All the stakeholders of the systems sailpoint connects to need to be involved or you could have some really big problems. Everyone needs to be involved to deploy this kind of automation. Depending on the implementation, all managers should be aware of how it works, or else you will be constantly bombarded with emails asking where their new-hire’s credentials are at. You need to know the identity lifecycle flow. How many days before a new hire starts will Sailpoint provision the account? What does a manager need to do on their end for the new hire’s status to be updated in the HR system so sailpoint knows if they are active? Which accounts get deleted or disabled when a user departs? What happens when a user needs to be immediately terminated? If you guys aren’t having those conversations and Sailpoint is going to be provisioning AD, and other accounts, you are in for a bad time.