that run IIQ today
- You come from Java, AD/system administration, or L2/L3 support and are comfortable with code
- You want the deeper skill set that is harder to acquire and therefore scarcer
- You want to become a migration engineer, which requires reading an existing IIQ build
Start with SailPoint ISC if…
- Your current employer has already bought ISC — always learn the platform you can touch
- You are moving from a cloud, SaaS-administration or integration background
- You want to avoid heavy scripting; ISC leans on configuration and APIs rather than BeanShell
- You are joining a greenfield identity programme with no legacy estate behind it
Which Has More Jobs in India — IIQ or ISC?
Naukri listed 904 SailPoint Identity Security Cloud (ISC) openings against 685 SailPoint IdentityIQ (IIQ) openings in India on 9 July 2026 — the first time ISC-specific listings overtook IIQ-specific ones. Bengaluru led ISC hiring with 314 openings, Delhi NCR followed with roughly 197, and Hyderabad recorded 136. Both platforms remain in strong demand, and a growing share of job descriptions ask for both.
That crossover matters, and it is worth reading carefully rather than dramatically. ISC leads on new listings because new identity programmes start in the cloud. IIQ still dominates installed base — the systems already running in production at HSBC, JP Morgan and Wells Fargo GCCs, at Deloitte and Accenture client sites, and across TCS, Infosys and Wipro delivery teams.
The practical consequence: ISC roles skew toward implementation and greenfield build; IIQ roles skew toward support, enhancement and migration. Both are hiring. If you want a fuller breakdown of employers and required skills, see our guide to SailPoint ISC jobs in India.
9 July 2026
9 July 2026
largest single city
Source: Naukri.com keyword listings, recorded 9 July 2026. Job-board counts fluctuate daily and include duplicate and agency postings — treat them as directional evidence of demand, not a precise census.
Is SailPoint IdentityIQ Being Discontinued?
No. SailPoint has published no end-of-life date for IdentityIQ, and the product still receives releases and patches — IdentityIQ 8.5 followed the 8.4 line. SailPoint positions Identity Security Cloud as its strategic platform and actively encourages migration, so IIQ is best understood as a mature, supported product in a long transition, not a retired one.
This is the fear behind most searches for "IIQ vs ISC", so it deserves a direct answer rather than reassurance. Three facts, and one honest estimate.
- Fact: SailPoint continues to ship IdentityIQ releases and patches, and has announced no public end-of-life date as of September 2026.
- Fact: SailPoint is actively promoting IIQ-to-ISC migration, including upgrade assessment programmes — the direction of travel is not ambiguous.
- Fact: Migrations of deeply customised IIQ estates typically run 12–36 months each, according to migration practices published by SailPoint implementation partners.
- Estimate, clearly labelled as one: with a large installed base and multi-year migration cycles running sequentially, IIQ skills should remain hireable well into the late 2020s, with long-tail demand in heavily regulated and customised estates beyond that. Nobody can promise a date, and anyone who does is guessing.
We have modelled that window in detail, with the tracked job data behind it, in the IIQ-to-ISC migration decade.
Still not sure which one fits your background?
Attend a free 60-minute live demo before you decide — no payment, no commitment. Bring your current role and experience, and our lead trainer will tell you honestly whether IIQ, ISC or neither is the right next step for you.
Book the Free DemoWhich Is Easier to Learn — and Can You Practise Either One?
SailPoint Identity Security Cloud (ISC) is conceptually easier to learn because it replaces BeanShell rule development with JSON transforms and API configuration, while SailPoint IdentityIQ (IIQ) demands more Java, XML and infrastructure understanding. But neither platform offers a free public trial or sandbox, so hands-on practice for both depends on employer access, a training provider's environment, or a community development tenant.
That second sentence is the one you will not find on training pages, so let us be specific about it.
| Question | SailPoint IIQ | SailPoint ISC |
|---|---|---|
| Free public trial? | No | No |
| Downloadable installer? | Yes, but licensed — Compass access is restricted to customers and partners | Not applicable — it is a hosted SaaS tenant |
| Individual learner licence? | Not granted — confirmed on the SailPoint Developer Community, March 2026 | Not offered as a free tier |
| Realistic practice routes | Employer environment · instructor-led training that supplies a live environment · Developer Community ambassador tenant (ISC) · paid Identity University courses with bundled tenant access | |
So the "just teach yourself from YouTube" plan fails on both platforms for the same structural reason — not because the videos are bad, but because you cannot run an aggregation against a source you do not have. This is exactly why SailPoint Academy's live online SailPoint IIQ course is built around a guided environment rather than slides, and why our honest take on self-study is published at can you self-teach SailPoint IIQ.
Which Pays More — IIQ or ISC Roles?
