Add email attribute and email template to Business Role Form

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

8.3

Please share any images or screenshots, if relevant.

image
image1920×1719 117 KB

Please share any other relevant files that may be required (for example, logs).

[Please insert files here, otherwise delete this section]

Share all details about your problem, including any error messages you may have received.

Out team would like to put a custom attribute for email to go out to 3rd party into the already present business role form. But, I cannot find the actual form in the objects list. Where can I manipulate this form under Roles>Create Role?

2

If you need a placeholder on Role(Bundle) objects to store this information you can just add a role extended attribute. You can go to Global Settings → Role Configuration and add a new role attribute and mark it as editable so that you will start to see this on Role create and modify. This will though apply to all types of roles and not just business roles. I don’t think there is another good way to modify Role form.

3

That has been completed, but it’s the next step that I am having a difficult time with. Once a specific created business role has been approved and assigned, it would be good to have whatever email address present in the made attribute send a email to a 3rd party stating extra provisioning is needed for this specific role.

4

You may be able to add a step to your Role Modeler workflow for this notification. All Role creates and updates use this workflow and you can customize this workflow to handle your requirement.
Global Settings → IdentityIQ Configuration → Role Tab

image
image984×641 57.5 KB

2 Likes
5

I am speaking about once a user is assigned a role and it is approved. Then the email goes out to the 3rd party for further provisioning. I thought that the Lifecycle Manager->Business Processes->Request Access is where I would make the necessary change somewhere for this:

image
image1106×390 20.2 KB

Should I send my workflow for thi as well?

1 Like
6

OK I thought you need to send email when the Role is created with that attribute set. For Role assignments you will have to customize the Request Access workflow as you included in your last screenshot.

7

If I include the necessary workflow, can u assist with where to put the role attribute code that will be the email attribute? I After the workflow has completed, i am trying to get it to send a notification to the completed process, but have it send the notification based on what in that roles email attribute.

8

In LCM provisioning workflow that you highlighted in screenshot above you can add a step before end Step to send email. You can get the role name from plan or identityRequestId (Identity Request Object). Here is a sample for how to get that from identityRequestId. I have not tested this code and only put it as a sample for your reference.

					IdentityRequest idRequest = context.getObjectByName(IdentityRequest.class,identityRequestId);
					List accessRequested = new ArrayList();
					if(idRequest != null){
						if(idRequest.getItems() != null){
							for(IdentityRequestItem requestItem : idRequest.getItems()){
								if(requestItem != null && !requestItem.isExpansion()){
									if("IIQ".equalsIgnoreCase(requestItem.getApplication()) || "IdentityIQ".equalsIgnoreCase(requestItem.getApplication()) ){
									if("Add".equalsIgnoreCase(requestItem.getOperation())){
									String roleRequested = requestItem.getValue();
									if(roleRequested != null){
									Bundle roleReqObj = context.getObjectByName(Bundle.class,roleRequested);
									if(roleReqObj != null){
                                    //Get Role extended attribute and send email 
									
									}
								}
							}
						}
					}
				}
			}
		}