Which of the following represents where access held by identities is certified?

The correct answer is Identity Certification, as it specifically refers to the process of reviewing and validating the access rights held by users or identities within the organization. During identity certification, stakeholders examine the access permissions granted to each identity to ensure they are appropriate and comply with security policies. This process helps in managing risks associated with unauthorized access and ensures that users only retain access necessary for their roles.

In comparison, the other options highlight different aspects of access management within the SailPoint framework. Role Composition Certification focuses on certifying access based on roles rather than individual identities. Access Items Certification pertains to specific items of access but does not capture the broader scope of identities and their associated access. Manager Campaigns involve certifications that managers conduct on team members' access but do not directly indicate a comprehensive review of all identities.