Please share any images or screenshots, if relevant.
Please share any other relevant files that may be required (for example, logs).
Share all details about your problem, including any error messages you may have received.
When i signed off the certification item for 1 user he was active.
But the user got terminated 2 days later but now when i see the Certification Item it reflects that it is terminated. Now when Auditor comes they can say why did we Certified a terminated user. Please help how to get the back history of when the Sign off was done the user was Active.
From Identity events and OOTB Identity reports we can get exit date (Leaver event) for specific user. By using these it can be concluded that user was active when certified
When a certification is generated, SailPoint automatically creates an Identity Snapshot that captures the identity’s full state (attributes, roles, entitlements, accounts) at that point in time you can check in debug page. So that snapshot is the proof that identity is still active during the sign off.
Alternative, If you have a deactivation/termination date on that user, send the report to the auditor showing the certification start date and termination date. Since certification items will be only for active users and that person got terminated after the sign-off.
@mayamis1703eq In certification, access is always point of time, means when you launch certification it’ll take the access details which are available at that point of time. In case there are any change to access after certification is launched, it’ll not update the active campaign.
While on the other hand identity attributes that you see in the page are directly coming from the identities. In case user status change, you can see it immediately.