Access Request Submitted Trigger In Workflow To Take Action on it once the Request is Submitted

Identity Security Cloud (ISC) ISC Discussion and Questions
, , ,
1

Hello All,

We have a requirement to trigger a Form once the user submits an access request for a particular application. This form will have additional fields (i.e. training completed, date when the training was completed etc.) that user needs to submit, to help the approver decide. Now, since the Access Request Submitted trigger is not there in workflow, what could possibly be the triggering point. We cannot use LaunchPad.

2

Hello @Sandash !
Welcome to the Developer Community ! :tada:
As we don’t have ‘Access Request Submitted’ Trigger , the other way to trigger this is using event triggers .
In Event Triggers , we have Access Request Submitted | SailPoint Developer Community .
Subscribe this trigger and in workflow use External Trigger - Triggers - SailPoint Identity Services
This is a Response Required trigger which needs a response in return. While it is a little complicated to implement this is the workaround for this use case .
You will encounter errors for access requests when subscribed to this trigger and did not configured the event trigger fully.

Hope this helps!!

Thanks!

3

in that case will the subscription hold and pass all the infos to the workflow i.e. the recipient info, access request ID, basically the access request plan? because that is needed in the workflow.

4

Ofcourse , the plan will pass … for example

{
  "accessRequestId": "2c91808b6ef1d43e016efba0ce470904",
  "requestedFor": {
    "type": "IDENTITY",
    "id": "2c91808568c529c60168cca6f90c1313",
    "name": "William Wilson"
  },
  "requestedItems": [
    {
      "id": "2c91808b6ef1d43e016efba0ce470904",
      "name": "Engineering Access",
      "description": "Access to engineering database",
      "type": "ACCESS_PROFILE",
      "operation": "Add",
      "comment": "William needs this access to do his job."
    }
  ],
  "requestedBy": {
    "type": "IDENTITY",
    "id": "2c91808568c529c60168cca6f90c1314",
    "name": "Rob Robertson"
  }
}

Please refer to the event trigger that I mentioned in the previous reply for more information.
Thanks

5

In your last statement, you had mentioned that we will encounter errors. So we ran into same issue and seeing contact helpdesk error. Why is it so and how to resolve it. We have simplified the workflow with just 2-3 steps. But still facing the same issue. And what do you mean by configuring the event trigger fully?

6

Hello @Sandash

Please help me with following :

  • Is access request failing with error 'contact helpdesk’ for all the access items or of a specific source [Please test and confirm]
    *Access Request Submitted is a ‘Required Response’ trigger which means , when an access request request is triggered , this event trigger will expect a response information[whether this request has been approved or denied] . This is achived by making a POST call with pay load :
{
  "approved": true,
  "comment": "This access has passed preliminary approval.",
  "approver": "AcmeCorpExternalIntegration"
}

As mentioned earlier please refer to this documentation for full implementation : Access Request Submitted | SailPoint Developer Community

1 Like