Hello Community, I am using IdentityIQ version 8.4 and working on the expiration of work items after a defined period of time as part of the access request approval process. When the Check Workitem Expired task runs (return null), provisioning does not occur, but the workitem status shows complete…

Hello, I’ve worked on this use-case recently, configured the escalation rule in the Provisioning Approval Subprocess workflow like below: <Variable initializer="Test-Rule-Escalation" input="true" name="workItemEscalationRule"> <Description>The rule used to assign a new ownder during escalatio…

In my case, there will be no escalation of the item, only expiration within a set period. <Source> import org.apache.log4j.Logger; Logger log = Logger.getLogger("org.example.rules.escalation"); if (item != null) { log.info("Expired WorkItem timeout: " + item.getName()); } re…

@helanprates1 - what is your requirement when the workitem expired? Aceess request should not show successfull?

[image] Helan Prates: Hello Community, I am using IdentityIQ version 8.4 and working on the expiration of work items after a defined period of time as part of the access request approval process. When the Check Workitem Expired task runs (return null), provisioning does not occur, but the work…

I see that you are using escalation rule <Arg name="workItemEscalationRule" value="Rule-Expire-WorkItem-On-Timeout"/> In our configuration, we have set up two reminder notifications to be sent every three days. This means the first reminder is issued on the 3rd day (72 hours) after the work item i…

Hi @helanprates1 you have to add this transition in approval step <Transition to="end" when="script:("Expired".equals(workflow.get("lastApprovalState")))"/> or <Transition to="end" when="script:lastApprovalState.equals("Expired")"/> and in finalize step, you have to…

Exactly that! The work item is expiring as scheduled, but in the interface it appears as completed and successful (green). The user who requested the item might think that access was granted. Therefore, I would like the work item to expire and appear in the interface as rejected or canceled - Expire…

@helanprates1 if ("Expired".equalsIgnoreCase(lastApprovalState)) { IdentityRequest ir = context.getObjectById(IdentityRequest.class, irId); if (ir == null) { log.error("Finalize: IR not found for id=" + irId); return; } // Set the custom state ir.setState("end - Expired"); context.saveObject(…

Hi @helanprates1 , Looking like your use case requires one more approval. Instead of writing the access request status explicitly, add one more approval for the manual work item team queue, since they are not taking any action, or they can accept or reject at the approval level. Once they approve i…

kumar ranjan has given you the code sinipped, can you please try and see if it works for you??

Access request shows as completed and successful even with expired status

IdentityIQ (IIQ) IIQ Discussion and Questions

Peddapolu (Venkateswar Rao Peddapolu) March 16, 2026, 4:55am 13

Hi @helanprates1 try this one for your use case : Manual Task Work Item - Closed Inccomplete/Rejected - #5 by Peddapolu

Thanks,

PVR.

Topic		Replies	Views
Access Request shows as completed upon expiry IIQ Discussion and Questions identityiq , provisioning , access-requests	15	166	March 9, 2026
Workitem rejected vs expired IIQ Discussion and Questions identityiq , provisioning	4	106	January 17, 2026
WorkItems getting Expired Early IIQ Discussion and Questions workflows , identityiq , provisioning	8	378	August 9, 2025
Expired Workitems showing as denied on Access Request IIQ Discussion and Questions identityiq , access-requests	1	36	January 31, 2026
Mandatory Expiration Dates for Access Requests in ISC with Workflows Community Blog workflows , identity-security-cloud	5	1572	December 18, 2025

Access request shows as completed and successful even with expired status

Related topics