Access request submitted workflow

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hello All,

Need advice,

When an access request is submitted, the workflow should notify the approver who is responsible for reviewing the request. Could you please explain how this can be achieved in a workflow? After the access request submitted trigger, how do we determine to whom the request is pending? Should the next steps be “Get Pending Access Request,” then “Get Identity,” followed by sending an email? wait for 5 days and send a reminder again to the approver and user and at last cancel the request.

Thanks,
Anirban

2

Hi @AllIT

Can you help me understand the need of workflow approach here ?

The flow you mentioned happens by default with OOTB features with some minor changes to access request configuration .

Is there something that cannot be achieved with OOTB, if so, please elaborate the flow for better understanding .

Thank you

2 Likes
3

@AllIT you just need to update access-request configuration via API and automate this email notification with below attributes update

“approvalReminderAndEscalationConfig”: {
“daysUntilEscalation”: 0,
“daysBetweenReminders”: 5,
“maxReminders”: 1,
“fallbackApproverRef”: {
“type”: “IDENTITY”,
“id”: “5168015d32f890ca15812c9180835d2e”,
“name”: “Alison xyz”,
“email”: "alison.XXX@identitysoon.com”}

4

Hi @AllIT,

Building on what @sidharth_tarlapally and @sagar_kamalakar mentioned, the OOTB Access Request Configuration is indeed the recommended approach for your use case.

To add, the email template that is automatically sent to all the approver is: Access Request Reviewer Email Template - SailPoint Identity Services
This version 1 email template can be customized/modified using HTML, inline CSS and Apache Velocity for dynamic variables. The same email template is used as reminders.

Workflows with trigger: Access Request Submitted | SailPoint Developer Community could be considered if you need: -

  1. Notifications to external systems (Slack, ServiceNow, .etc.)
  2. Conditional approval logic based on access item or recipient.
  3. OOTB access request configuration like reminders, email template do not support your use case.

:slight_smile:
Thanks,
Amar