A team is testing a new certification campaign in UAT and must be sure no real managers receive email, but a tester still wants to read each message in a mailbox. Which Email Notification Type fits?

Redirect to Email with a redirection email address for the test mailbox. Redirect to Email sends every IdentityIQ email to one configured address, so testers can read real messages while actual recipients receive nothing. Redirect to File writes messages to a file instead of a mailbox.

An administrator needs to debug the content of a new email template on a sandbox that has no working mail server. What should be configured?

Redirect to File, so the email text is written to a named file for review. The documentation recommends choosing Redirect to File to test email templates independently of the email server. IdentityIQ writes the email text to the specified file and sends nothing, so no mail server is needed.

Global Email Task Alerts are set to notify the Administrator on failure. Task A has its own notification set to the IT Helpdesk, and Task B has no task-level notification. If both fail, who is notified?

The IT Helpdesk for Task A and the Administrator for Task B. Task-level email notification settings take priority over the global defaults on the Notification Settings tab. A task without its own settings falls back to the global recipients.

Why does SailPoint recommend the HTTP / OAuth notification type for Microsoft Office 365?

Microsoft has deprecated the SMTP basic authentication method, and OAuth 2.0 is the supported alternative.. The Notification Settings documentation recommends HTTP/OAuth for Microsoft Office 365 as an alternative to SMTP/Basic, which Microsoft has deprecated. It uses OAuth 2.0 with token endpoints, a scope, and a client ID and secret.

Email Server Settings and Email Redirection | Free Guide 2026

Email Server Settings and Email Redirection

Email is how IdentityIQ reaches people. Approvers learn about work items, reviewers about certifications, managers about lifecycle events, and administrators about failed tasks. Objective 1.7 asks you to understand the configuration of email server settings. Objective 6.5 asks you to leverage email redirection for debugging. Both are on the same page, so this section covers them together.

Where the Settings Live

Go to gear icon > Global Settings > IdentityIQ Configuration > Notification Settings. The settings are stored in the SystemConfiguration object, and the email templates they reference are EmailTemplate objects (section 11.1).

The Four Email Notification Types

Type	Sends real email?	Typical use
HTTP / OAuth	Yes, through an HTTPS email service endpoint	Microsoft 365 and other providers that require OAuth 2.0
SMTP / Basic	Yes, through an SMTP host	Traditional on-premises mail relays
Redirect to Email	Yes, but only to one address	Test environments, template review, UAT
Redirect to File	No, the text is written to a file	Debugging templates and workflows without any mail server

HTTP / OAuth

This type uses the OAuth 2.0 protocol to send mail over HTTP or HTTPS. SailPoint recommends it for Microsoft Office 365, because Microsoft has deprecated the SMTP basic method. You register IdentityIQ with the OAuth provider and supply:

Email Service Endpoint, Token Endpoint, and Refresh Token Endpoint
Scope (the default /.default scope is the least restrictive)
Client ID and Client Secret

For Azure, the Microsoft Graph Mail.Send permission must be granted as an Application permission. A Delegated permission is not enough.

SMTP / Basic

Encryption: NONE, SSL, or TLS
Default SMTP Host and Default SMTP Port
Default From Address for all automatically generated notices
Username and Password for the SMTP host
Connection Timeout and Read Timeout in milliseconds. Session properties defined on a notification template take precedence over these values.

Settings Shared by Every Type

Maximum Email Retries – how many times to retry after a temporary error. Set it to 0 to disable retries.
Suppress Duplicate Emails – sends only one email of the same type to the same recipient at one time, for example one reminder instead of five. It is used only for certification-related email and is on by default.
Notification Templates – which template to use for each notification type.

Email Task Alerts

On the same tab, you can email a status report after tasks finish. Choose a frequency (Disabled, Warning, Failure, or Always), a template (the out-of-the-box Task Status template is the default), and recipients. The global setting is a default, and task-level notification settings take priority. For example, if the global default sends to the Administrator but Task1 is set to notify the IT Helpdesk, Task1 notifies the Helpdesk, and tasks without their own settings notify the Administrator. A task restarted by the Reanimator service after hanging may not send its email alert.

Email Redirection for Debugging (Objective 6.5)

Redirection is the safe way to test anything that sends mail.

Redirect to Email uses the same fields as SMTP/Basic plus a Redirection Email Address. Every IdentityIQ email goes to that single mailbox instead of its real recipients. Use it in development and UAT so that a test certification campaign does not email thousands of real managers.
Redirect to File needs only a Redirection File Name and a Default From Address. IdentityIQ writes the complete email text, including recipient, subject, and body, to that file and sends nothing. The documentation specifically recommends it for testing email templates independently of the email server.

A Debugging Routine

Switch the notification type to Redirect to File in a non-production environment.
Import or edit the email template you are testing.
Trigger the email: run the workflow, launch the certification, or use SailPoint's example "Test Email Sending" rule from the console with rule "Test Email Sending", after editing it for your template, recipient, and arguments.
Open the redirect file and check the rendered subject, body, Velocity variables, and intended recipient.
If the file looks right but real mail fails, the problem is the server settings: host, port, encryption, credentials, or OAuth permissions. If the file is wrong, the problem is the template or the workflow data passed to it.

SailPoint Certified IdentityIQ Engineer

3.4 Email Server Settings and Email Redirection

Key Takeaways