Addition/Extension of entitlement sunset date to the target applications

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

8.3p5

Please share any images or screenshots, if relevant.

[Please insert images here, otherwise delete this section]

Please share any other relevant files that may be required (for example, logs).

[Please insert files here, otherwise delete this section]

Share all details about your problem, including any error messages you may have received.

One of the requirement we have is to send the sunset date of the entitlement request to the target system. We are able to achieve this in ADD Entitlement operation whereas during extensions, we are not able to send the new sunset date to the target as IIQ is not processing(By default, a sunset date change does not create a provisioning plan if done from manage access in IIQ.) it as update/extend to the target.

2

This is part of Webservice integration

3

You can add the sunset date in the plan while setting up ADD ENTITLEMENT operation in the before provisioning rule.

4

If you need code to update the plan with the sunset date, let me know. I will share that.

5

Hi Manish,
For addition of entitlement with the requested sunset date, we are able to provision the entitlement to the Webservice application along with sunset date. This is working fine.

When an extension (future sunset date) of already assigned access is requested from Manage user access page, we couldn’t get the plan in the before provisioning rule to process the request to target

6

Write a logger statement to print the plan XML in before provisioning rule and then raise a request through Manage User Access page.

Once the request is raised, checked the logs for the plan xml.

It should be showing up in before prov rule.

7

Hi Manish,
If an entitlement already exists for an identity, SailPoint does not generate a new provisioning policy - it simply cancels the request. So the plan will not reach the application before provisioning rule. Loggers are not getting printed.

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.