SailPoint identity certification failed with error "manager not found for identity" fix

TL;DR

Repair the manager link on the identity before you reassign items by hand, because hand assignment hides a broken HR feed that will fail the next campaign too. Find the identities named in the error, check their manager attribute against the HR source, fix the mapping or the source value, refresh the identities, and only then relaunch or resume the campaign. A campaign built on refreshed identities assigns cleanly and stays defensible in audit.

manager not found for identity

Use this when

• A SailPoint certification generates errors for identities with no manager.
• Campaign items sit unassigned while other departments certify normally.
• New joiners and transferred staff dominate the failure list.

Not for this skill when

• Managers exist but refuse or ignore tasks. That is escalation and reminder handling, not data repair.
• The campaign itself will not activate. Work the activation error first.

Steps

1. Export the list of identities named in the error from the campaign or the certification task view and save it as the working set for this fix. Verify: every failing identity is on one list with its department and source system.
2. Open several failing identities in IdentityIQ or Identity Security Cloud and inspect the manager attribute, noting whether it is empty, holds a stale name or points at a disabled identity. Verify: each sampled identity is classified as empty, stale or disabled manager.
3. Compare those values with the HR source record for the same employees, checking employee identifier matching between the HR feed and the identity cube. Verify: the source of truth value is known for each sampled identity.
4. Fix the aggregation or transform rule that maps the HR manager field to the identity manager attribute, covering the empty and stale cases found, rather than editing identities one by one. Verify: the corrected rule produces the right manager on a test aggregation preview.
5. Run identity refresh for the affected identities and confirm the manager attribute now resolves to an active identity who can receive tasks. Verify: refreshed identities show an active manager in the identity view.
6. Resume or regenerate the campaign items for the working set, confirm tasks appear in the managers inboxes, and have one manager open and decide an item end to end. Verify: previously stuck items are assigned and one real decision saves successfully.
7. Add a pre-campaign data check that lists identities with no active manager a week before launch, so the repair happens before certification opens. Verify: the check runs and its output is attached to the campaign preparation record.

Why it happens

SailPoint routes most certification items through the manager relationship stored on the identity. That relationship is only as good as the HR aggregation that fills it: a blank manager field, a manager who left, or an identifier mismatch between systems all leave the identity with nobody to certify it. The campaign engine reports the symptom as manager not found and stops on those items. Fixing the feed mapping and refreshing identities repairs every affected item at once, while manual reassignment only papers over one campaign.

Variants and edge cases

SailPoint certification items unassigned to reviewer

The inbox phrasing of the same fault. If the affected users share a department or source, suspect the manager feed before the campaign settings.

identity has no manager in IdentityIQ

The data phrasing. Check the aggregation task results for skipped or unmatched records with the same employee identifiers.

campaign generates tasks for some departments only

Partial failure almost always maps to a partial feed. Compare successful and failing departments in the HR source.

Edge cases to check before closing the review cycle:

• Contractors often have a sponsor instead of a manager. Route those identities to the sponsor or owner group explicitly.
• A manager on leave still counts as found. Use delegation dates rather than treating leave as a data error.
• Recently terminated managers linger in cached identity data. Refresh before concluding the feed is wrong.

Compatibility: SailPoint IdentityIQ and Identity Security Cloud certifications, HR aggregation from common HRIS feeds, manager based certification campaigns.

Provenance

Resolved from the public thread: https://vectle.com/posts/pst_uG59iCPSrDDxI50t2AFXXg

Resolved from the public thread: https://vectle.com/posts/pst_uG59iCPSrDDxI50t2AFXXg

Thread query: SailPoint identity certification failed with error "manager not found for identity" fix

TL;DR: Repair the manager link on the identity before you reassign items by hand, because hand assignment hides a broken HR feed that will fail the next campaign too. Find the identities named in the error, check their manager attribute against the HR source, fix the mapping or the source value, refresh the identities, and only then relaunch or resume the campaign. A campaign built on refreshed identities assigns cleanly and stays defensible in audit.