In SailPoint Identity Security Cloud (ISC), transforms are how you shape raw source data into clean identity attributes. If you are moving from IdentityIQ (IIQ), think of them as the configuration-first replacement for many small attribute rules.
What a transform is
A transform is a JSON object that takes an input value, applies an operation and returns a new value. You attach transforms to identity profile mappings, so every identity gets attributes calculated the same way.
Common transform types
- accountAttribute: reads an attribute from a specific source account.
- lower / upper: changes letter case, for example for email addresses.
- concat: joins values, such as first and last name.
- substring / replace: trims or cleans part of a value.
- lookup: maps one value to another using a table, for example department codes to names.
- firstValid: returns the first non-empty value from a list, useful when data comes from several sources.
- conditional: returns different values depending on a comparison.
- dateFormat: converts dates between formats.
- static: returns a fixed value or a simple template.
Transforms can be nested, so the output of one becomes the input of another.
A simple way to think about it
Start from the attribute you want on the identity, then work backwards: which source holds it, what cleaning it needs, and what to do when it is missing. That usually tells you which transforms to chain.
Tips
- Keep transforms small and reusable, and name them clearly.
- Use firstValid to handle missing data instead of complex conditions.
- Test with real sample identities before applying a change to everyone.
Full guide: SailPoint ISC transforms explained. For live, hands-on ISC training, see the SailPoint ISC course at IAM Careers.
This training is provided by IAM Careers and is not affiliated with, authorized by, sponsored by, or endorsed by SailPoint Technologies, Inc.
