Identity governance and administration is a field where you cannot really learn by tinkering. You need a directory with real complexity, an entitlement model that has accumulated a decade of exceptions, a set of applications with incompatible provisioning interfaces, and an audit deadline. None of that fits on a laptop. That gives vendor training an unusually strong position, because there is genuinely nowhere else to learn the craft, and SailPoint is the dominant vendor in the space.
SailPoint University is built around role-based paths, split between Identity Security Leaders, Administrators and Engineers, and again between the cloud product and the older IdentityIQ. The role split is well judged. What a governance lead needs to understand about access certification campaigns and policy design is different from what an engineer needs to understand about connector development and rule writing, and lumping them into one track would serve neither. The product split is less well handled.
Two parallel catalogues covering broadly similar concepts through different implementations makes the catalogue hard to navigate, and a newcomer will spend real time working out which version of a course applies to the deployment they have inherited. The content is strong where it deals with governance as a discipline. Access certification campaigns, separation of duties policy, birthright access, joiner-mover-leaver processes and the perpetual tension between access hygiene and not blocking people from doing their jobs are all covered with some seriousness. This is the material that distinguishes identity governance from simple provisioning, and it is taught by people who have clearly been in the room when a campaign generated forty thousand review items and every manager rubber-stamped the lot.
What is missing, and the omission is the recurring pattern with vendor academies, is the organisational reality. Identity projects do not usually fail on technology. They fail because application owners will not describe their entitlement model, because HR data is not clean enough to drive joiner-mover-leaver automation, because the business will not accept the friction of a properly enforced approval workflow, and because the executive sponsor leaves eighteen months in. A course written by the vendor whose product is at the centre of that project is not going to dwell on the ways the project derails for reasons the product cannot fix.
It is the right material to learn from and the wrong material to plan a programme from. Commercially, the model is passes and annual subscriptions rather than per-course pricing, with instructor-led training units that expire within a year. Expiring units are a structure that exists to benefit the vendor's revenue recognition and to pressure customers into consuming training on the vendor's schedule rather than their own. Multi-year subscription discounts are offered, which is the standard inducement to lock in longer.
None of the numbers are published. SailPoint does offer some free training and a registration-gated open portfolio with foundational courses, which is better than the fully customer-gated academies I have come across, and worth acknowledging. It is not enough on its own to reach competence, but it is enough to decide whether the field interests you before anybody spends money. Three point three.
Essential if it is your job, competently constructed, honest about the technical difficulty of the domain, quiet about the organisational difficulty, and priced in a way that assumes an employer is signing the invoice.