Published salary data does not yet separate SailPoint IdentityIQ and Identity Security Cloud roles cleanly, because most job descriptions list "SailPoint" as the skill. In the United States, ZipRecruiter reported an average of US$126,812 for SailPoint IdentityIQ roles in June 2026. In India, aggregator 6figr placed the average SailPoint salary near ₹19 lakh per year in 2026.
For context on the US range, most ZipRecruiter postings sat between US$106,500 and US$144,500 in June 2026, and a growing share of 2026 job descriptions ask for both platforms in one role.
The pattern practitioners describe is that platform choice moves pay far less than role seniority and demonstrable project work. An engineer who can evidence a real application onboarding, a working lifecycle event and a completed certification campaign out-earns one who has only watched tutorials, on either platform.
| Role level | Typical experience | Indicative India band (per year) |
|---|---|---|
| Identity / IAM analyst | 0–3 years | ₹8–14 lakh |
| SailPoint consultant / developer | 3–7 years | ₹14–26 lakh |
| IIQ or ISC architect | 8+ years | ₹28–50 lakh |
| Dual-skill migration engineer | 5+ years, both platforms | Commands a premium within the consultant and architect bands |
These are market estimates, not guarantees. Salary depends on prior experience, employer, location and interview performance. Indian figures are compiled from public job listings and salary aggregators including 6figr and Naukri, 2026. International salary figures are market estimates from public job listings and salary aggregators — actual compensation varies by employer, location, experience and individual negotiation. For a fuller role-by-role breakdown see our SailPoint IIQ salary in India 2026 guide.
How Do IIQ Skills Transfer to ISC?
SailPoint IdentityIQ skills transfer to Identity Security Cloud at the concept level almost completely, and at the syntax level not at all. Aggregation, correlation, identity mapping, roles, policies, certifications and lifecycle events exist in both platforms under similar names. What changes is the mechanism: BeanShell rules become JSON transforms, custom workflows become cloud workflows, and direct connectors become sources reached through a Virtual Appliance.
That asymmetry is the whole career argument. Someone who knows IIQ can read an existing enterprise deployment, understand what it does, and rebuild it in ISC. Someone who only knows ISC cannot — and migration projects need the first person.
| SailPoint IIQ | Becomes in ISC | Does the concept transfer? |
|---|---|---|
| BeanShell aggregation rule | JSON transform | Concept yes, syntax no |
| Application onboarding | Source + Identity Profile | Almost entirely |
| Lifecycle Events (joiner/mover/leaver) | Lifecycle States | Almost entirely |
| Custom workflow | Cloud workflow | Concept yes, build style differs |
| Access certification campaign | Certification campaign + AI recommendations | Almost entirely |
| Business and IT roles, RBAC | Access model, roles and access profiles | Almost entirely |
| Installing and patching IIQ | Handled by SailPoint | Not needed in ISC |
Six of seven core competencies carry across. Only the infrastructure work disappears — and that is the part employers were paying you least for. The dual-skill route is covered in depth in the IIQ to ISC migration skills guide, and if ISC is where you want to start, read how to learn SailPoint ISC for the tenant-access problem in full.
What SailPoint Academy Teaches — and What It Does Not
SailPoint Academy currently teaches SailPoint IdentityIQ (IIQ) as a live online course: Rs. 25,000, 2 months, all 14 modules, batches capped at 25 students, with recordings in the LMS. SailPoint Academy's live online SailPoint Identity Security Cloud (ISC) course starts its founding batch on 15 September 2026 at Rs. 32,000 — registrations open. SailPoint Academy is an independent training provider, not affiliated with SailPoint Technologies.
Two things we will not claim, because the industry claims them constantly and they are not true. First, no training institute can issue official SailPoint certification — SailPoint Academy awards a SailPoint Academy certificate of completion, while official certification comes only from SailPoint's Identity University through proctored exams. Second, we provide placement assistance and career guidance, never a job guarantee; hiring decisions belong to employers.
Our lead trainer has 14+ years of enterprise IAM and SailPoint experience, which is the reason the curriculum is built around real deployment scenarios — a failed aggregation, a stalled certification campaign, a joiner event that provisioned the wrong role — rather than feature tours. Those scenarios are what interviews test, on either platform. You can review the full SailPoint IIQ course curriculum, compare the IAM career paths each platform opens, or simply see the teaching for yourself in a free session before paying anything.
Frequently Asked Questions
Learn the Engine First — Then Add the Cloud
Live online SailPoint IdentityIQ training — Rs. 25,000 flat, 2 months, all 14 modules, 100% live on Zoom, batch capped at 25, recordings in the LMS. SailPoint ISC founding batch starts 15 September 2026 — registrations open. Attend a free 60-minute demo first. No payment. No commitment.